Privacy Policy

Effective Date: 14/04/2026

Last Updated: 30/10/2026

Controller: Crocfish OÜ

Contact: info@croc.fish

1. Introduction

At CROCFISH, we value privacy and are committed to protecting your data. This Privacy Policy explains how we collect, use, and store data across:

Our video games, published on Steam, itch.io, Wavedash, Google Play, and Apple App Store
Our official website, including launch-notification and newsletter sign-ups and media content
Crocfish Publisher, our internal tool for publishing to our own social media accounts (see 2g)

We comply with applicable international data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Children's Online Privacy Protection Act (COPPA) where relevant.

We do not sell or trade your data. We do not use personal data for advertising or profiling.

2. What Data We Collect

We only collect data when necessary and minimize the amount and type of data we collect.

a. Automatically Collected Data (Website & Games)

We may collect the following non-personal data automatically when you visit our site or use our games:

IP address (anonymized for analytics)
Device type, browser type, operating system
Language settings and screen resolution
Crash logs and error reports
Gameplay behavior (aggregated, anonymized)
Referring URL (if you came from another website)

This data is used solely for diagnostics, security, and improving our services.

b. Google Analytics (GA4) — website

On the website we use Google Analytics 4 (gtag.js, measurement ID G-VQVM7HGSXY), provided by Google LLC (USA). It is loaded with consent disabled by default and only stores cookies (_ga, _ga_VQVM7HGSXY) after you choose "Accept" on our cookie banner. We use it solely to understand aggregate, anonymized site usage; we do not use advertising features, ad identifiers, or cross-site/app tracking. Where data is transferred to the USA, Google is certified under the EU–US Data Privacy Framework (with standard contractual clauses as an additional safeguard). You can withdraw consent at any time via "Cookie settings" in the footer.

c. Steam SDK & Platform Data

Our games on Steam and other stores (Google Play, Apple App Store, itch.io) use their built-in services like achievements, cloud saves, and leaderboards.

We do not access or store:

Your name
Email address
Payment information
Friends list or social data

These platforms handle such data under their own privacy policies.

d. Launch Notification Sign-Up

On our FAIL GAMES page you can optionally ask to be notified if and when the game is released on Apple's App Store (iOS). This is entirely voluntary and works as follows:

We collect your email address, and an approximate country code (e.g. "DE") derived from your connection, used only to gauge overall interest.
Purpose: to email you a one-time notification about the iOS launch. We do not send any other marketing, unless you also tick the separate, optional newsletter box (see below).
Lawful basis: your consent, given by ticking the consent box on the form.
Where it's stored: the list is held in a database operated by our infrastructure provider Cloudflare, Inc. (USA), acting as our processor under appropriate safeguards (EU–US Data Privacy Framework / standard contractual clauses).
Retention: your email is kept until the iOS launch notice is sent, or until you ask us to remove it — whichever comes first.
You can withdraw at any time by emailing info@croc.fish, and we will delete your entry.
We do not share, sell, or disclose your email to any other third party.

On our newsletter page (and as an optional, unticked box on the FAIL GAMES iOS sign-up) you can subscribe to the Crocfish newsletter. This is entirely voluntary and works as follows:

We collect your email address, the date and time you signed up, which form you used, which version of the consent text you agreed to, and an approximate country code (e.g. "DE") derived from your connection. We do not store your IP address.
Purpose: to email you news about our new games, releases and updates.
Lawful basis: your consent, given by ticking the consent box on the form. We check new sign-ups by hand before sending anything, and remove addresses that look mistaken or abusive.
Where it's stored: the list is held in a database operated by our infrastructure provider Cloudflare, Inc. (USA), acting as our processor under appropriate safeguards (EU–US Data Privacy Framework / standard contractual clauses). The newsletter itself is sent from our own mail server.
Retention: your email is kept until you unsubscribe. Sign-ups we don't approve are deleted.
You can unsubscribe at any time with the link in every newsletter, or by emailing info@croc.fish. Unsubscribing deletes your entry immediately.
We do not share, sell, or disclose your email to any other third party.

