Dragon Poop Privacy Policy
Effective date: October 18, 2026
Who we are and what this policy covers
Dragon Poop is operated by Syntax Circus, LLC ("we," "us," or "our"), based in the United States. We are responsible for the information we process as described in this policy. It covers the Dragon Poop game on iOS and Android, the website at www.dragonpoop.com, and support communications with us.
The game does not require a game account. Its progress and settings are stored locally. That does not mean no information leaves your device: when you first open the game it asks you to confirm you meet the minimum age and agree to our Terms and this policy, and we keep a record of that agreement; purchases use the app stores and RevenueCat; release builds send crash diagnostics after you have agreed; and our website uses the analytics described below.
Age screen and agreement record
Dragon Poop is for players 13 and older. When you first open the game, a neutral age screen asks for your age. The age you enter is used only on your device to decide whether you can continue; it is never stored or sent to us. If you are 13 or older and agree to the Terms of Use and this Privacy Policy, the game sends an agreement record to our own website service (www.dragonpoop.com). The record contains the product name, your platform (such as iOS or Android) and app version, a random installation ID generated by the game (our server stores only a one-way, keyed hash of it, not the ID itself), the versions of the Terms and Privacy Policy you accepted, a statement that you confirmed you meet the minimum age, and the time you accepted. It does not contain your age or birth date, and we do not store your IP address in this record. If you are offline when you accept, the game keeps the record on your device and sends it later.
We keep agreement records for 3 years, then delete them. You can delete your record at any time in the game: open Settings, tap Delete my agreement record, and confirm. The game asks our website service to delete every agreement record for your installation and clears the agreement and installation ID from your device; you will be asked to agree again the next time you open the game, and crash reporting stays off until you have agreed again. Because records are stored under a one-way hash of the installation ID, we cannot find a record from an email request that does not include the game's installation ID, so the in-game control is the way to delete it. Deleting the record does not delete crash reports or purchase records, which are covered below.
Game progress and settings
The game stores mission completion, replay goals, difficulty, selected cosmetics, settings, the age and agreement state described above (including the random installation ID), and related progress in local app storage. Purchase ownership may also be cached locally so a previously verified purchase can work offline.
We do not operate a cloud-save service for your game progress. Device backups and transfers are controlled by your operating system and settings; we do not promise they will preserve or restore your save. Clearing app data, uninstalling, or changing devices can lose local progress. Restoring a store purchase does not restore mission progress or earned rewards.
Purchases and purchase-support records
Apple or Google processes payments through its store. We do not receive your payment-card number, banking details, or store-account password.
We use RevenueCat to validate purchases, determine ownership, and restore purchases. The purchase service is not started until you have passed the age screen and agreed to the Terms and this policy. The game uses an SDK-managed anonymous customer identifier rather than a named game account. RevenueCat processes identifiers, product and transaction details, purchase/refund status, and information needed to operate its purchase service. These identifiers are not your name, but they can distinguish purchase records and should not be treated as proof that all data is anonymous. Network services also receive your connection IP address when you contact them.
Our server retains normalized purchase records for sales reporting, reconciliation, fraud prevention, and purchase support. They can include the RevenueCat customer identifier, store transaction and event identifiers, product, store, purchase environment, event/purchase dates, original currency and amount when available, USD amounts, refund status, and ownership/entitlement snapshots. We do not retain subscriber attributes or the complete webhook payload in this sales ledger.
If you contact us about a purchase, information you provide may let us associate a purchase record with your support correspondence. We use it to investigate your request and maintain the purchase and support records described here.
Crash reports and technical diagnostics
Release builds with crash reporting enabled use the Sentry SDK, configured to send reports to GlitchTip, an error-reporting service we operate. Crash reporting is only started after you have passed the age screen and agreed to the Terms and this policy; it is never started for someone who was blocked by the age screen. Reports may contain a stack trace, error details, app version/build, device and operating-system information, an installation or session identifier generated by the SDK, and technical context or log messages around a failure. The SDK is configured not to include default personally identifying information. This is a data-minimization setting, not a guarantee that a technical report can never contain personal information.
The receiving server sees the connection IP address. We use diagnostics to find and fix errors and keep the game and services working. We do not use crash reports for advertising. Our website and API may also produce operational logs and diagnostics for reliability and security.
Hidden diagnostics screen
The game's Settings screen contains a hidden diagnostics screen, reached by tapping the version number seven times. It exists for our own testing and support and is present in store builds. In store builds it only shows technical information about the app (version, build, environment, service status and a short recent log) and lets you copy that information to your clipboard so you can send it to support if you choose. Nothing is sent automatically, and the copied text has file paths, link query strings, tokens and identifiers removed before it is shown. Internal test builds that are never distributed through the stores add developer toggles. The screen does not grant purchases or content, and it does not skip the age screen or agreement. You do not need to use it.
Website visits and Umami
Our web servers process requests and security/operational logs. These may include an IP address, requested URL, timestamp, browser or user-agent information, response status, and error details.
The website uses Umami, self-hosted by us in the United States at umami.syntaxcircus.com, to understand how the site is used. Standard website analytics include page views, referring pages, browser and operating system, device type, and country-level information. Umami's standard tracker does not use analytics cookies or track visitors across unrelated websites. Requests to our analytics service still reach our infrastructure, which receives the connection IP address.
Umami loads without an analytics-consent prompt in our current configuration and is configured to respect your browser's Do Not Track signal. We do not use Google Analytics, Google Tag Manager, advertising pixels, or advertising identifiers on this website. Nothing in the game uses Umami, and the game has no advertising or gameplay-analytics SDK; the agreement record, purchase reporting and technical diagnostics are separate activities described above.
