Privacy Policy
Last Updated: September 25, 2026
Introduction
This Privacy Policy describes how Three Gingers Holdings LLC ("we," "us," or "our") collects, uses, and shares information about you when you use our website and mobile applications, including Rock & Roll: Pet Rock (each an "App").
We are committed to protecting your privacy, especially the privacy of children under 13. This policy is designed to comply with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and the UK Age-Appropriate Design Code.
Information We Collect
Information You Provide Directly
- Account Information: Username (which you choose), rock name(s), display avatar
- Parent Contact Information (for users under 13): Parent or guardian email address, used solely for verifiable parental consent and account recovery
- Purchase Information: We do not collect or store payment card details. All in-app purchases are processed by Apple's App Store or Google Play, and we receive only transaction confirmations
- Optional Profile Details: Only if you choose to provide them
Information Collected Automatically
- Device Information: Device type, operating system version, unique device identifier (for anti-cheat purposes only)
- Gameplay Information: Actions within the App, minigame scores, in-game currency balances, items owned, friends list
- Technical Information: Crash reports, performance metrics, anonymized error logs
Information We Do NOT Collect
- We do NOT collect precise geolocation data
- We do NOT collect contacts unless you explicitly authorize sharing via the "Add Friends" feature
- We do NOT use behavioral advertising or third-party ad tracking
- We do NOT sell any user information to third parties
- We do NOT collect voice recordings or biometric data
- For users under 13, we do NOT collect personal information beyond what is strictly necessary for the App to function
How We Use Information
We use collected information to:
- Provide and maintain our applications
- Save your progress and rock across devices
- Enable social features (friends, trades, competitions) where you have opted in
- Detect and prevent cheating, fraud, or abuse
- Send you push notifications about your rock (which you can disable)
- Improve our applications through anonymized analytics
- Comply with legal obligations
Children's Privacy (COPPA Compliance)
If you are a parent or guardian of a child under 13:
- We require verifiable parental consent before collecting any personal information from your child beyond what is strictly necessary
- Chat features are limited to pre-selected phrases and emojis for users under 13 by default; free chat with friends is disabled unless a parent opts in
- We do not permit users under 13 to share personal information publicly within the App
- Parents may review, modify, or request deletion of their child's information at any time by contacting [email protected]
- We retain children's data only as long as necessary to provide the App
- We do not condition a child's participation in an activity on the child's disclosing more personal information than is reasonably necessary
To request access, correction, or deletion of your child's data, email [email protected] with the subject line "COPPA Data Request" and include:
- The child's username
- Verification of your parental relationship
- The nature of your request
We will respond within 30 days.
Information Sharing
We do not sell, rent, or trade personal information. We share information only in these limited circumstances:
- Service Providers: Firebase (Google) provides our backend infrastructure. Firebase's privacy practices are governed by Google's privacy policies. We have configured Firebase in compliance with COPPA requirements
- Legal Requirements: If required by law, court order, or governmental authority
- Business Transfers: In the event of a merger, acquisition, or sale of assets, information may be transferred, subject to notice and consent where required
- Aggregated Data: We may share anonymized, aggregated statistics that cannot identify individuals
Data Retention
- Active accounts: Data retained while the account is active
- Inactive accounts: Data may be deleted after 24 months of inactivity
- Children's data: Retained only as long as necessary; deleted upon parental request within 30 days
- Backups: May persist for up to 90 days after deletion for disaster recovery purposes
Your Rights
Depending on your location, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information
- Object to certain processing
- Data portability
- Withdraw consent for optional processing
To exercise these rights, email [email protected].
California residents have additional rights under the CCPA. EU/UK residents have additional rights under GDPR.
Security
We implement reasonable technical and organizational measures to protect information, including:
- Encryption in transit (TLS/HTTPS)
- Server-side data protection
- Access controls
- Regular security reviews
No system is 100% secure. We will notify affected users promptly of any breach affecting their personal information.
Third-Party Services
Our applications use the following third-party services:
- Firebase (Google): Authentication, database, analytics — configured for COPPA compliance
- Apple App Store / Google Play: In-app purchases (governed by their respective privacy policies)
- Apple Push Notification Service: Push notifications
Links to these providers' privacy policies:
- Firebase: https://firebase.google.com/support/privacy
- Apple: https://www.apple.com/legal/privacy/
- Google: https://policies.google.com/privacy
International Data Transfers
Our servers are located in the United States. If you access our applications from outside the U.S., your information may be transferred to and processed in the U.S. We rely on Standard Contractual Clauses and other lawful transfer mechanisms as required.
Changes to This Policy
We may update this policy. Material changes will be posted in the App and communicated via email where required. Continued use of our applications after changes constitutes acceptance.
Contact Us
For COPPA-related inquiries, use subject line "COPPA Inquiry" for expedited handling.