Some game pages and press kits can show the official Steam store widget (price and a link to buy the game), provided by Valve Corporation (USA). It is not loaded by default: only after you click "Show price & Steam widget" does your browser connect to Steam, which then receives your IP address and browser information and may set its own cookies under Valve's privacy policy. We receive no data from the widget. Your click is remembered in your browser's local storage (crocfish-steam-widget) so the widget loads directly on later visits; clear your site data to undo this.

g. Crocfish Publisher (our social media publishing tool)

We publish our own videos to our own social media accounts (e.g. TikTok, Bluesky, Instagram, Facebook) with Crocfish Publisher, an internal tool we host on our own server. It is not offered to the public and is only connected to accounts owned by Crocfish. When we connect one of our accounts, the platform sends us, with the permissions we grant:

The account's basic profile: account ID, display name, username and profile picture
Account statistics: follower, following, like and video counts
A list of the account's videos and their statistics (views, likes, comments, shares)
Access tokens that allow the tool to publish on the account's behalf

Purpose: to publish and schedule our own posts and to see how they perform. Nothing else.
Where it's stored: on our own server. Videos to be posted are uploaded directly to the platform.
Retention: until the account is disconnected, when its tokens and data are deleted.
Because only Crocfish's own accounts are connected, the tool does not process data of other TikTok or social media users. We do not share, sell or disclose this data.

h. Browser Games (Wavedash)

Some game pages let you play the game in your browser through an embed from Wavedash, operated by Snowday Software, Inc. It is not loaded by default: only after you click "Play in your browser" does your browser connect to Wavedash, which then receives your IP address and browser information and may set its own cookies, including for analytics and advertising, under Wavedash's privacy policy. Any account you create with Wavedash, for example for cloud saves, is between you and Wavedash. We do not remember your click, so the embed stays off until you click again on your next visit.

3. Media Uploaded to Our Site

If our website allows file or image uploads (e.g. feedback forms, forums, bug reports):

Uploaded files may be publicly accessible, so avoid submitting personal data or metadata (e.g. location info in images).
All uploads are voluntary and subject to moderation.

We currently do not allow public user-uploaded content, but this policy applies if added later.

4. Cookies

Our website sets no cookies until you choose "Accept" on our cookie banner. If you accept, Google Analytics sets the _ga and _ga_VQVM7HGSXY cookies to measure aggregate, anonymized site usage. We do not use tracking or advertising cookies. If you choose to load the Steam store widget, Steam may set its own cookies. If you choose to play a game in your browser, Wavedash may set its own cookies.

You can change or withdraw your choice at any time via "Cookie settings" in the footer; declining or withdrawing sets no analytics cookies and clears any existing ones. You can also disable cookies through your browser settings.

5. Links to Other Websites

Our site or games may contain links to third-party websites (e.g., itch.io, Steam, YouTube). These sites have their own privacy policies.

We are not responsible for the content or privacy practices of external websites. We recommend reviewing their privacy terms before interacting with them.

6. Data Retention

We retain data only as long as necessary:

Anonymized analytics data is retained for up to 14 months
Support emails are stored as long as needed to resolve your issue, then deleted
Launch-notification emails are kept until the iOS launch notice is sent or you ask to be removed
Newsletter emails are kept until you unsubscribe; sign-ups we don't approve are deleted
Data of our connected social media accounts (Crocfish Publisher) is kept until the account is disconnected

We do not retain player accounts or other personal identifiers.

7. Your Rights (GDPR, CCPA, etc.)

Depending on your jurisdiction, you have the right to:

Access any personal data we may hold about you
Request correction or deletion
Withdraw consent (e.g. launch notifications or the newsletter)
File a complaint with a data protection authority

To exercise these rights, email us at info@croc.fish. We respond to all requests within the legal timeframes.

8. Children's Privacy

Our games and website are not targeted at children under 13. We do not knowingly collect personal data from minors.

If you're a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

9. Data Security

We take appropriate security measures to protect your data, including:

HTTPS encryption
Limited access controls
Regular security updates

However, no system is 100% secure, and users share information at their own risk.

10. Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be available on our website and will include the updated "Last Updated" date. Significant changes will be communicated clearly.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

Crocfish OÜ
Järvevana tee 9, 11314 Tallinn, Estonia
Business registry code: 17463980

Email: info@croc.fish
Website: croc.fish