Effective Date: November 12, 2026 — This Privacy Policy describes how TAYBOX LLC ("TAYBOX", "we", "us", or "our") handles information across our website (taybox.net) and our mobile, desktop, and web games and applications (including iOS and Android releases).
We design our games to be played immediately without requiring you to register an account or provide your real name, physical address, or phone number.
Single-player and browser games (including Dawnblossom and Celbound), as well as local save files, stage progression, high scores, unlocked cosmetics, and audio/control settings in our mobile and desktop titles (Royal Loot 3D, YOINK! and NEKO☆ROLL), are stored locally on your device using native device storage or browser localStorage / IndexedDB.
You retain full control over this local data and may clear it at any time by clearing your browser site data or uninstalling the application from your device.
When you use online multiplayer features or submit diagnostic reports in YOINK! (PC, Mac, and Steam Deck), our dedicated game server processes only the data required to run matches, maintain ranked standings, and debug issues:
-
Matchmaking & Ranked 3v3 Leaderboard: When you connect to an official dedicated server room, the server processes your IP address in memory to route UDP packets and enforce per-IP connection rate limits. For ranked matches, our server stores a leaderboard entry containing a pseudonymous player ID (
steam:<SteamID64>on Steam builds, or a locally generatedlocal:<guid>with a SHA-256 secret token hash), your in-game display name, Elo rating, win/loss totals, last-played UTC timestamp, and your last 20 ranked match summaries with deterministic input replays. -
Opt-In Bug & Crash Bundles: If an unhandled exception occurs or you open the in-game Report dialog, YOINK! writes a local diagnostic zip on your device (
user://crashes/oruser://reports/) containing the exception trace, the last 60 seconds of network telemetry (netstats.csv), the recent match replay, the tail of the engine log (godot.log), room code, display name, and OS/CPU/GPU model. These bundles stay on your disk unless you explicitly choose to send them to our server.
Depending on the platform and title you play, our applications integrate the following third-party services:
-
Google AdMob (Mobile Advertising): Used in free-to-play mobile releases (such as Royal Loot 3D) to serve optional rewarded video ads and interstitial ads on iOS and Android. AdMob may collect and process mobile advertising identifiers (Apple's
IDFAand Google'sAAID), coarse IP-based location, device information, and ad interaction metrics for ad delivery, frequency capping, and fraud prevention. - Google Firebase (Crashlytics & Analytics): Used in mobile releases to collect diagnostic crash logs, stack traces, device model/OS version, a random app-instance identifier, and aggregate gameplay events (such as stage progression, session length, and booster/feature usage) so we can fix bugs and tune difficulty. Analytics collection remains disabled until the launch consent flow completes, and is never used for ad personalization.
- RevenueCat (Mobile In-App Purchases): Optional in-app purchases on iOS and Android are billed entirely by Apple App Store or Google Play; TAYBOX LLC never sees or stores your payment card details. We use RevenueCat to verify purchase entitlements using an anonymous app user ID and store purchase receipt (product identifier, price, and transaction date) under RevenueCat's Privacy Policy.
-
Valve Steamworks (PC & Steam Deck): Desktop builds distributed through Steam use the Steamworks SDK and Steam Web API to verify session authentication tickets (
SteamID64), display your public Steam persona name, and establish peer-to-peer or Steam Datagram Relay connections under the Steam Privacy Policy Agreement. - Cloudflare (Website Hosting & Web Analytics): Our website (taybox.net) is hosted on Cloudflare Workers/Pages, which processes standard HTTP request metadata (IP address and user-agent) for content delivery and security, and may use cookie-free Cloudflare Web Analytics for aggregate traffic metrics.
Data processed by Google AdMob and Google Firebase is governed by Google's Privacy & Terms (How Google uses information from sites or apps that use our services). Any third-party service providers or SDKs with whom data is shared are required to provide the same or equal protection of user data as stated in this Privacy Policy and required by applicable platform guidelines (including Apple App Store and Google Play requirements).
You can manage or revoke advertising and tracking permissions at any time through in-app prompts or your device settings:
- iOS App Tracking Transparency (ATT): On iOS and iPadOS devices, our mobile apps request permission via Apple's system App Tracking Transparency prompt before accessing the Identifier for Advertisers (IDFA). If you decline the prompt, IDFA access is blocked and only contextual, non-personalized ads are served. You can change this at any time in Settings → Privacy & Security → Tracking.
- GDPR / EEA & UK Consent: Players in the European Economic Area (EEA), the United Kingdom, and Switzerland are presented with a Google-certified User Messaging Platform (UMP) consent dialog upon launch to grant, customize, or decline consent for personalized advertising and analytics.
- CCPA & Advertising ID Reset: TAYBOX LLC does not sell your personal information. You can reset or delete your mobile advertising identifier or opt out of personalized ads at any time in your device settings (on iOS: Settings → Privacy & Security → Tracking; on Android: Settings → Google → Ads or Settings → Privacy → Ads to reset or delete your Advertising ID).
TAYBOX LLC does not knowingly collect personal data from children under the age of 13 (or the applicable age of digital consent in your jurisdiction). Where required by platform age signals or regional regulations (such as COPPA or GDPR-K), ad requests are restricted to child-directed, non-personalized treatment. NEKO☆ROLL collects no personal data from anyone, including children, and has no chat, no user-generated content shared between players and no links out to websites (see section 7).
If you are a parent or guardian and believe that a child under 13 has inadvertently provided personal information to us, please contact us at support@taybox.net and we will promptly delete such information.
Data Retention: Local gameplay data stays on your device until you clear site data or uninstall the app. Online leaderboard records and opt-in diagnostic reports are retained only as long as necessary to operate ranked leaderboards and resolve technical issues (or until you request deletion). Mobile analytics and crash logs are retained in accordance with our third-party providers' standard retention windows (typically 2 to 14 months for Google Firebase/AdMob).
Deletion Requests & Support: For all privacy inquiries, support questions, or requests to access or delete any data associated with your device, online leaderboard Player ID (steam:<SteamID64> or local:<guid>), submitted bug/crash reports, or support correspondence, please contact us at:
Legal Entity: TAYBOX LLC
Email: support@taybox.net
- Local Saves: NEKO☆ROLL keeps your progress, best times, medals, coins, cosmetics and settings in a save file on your device. It works without an account and without an internet connection. Deleting the app deletes this file from your device.
- iCloud Sync: If iCloud is turned on for the app on your device, your save is copied between your own devices using Apple's iCloud key-value storage. Apple stores and handles it under your Apple Account. TAYBOX does not receive or see it.
- Game Center: NEKO☆ROLL can submit your times to Game Center leaderboards and report achievements. Signing in to Game Center is optional, and the game plays fully without it. Game Center is provided by Apple: your Game Center name, friends, scores and achievements are handled by Apple under Apple's privacy policy. TAYBOX does not receive your name, Apple Account or any other personal data from Game Center.
- Motion Sensors: Tilt steering reads your device's motion sensors. This happens only on your device, in real time, and the readings are never saved or sent anywhere.
- No Ads, Analytics, Tracking or Accounts: NEKO☆ROLL on iOS has no ads, no in-app purchases, no analytics or crash-reporting services, and no tracking, and it asks you to create no account. It does not use the advertising identifier and does not show the App Tracking Transparency prompt. The services listed in section 3 above are not used by NEKO☆ROLL.
- Children: NEKO☆ROLL collects no personal data from anyone, including children. It has no chat, no user-generated content shared between players and no links out to websites.
- Contact: Questions or requests about NEKO☆ROLL and privacy: support@taybox.net.