Privacy Policy

Last updated: October 10, 2026

This policy explains what data BOXSHIBE COMPANY LIMITED ("Boxshibe", "we", "us") collects when you use our website and our games, including Solitaire Cat Café (together, the "Services"), why we collect it, who we share it with, and the choices you have. We are the controller of this data.

1. Who we are

BOXSHIBE COMPANY LIMITED, HOUSE NO. 68/9 MOO 4 Subdistrict SAMET TAI District BANG KHLA Province CHACHOENGSAO 24110, Thailand. Contact: support@boxshibe.com.

2. What we collect

You don't need to give us your name, address or phone number to play. We collect:

Game account and progress — an account ID created for you automatically, and, if you sign in, your Game Center or Google Play Games player ID. Your progress (levels, coins, café, cats, items and settings) is stored with that ID so it can be saved to the cloud and restored.
Purchase records — which in-app items you bought, the store's transaction ID and the price. Payments are handled entirely by Apple or Google; we never see your card or payment details.
Gameplay and usage events — for example levels started and finished, features used, session length, rewards earned and ads watched.
Device and diagnostic data — device model, operating system, language, app version, performance data and crash reports.
Identifiers for advertising and attribution — an app instance ID and, where your device settings and consent allow, an advertising ID (Google Advertising ID / Apple IDFA).
Messages you send us — your email address and whatever you include when you contact support.

Our website does not use cookies or analytics; our web host keeps standard server logs (IP address, pages requested) for security.

3. Why we use it

To run the game and keep your progress saved across sessions and devices.
To deliver purchases and rewards and to prevent fraud and cheating.
To fix bugs and crashes and keep the game running smoothly.
To understand which features players enjoy so we can improve the game.
To show ads and measure how well our ads and marketing campaigns work.
To answer your support requests.

Where the law requires a legal basis, we rely on performing our contract with you (running the game), our legitimate interests (improving and securing the Services), and your consent (personalized ads, where required).

4. Service providers we use

We share data only with providers that help us run the Services, and only for that purpose:

Google Firebase (Authentication, Cloud Firestore, Analytics, Crashlytics, Remote Config) — accounts, cloud save, analytics, crash reports and game settings. Firebase privacy
Google AdMob — showing ads, including optional rewarded ads. How Google uses data
AppsFlyer — measuring which marketing campaigns bring players to the game. AppsFlyer privacy
Apple (App Store, Game Center) and Google (Google Play, Play Games Services) — distribution, payments and sign-in, under their own privacy policies.

We do not sell your personal data. We may disclose data if the law requires it, or to a successor if our business or a game is transferred, under this same policy.

5. Ads and your choices

In the EEA, the UK and Switzerland we ask for your consent before showing personalized ads. You can change your choice any time in the game: Settings ▸ About ▸ Consent.
You can reset your advertising ID or limit ad personalization in your device settings (Android: Settings ▸ Google ▸ Ads; iOS: Settings ▸ Privacy & Security ▸ Tracking).
On iOS we only use the advertising identifier if you have allowed tracking.

6. Delete your account and data

You can delete your account and all saved progress at any time inside the game (Settings ▸ About ▸ Delete Account), or by email without the app installed. Step-by-step instructions, and what is and isn't deleted, are on our Delete Account page.

7. How long we keep data

We keep your account and progress while you have an account. When you delete it, your account and cloud save are deleted straight away (or within 30 days of an emailed request). Analytics and crash data are kept in aggregated or pseudonymous form for up to 14 months. Purchase records are kept for 5 years, because tax and accounting law requires it.

8. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, Thailand's PDPA or California's CCPA/CPRA) you may have the right to access, correct, delete or export your data, to object to or restrict some uses, and to withdraw consent. Email support@boxshibe.com with your in-game User ID (Settings ▸ User ID) and we will respond within 30 days. You can also complain to your local data protection authority.

9. Security and international transfers

Data is encrypted in transit (HTTPS/TLS) and stored with providers who apply strong security controls. Our providers may process data in countries other than yours, including the United States, under appropriate safeguards such as standard contractual clauses.

10. Children

Our games are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes

We may update this policy. We will change the "Last updated" date above, and where a change is significant we will also let you know in the game.

12. Contact

BOXSHIBE COMPANY LIMITED
HOUSE NO. 68/9 MOO 4 Subdistrict SAMET TAI District BANG KHLA Province CHACHOENGSAO 24110, Thailand
Email: support@boxshibe.com