Necessary technologies used to deliver and protect the website may still be present. A privacy-choice cookie, if stored by our site's privacy controls, remembers those choices for up to 180 days; it is separate from Umami's cookie-free tracker. We treat a Global Privacy Control (GPC) signal from your browser as an opt-out of any sale or sharing of personal information; as stated below, we do not sell or share personal information in any case. Do Not Track affects website analytics, not the requests and logs needed to serve or secure the site, purchase verification, or game crash reporting.
If you contact us or join Discord
If you email us, we receive your email address and the message, attachments, device details, or purchase evidence you choose to send. We use this information to answer you, investigate problems, and keep relevant support records. Please do not send passwords, full payment-card details, or unrelated personal information.
Discord is optional and operated by a separate company. Following our Discord link takes you to its service and privacy practices. Messages posted in public community channels can be seen by others. Use email rather than a public channel for purchase details or privacy requests.
How we use and disclose information
We use information to deliver and restore purchases, operate and secure the game and website, diagnose problems, understand website traffic and sales, prevent fraud or abuse, respond to support and privacy requests, and meet legal and accounting obligations.
We disclose information to providers as needed for those activities, including RevenueCat, Apple/Google for their store services, and communications providers used to handle email. We host our website, API, error-reporting and analytics services ourselves, and we do not use other third-party processors for the game. Discord processes information when you choose to use it. We may disclose information to professional advisers, when required by law, or when reasonably necessary to protect rights, safety, or our services. If the business or game is transferred, relevant records may transfer to its successor subject to applicable law.
We do not sell personal information or share it for cross-context behavioral advertising. We do not use it to make automated decisions with legal or similarly significant effects on you.
Legal bases and international processing
Where applicable law requires a legal basis, we rely on performing the transaction or service you request, our legitimate interests in reliability, security, support and service improvement, and in being able to show that you confirmed the minimum age and agreed to our terms (the agreement record), and compliance with legal obligations. Where consent is required for a particular activity, that activity must be handled on that basis.
We are based in the United States. Our Umami instance is hosted in the United States; other providers may process information in the United States and other countries. Laws there may differ from those where you live. Transfers are subject to applicable data-protection requirements. Contact us for information about the relevant providers and safeguards; we do not claim that a particular transfer arrangement applies to every provider or every request.
Retention
Crash events in our GlitchTip service are automatically deleted after 90 days. Agreement records are kept for 3 years (counted from the earlier of your acceptance time and the time we received the record) and are then deleted, or earlier if you delete them in Settings. Nothing is stored for someone who is blocked by the age screen. These periods do not describe every server log, backup, analytics record, or purchase record.
Our self-hosted Umami currently uses its default retention behavior: analytics records have no automatic expiry and remain until we manually delete them.
Purchase and entitlement records are retained as needed to maintain access, resolve disputes, and meet financial, legal, and fraud-prevention needs. Sales and accounting records are kept for about seven years as required for accounting, and are then deleted or anonymized. Support correspondence and operational/security logs are retained for their relevant support, reliability, security, and recordkeeping purposes. Backups may follow different schedules and may persist beyond deletion from an active system. We consider the purpose, sensitivity, applicable requirements, and continuing need when deciding whether to retain or delete records.
Security
We use reasonable technical and organizational safeguards, including encrypted network connections for our public services. No system can guarantee complete security. Please avoid including unnecessary personal information when reporting a problem.
Your choices and rights
You can use the free game without a game account or purchase, choose not to join Discord, control local app data through your device, and enable Do Not Track for website analytics. Deleting local app data does not automatically delete records held by us, RevenueCat, or a store, and can permanently lose game progress.
Depending on your location and the laws applicable to us, you may have rights to access, correct, delete, or obtain a portable copy of personal information, object to or restrict certain processing, appeal a decision on a request, or withdraw consent where processing relies on consent. These rights can have lawful exceptions, including records needed for legal obligations or disputes. We will not discriminate against you for exercising applicable rights.
You can delete your agreement record yourself in the game (Settings > Delete my agreement record). For any other request, email support@syntaxcircus.com with the subject Dragon Poop privacy request. Describe the request and the information that could help locate relevant records. We respond within 30 days. Requests that do not include the game's installation ID cannot be matched to an agreement record, which is why the in-game control exists. Because the game has no named accounts, we may need limited purchase or correspondence details to verify and locate a record. Please do not send government identification or passwords unless an appropriate, secure verification process has been agreed. We will explain any limitation or refusal, subject to applicable law. Where applicable, authorized agents may make requests with evidence of their authority. People in the EEA or UK can also contact their local data-protection authority.
Children
Dragon Poop is intended for players 13 and older and is not directed at children under 13. The game uses a neutral age screen and does not store or send the age you enter. We do not knowingly collect personal information from children under 13. If you believe a child has provided such information, contact us so we can investigate and take appropriate steps, including deletion where required.
Other services and policy changes
Stores, RevenueCat, Discord, and other linked services have their own privacy practices. We may update this policy as the game or services change. We will revise the effective date and give additional notice of material changes where required. A policy update does not remove rights you have under applicable law.
Contact
Syntax Circus, LLC
7533 S Center View Ct Ste N
West Jordan, UT 84084, USA
support@syntaxcircus.com
See also our Terms of Use and Support page.
Selected provisions were adapted from General Legal's legal templates, released under CC0. General Legal has not reviewed or endorsed this policy.