Last updated: August 2026
We use PostHog to collect anonymous gameplay analytics: a single event per catch attempt covering things like which stage you reached, how long it took, and whether the encounter was completed, along with standard device information such as device model, operating system version, and app version. For diagnosing bugs and crashes, we also use native diagnostic tools provided by Apple (App Store Connect) and Google (Play Console). When you choose to watch a rewarded ad, Google AdMob may collect advertising identifiers and device data to serve and measure that ad. By default, StrayDex assigns you an anonymous account identifier. If you choose to log in with an authentication provider like Google or Apple to sync your photos across devices, we collect your name and email address as provided by those services to manage your account.
Analytics data helps us understand how the catch mini-game and progression feel in practice, and tune gameplay balance through remote configuration. Native diagnostic tools help us identify and resolve bugs and crashes. Advertising data is used by Google AdMob to serve and measure the rewarded ads you choose to watch, which may include personalizing ads based on your device's advertising identifier. Account data (such as your anonymous identifier or email/name if logged in) is used purely to save your game progress and sync your inventory to the cloud. We do not sell your information for money, but under some state privacy laws, such as California's, sharing data with an ad partner like AdMob for advertising purposes can itself be considered a "sale" or "share" of information. See "Your Choices & Rights" below for how to opt out.
StrayDex uses the following third-party services: PostHog for analytics and remote configuration (see PostHog's privacy policy at posthog.com/privacy), Google AdMob for rewarded advertising (see Google's privacy policy at policies.google.com/privacy), and Cloudflare Turnstile for bot protection when a StrayDex account is created (see Cloudflare's Turnstile Privacy Addendum at cloudflare.com/turnstile-privacy-policy). These providers may process data on servers located outside your country.
We use Cloudflare Web Analytics to monitor website traffic and performance. Cloudflare Web Analytics operates without the use of cookies or local storage. It does not collect personally identifiable information (PII), track IP addresses, or track users across different websites. The data collected is entirely anonymized and aggregated, logging only essential metrics such as page views, device types, operating systems, browser types, and generalized geographic location (country-level) to help us understand how our website is being used.
We use Cloudflare as a Content Delivery Network (CDN) and security provider. To protect our website from malicious activity, bot attacks, and DDoS attempts, Cloudflare monitors network traffic. As part of this security screening, Cloudflare may place strictly necessary security cookies (such as __cf_bm or cf_clearance) on your device. These cookies are solely used to distinguish between human users and malicious bots; they are not used for tracking, analytics, or advertising purposes.
Within the StrayDex mobile app, we use Cloudflare Turnstile to verify that a new account is being created by a person rather than an automated script. The check runs once, when your account is first created, and requires no interaction from you — nothing is displayed on screen. To perform it, Cloudflare processes your IP address, TLS fingerprint, User-Agent, and the site key identifying our app. Cloudflare states that it cannot directly identify individuals from these signals and that they are used solely to distinguish humans from bots — never for advertising, analytics, or cross-site tracking. See Cloudflare's Turnstile Privacy Addendum at cloudflare.com/turnstile-privacy-policy.
On iOS, StrayDex asks for your permission via Apple's App Tracking Transparency prompt before any advertising identifier is used for tracking. Depending on your region, you may have rights to access, correct, or delete information collected about you, and to opt out of certain data processing, including GDPR rights in the EU/UK and CCPA/CPRA rights in California. This includes the right for California residents to opt out of the "sale" or "sharing" of personal information; since our use of AdMob for advertising may qualify, you can opt out at any time by limiting ad tracking or resetting your advertising identifier in your device's settings, or by contacting us below. Because almost all game data (your cats, cards, and progress) lives only on your device, uninstalling StrayDex also removes it. To exercise these rights or ask a question, contact us using the details below.
StrayDex is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.