Privacy Policy
Effective Date: July 5, 2026 | Last Updated: July 6, 2026
Table of Contents
This Privacy Policy describes how Lucky Patcher ("we," "us," or "our") collects, uses, and shares information when you visit luckypatcher.app and play our whack-a-mole browser game (the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Lucky Patcher does not require an account to play. If you choose not to sign in, we collect no personal information, no names, email addresses, phone numbers, or any personally identifiable information.
We may automatically collect limited, non-personal technical information when you visit, including:
- Browser type and version
- Operating system
- Referring URLs
- Pages visited and time spent
- General geographic location (country/region level only, derived from IP address)
- Device type (desktop, mobile, tablet)
- Gameplay events (e.g. a run starting or ending, a high score, reaching a streak milestone) — no personal data, just anonymous, aggregate product-analytics events
This information is collected via analytics tools (described below) and is aggregated and anonymized. We cannot identify individual users from this data.
Your game progress never leaves your device by default. Your best score, sound preference, and whether you've seen the tutorial are saved using your browser's local storage (localStorage) only. We never see this data and it is never transmitted to us or anyone else, unless you choose to sign in as described below.
Optional account sign-in. If you choose to sign in with your Google account to appear on the public leaderboard, we collect the name, email address, and profile picture Google provides us, and store the display name and profile picture you use in the game. We also store any scores you submit to the leaderboard, associated with your account. Signing in is entirely optional — you can play the full game without it.
2. How We Use Information
The limited technical information collected is used solely to:
- Understand how visitors play the game and improve it
- Monitor site performance and uptime
- Diagnose technical problems
- Compile aggregate statistics about usage patterns (e.g. how many runs are played, how often people reach a high streak)
If you sign in, we additionally use your account information to:
- Create and display your public leaderboard entry (display name and profile picture)
- Attribute scores you submit to your account, so your best score is tracked over time
- Detect and prevent abuse of the leaderboard (e.g. implausible or fraudulent scores)
We do not sell, rent, or trade any information to third parties for marketing purposes.
3. Third-Party Services
Lucky Patcher uses the following third-party services which may collect data as described in their own privacy policies:
- Google Analytics 4 (Google LLC) — Collects anonymized usage data and gameplay events (game started, game over, high score, etc.). Google Privacy Policy. You can opt out via Google Analytics Opt-out.
- Google Sign-In (Google LLC) — If you choose to sign in, we use Google's sign-in service to verify your identity. We receive your name, email address, and profile picture from Google as part of this process. Google Privacy Policy.
- Account & leaderboard storage — If you sign in, your profile (display name, profile picture) and submitted scores are stored in an encrypted cloud database operated by our infrastructure provider, solely to power the sign-in and public leaderboard features.
- Caching service — Used to cache Google Play Store app-icon data that decorates the game's phone-screen background, for 24 hours at a time, and to rate-limit requests. No personal user data is stored here.
- Google Play Store (public data) — The app icons and names shown as decorative background tiles in the game are fetched from Google's publicly available Play Store listings, purely for visual variety. This is publicly available data, not personal data. Google Privacy Policy.
4. Cookies, Local Storage & Tracking Technologies
We use minimal cookies and tracking technologies:
- Google Analytics cookies — Used to track aggregate usage statistics. These are functional/analytical cookies.
- Local storage (not a cookie) — Your best score, mute setting, and tutorial status are saved on your device only, never sent to us unless you sign in.
- Sign-in session — If you choose to sign in with Google, a secure session token is stored in your browser's local storage to keep you signed in. This is used only to authenticate your requests to submit or manage your leaderboard entry — it is not used for advertising or tracking across sites.
- No advertising cookies — We do not use advertising networks, retargeting pixels, or behavioral tracking cookies.
Most browsers allow you to control cookies through browser settings. Disabling cookies will not significantly impair your use of this Service — the game itself works fully offline once loaded, and signing in is optional.
5. Data Retention
Analytics data is retained according to the policies of the third-party services we use (typically 14 months for Google Analytics). We do not maintain our own databases of user information beyond what is described here. Cached app-icon data expires automatically after 24 hours and contains no user-identifying information. If you sign in, your account profile and leaderboard scores are retained until you request deletion by contacting us at [email protected], at which point your account, profile, and leaderboard entries are permanently deleted.
6. Your Rights Under GDPR (EEA & UK Users)
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
- Right to Access — Request a copy of data we hold about you
- Right to Rectification — Request correction of inaccurate data
- Right to Erasure ("Right to be Forgotten") — Request deletion of your data
- Right to Restrict Processing — Request we limit how we use your data
- Right to Data Portability — Receive your data in a portable format
- Right to Object — Object to processing based on legitimate interests
If you never sign in, most of these rights are satisfied by default since we hold no personal information about you. If you have signed in, you can exercise these rights — including deleting your account, profile, and leaderboard entries — by contacting us at [email protected].
Our lawful basis for processing analytics data is legitimate interest (improving our service). You may withdraw consent at any time by using your browser's cookie controls or the Google Analytics opt-out tool.
7. Your Rights Under CCPA (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to Know — What personal information is collected, used, disclosed, or sold
- Right to Delete — Request deletion of personal information we hold
- Right to Opt-Out — Opt out of the sale of personal information
- Right to Non-Discrimination — We will not discriminate against you for exercising CCPA rights
We do not sell personal information. If you have signed in, the personal information we hold is limited to your Google-provided name, email, profile picture, and leaderboard scores. To exercise CCPA rights, contact us at [email protected].
8. Children's Privacy (COPPA)
Lucky Patcher is a general-audience game but is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at [email protected] and we will take steps to remove such information.
9. Security
We implement reasonable technical and organizational measures to protect the limited data we process. Our service is hosted on Vercel's infrastructure with industry-standard security practices. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions, data requests, or concerns:
- Email: [email protected]
We will respond to legitimate privacy requests within 30 days.