Privacy Policy

Loopy Farm for mobile · Last updated: November 4, 2026

This Privacy Policy explains how Earthquake s.r.o. (publishing as Butterbread Games, "we", "us", "our") collects, uses, stores, and protects personal data when you play Loopy Farm on mobile devices. We act as the data controller under Regulation (EU) 2016/679 (GDPR).

The browser game at loopyfarm.com has its own policy. It is a separate game with separate accounts.

1. Personal Data We Collect

• Account Data: When the game first starts, a pseudonymous guest account ID is generated so that your farm is saved online. If you choose to create an account, we also keep your email address, and whether you asked for news by email. Passwords are handled by Google Firebase Authentication, which stores only a hash: we never see or store your password.
• Game State & Progression: Your saved farm (machines, fields, buildings, crops, tasks, season progress), your coins, gems and parts, a log of how those balances changed and what gems were spent on, and how you play: when and for how long (the start and end of each visit), and when you reached each stage of the game.
• Device & Integrity Signals: A random player ID made by the game on your device (shown in Settings, for support), the kind of device (Android or iOS), and whether the game passed Google Play's integrity check when it last saved. The Google Play Integrity API checks that this copy of the game and your device are genuine, to prevent cheating and bots; our server keeps only the result.
• Purchase History: What you bought, when, and the Google Play order number (GPA ID). We never receive or process card or bank details.
• Server & Technical Logs: IP address, timestamp, and HTTP request headers generated during calls to our backend services, for security and operational monitoring.
• Support Communications: Your email address and what you wrote, if you contact player support.

Loopy Farm has no ads and no third-party advertising or analytics SDKs, builds no ad-tracking profiles, and does not ask for your location, contacts, photos, camera, or microphone.

2. Purposes and Legal Bases for Processing

• To Provide the Game (Art. 6(1)(b) GDPR, performance of contract): Managing your account, saving your farm online and showing it on your devices, delivering what you buy, and showing the game's news.
• Security, Anti-Cheat & Stability (Art. 6(1)(f) GDPR, legitimate interest): Checking the game's integrity through Google Play, preventing cheating and abuse, fixing problems, and answering support requests.
• Game Balancing & Statistics (Art. 6(1)(f) GDPR, legitimate interest): Working out totals from the data above, such as how many players come back, how long the stages of the game take and what gems are spent on, to balance the economy and the game's pace. We use the results only as totals: not to advertise to anyone, and not to make decisions about individual players.
• Legal & Tax Compliance (Art. 6(1)(c) GDPR, legal obligation): Keeping records of purchases for tax and accounting under Slovak law.
• News by Email (Art. 6(1)(a) GDPR, consent): Only if you tick the box when you create an account, or turn it on in Settings: news about Loopy Farm and our other games. It's optional, and the game is the same without it. You can withdraw your consent at any time by turning it off in Settings. We keep your choice, when you made it and the words we asked with, so that we can show what you agreed to.

3. Third-Party Processors & International Transfers

We do not sell personal data or share it for advertising. Our infrastructure provider acts as a data processor under a binding Data Processing Agreement (Art. 28 GDPR):

• Google Ireland Limited / Google LLC (Firebase & Google Cloud Platform): Provides authentication, the database (Firestore, located in Frankfurt, Germany / europe-west3), the game's server functions and the news.

Google Play (Google Commerce Limited) distributes the game, takes payments and runs the integrity check. For your Google account and your payments, Google's own terms and privacy policy apply.

Where Google processes data outside the European Economic Area (EEA), including in the United States, transfers are safeguarded under the EU–U.S. Data Privacy Framework (DPF) adequacy decision or standard contractual clauses (SCCs) approved by the European Commission.

4. How We Protect It

Everything between the game and our servers travels encrypted over HTTPS. A signed-in player can read only their own farm and balances, and only our server functions can change them. Passwords are stored only as a hash by Firebase Authentication. Access to the game's data is limited to the people who run the game.

5. Data Retention

• Game Saves & Accounts: Kept as long as your account exists. We do not delete inactive accounts. You can delete yours at any time: see how to delete your account.
• Balance Logs: The log of how your coins, gems and parts changed is kept for up to 13 months, entry by entry, then deleted automatically.
• Automated Backups: Kept for 7 days, so deleted data disappears from them within 7 days.
• Purchase Records: The account ID, product, time and order number of each purchase are kept for 10 years, as Slovak accounting and tax law requires, also after an account is deleted.
• Support Emails: Kept for up to 2 years after your request is resolved, unless they are needed for an active dispute.

6. Your Rights Under GDPR

Under Articles 15–22 GDPR, you have the right to:

• request access to your personal data;
• have incorrect data corrected;
• have your data erased ("right to be forgotten");
• restrict processing;
• receive your data in a structured, machine-readable format (portability);
• object to processing based on legitimate interests (Art. 21 GDPR);
• withdraw your consent at any time, which doesn't affect anything we did before.

To exercise your rights, email hello@loopyfarm.com with your player ID from the game's Settings. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. Ours is:

Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic)
Hraničná 12, 820 07 Bratislava 27, Slovakia
Website: dataprotection.gov.sk

7. Children's Privacy

Loopy Farm is not directed to children under 13, and we do not knowingly collect their personal data. In some EU countries you can only give consent yourself from a higher age, up to 16 (in Slovakia, 16): if you are younger, ask a parent or guardian before you turn on news by email or buy anything. If you believe a child under 13 has an account, contact us at hello@loopyfarm.com and we will delete the account and its records.

8. Changes to This Policy

If this policy changes, we update this page and the date at the top. If a change matters to you, we also say so in the game's news.

9. Contact Information

• Controller: Earthquake s.r.o. (publishing as Butterbread Games)
• Company ID (IČO): 46 969 071
• Address: Košická 43C, 821 08 Bratislava, Slovakia
• Email: hello@loopyfarm.com