Privacy policy

Last updated 17 October 2026

Whiskerfall is an online idle game about being a cat, played at whiskerfall.com and in the Whiskerfall apps for iPhone and Android. This page says what we keep about you, why, and what you can do about it.

What we keep

• Your account: your username and your password, stored only as a salted scrypt hash. We never see or keep the password itself.
• Your email address: used only to confirm it is yours and to send you a link if you forget your password. Other players never see it, and we don't send newsletters or share it. These emails go out through our mail provider, which receives the address and the message.
• Your cat and its progress: its name, looks, levels, items and everything else in your save, so the world can carry on when you come back.
• Where you found us: when you make an account, the name of the website that sent you (like reddit.com, never the full address), the campaign tag if the link had one, or which app you signed up in. It is kept with your account so we can tell which places bring new players. Until you sign up, it waits on your device.
• A login cookie: a random token that keeps you signed in for up to 30 days. It is used for nothing else.
• Things other players see: your cat's name, looks, level, gear, hiscores, friends, colony and Exchange offers. The hiscores are also on our website for anyone to see.
• Your cat's card, if you turn it on: a public page on our website with your cat's name, looks, level, class, titles, colony and a few totals. It is off until you turn it on in Settings, under Share your cat, and you can turn it off again there at any time.
• Invites: if you sign up through a friend's invite link, we keep which cat invited you, so you can both get a gift. They only learn how many cats joined through their link.
• Chat: messages are passed to the players they are meant for and are not stored, except that the server briefly remembers recent lines so that a player's report can include what was said. Reports, with those lines, are kept for the moderators.
• Push notifications (apps only): if you turn them on, your phone's notification token and which notifications you want. Notifications are delivered through Google's Firebase Cloud Messaging (and Apple's push service on iPhone), which receive the token and the message text.
• Server logs: the server notes things like sign-ups and errors. Your IP address is used briefly to limit login attempts and is not stored with your account.

Settings like vibration and keeping the screen on stay on your device.

What we don't do

• No ads, no tracking, no analytics or advertising SDKs, and no selling or sharing of your data.
• We don't ask for your real name, location, contacts or photos.

Where it lives

The game server and its database run on a server we rent, with nightly backups kept for seven days. Our domain's DNS is run by Cloudflare.

Deleting your data

You can delete your account and cat at any time in the game: Settings, then Account, then Delete account. Everything is removed at once from the live database, and from the backups within seven days. See deleting your account.

Children

Whiskerfall has open chat between players, so it is not meant for children under 13.

Contact

Questions about your data: support@whiskerfall.com.