PurrPrivacy Policy
For PurrFlow — The Liquid Cat (com.pvh.purrflow) on Android and iOS, and for the browser version at purrflowgames.com/play. Last updated 20 August 2026.
The short version
- There is no account, no sign-in and no server of ours. We do not run one.
- Your stars, goldfish, cats and settings are written to your device and stay there.
- The game runs no analytics and no crash reporting. This website counts visits two ways: Google Analytics, which asks before it stores anything, and Cloudflare's cookieless counter, which stores nothing at all — section 5.
- The only third party the game talks to is Google AdMob, which serves the adverts.
- If you set a photo as your background, it is copied into the app's own storage and is never uploaded.
- PurrFlow is not offered in Vietnam, and your IP address is used to determine which region a request came from.
1. Who this is from
PurrFlow is made and published by PVH. This policy explains what the game does with data, and it is deliberately specific: where a thing does not happen, this document says so rather than reserving the right to start doing it.
2. What we collect ourselves
Nothing. PurrFlow has no account system, no login, no newsletter, no contact form inside the game and no backend of ours for it to send anything to. We do not receive your name, your email address, your location, your contacts, your device identifiers or your gameplay.
This site, purrflowgames.com, keeps ordinary web server logs — the requested
address, the time, the response code, the browser's user-agent string and the connecting IP
address — for operating and securing the site. They are not linked to anything in the game,
because there is nothing in the game to link them to.
The site also runs Google Analytics, which is a thing we receive rather than nothing, and it is set out in full in section 5. The paragraph above still holds for the game itself.
3. What the game stores on your device
Everything the game remembers is written to your device's own app storage, using the standard preference store on Android and iOS. It is not synced, not backed up to us, and not readable by us. Uninstalling the app removes it.
| Stored as | What it holds |
|---|---|
pf.progress | Stars, goldfish and best runs, one entry per room |
pf.saved_run | The half-played room, so Continue resumes exactly where you left off |
pf.unlocks | Chapters, cats and the hint button that a rewarded advert has permanently bought |
pf.daily | Today's daily-challenge tally: the day, rooms played, extra plays bought |
pf.owned_cats, pf.equipped_cat | Which cats you have bought and which one you are wearing |
pf.appearance | Your chosen colour pack, and the dim level if you use your own photo |
pf.language | The interface language you picked |
pf.sound_enabled, pf.music_enabled, pf.haptic_enabled | Sound, music and vibration switches |
pf.intro_seen, pf.seen_tips | Whether the onboarding and each device's one-time tip have been shown |
None of this identifies you. It is a record of a puzzle game's state, and it never leaves the device.
4. Adverts
PurrFlow shows a banner advert and offers rewarded adverts — watching one permanently unlocks a chapter, a cat or the hint button, or adds three extra plays to today's daily allowance. Adverts are served by Google AdMob, which is part of Google. This is the only component of the game that uses the network.
To fill an advert slot, Google receives information from your device. Google — not us — decides what that is and what it does with it; typically it includes:
- your device's advertising identifier (Android Advertising ID, or Apple's IDFA where you have allowed tracking);
- your IP address, and the approximate region derived from it;
- device and app information such as model, operating system version, language and the app's identifier;
- whether an advert was shown, viewed or clicked.
We never see any of this. We receive only aggregate earnings figures from AdMob, which contain no information about individual players. Google's handling of the data is governed by its own policy, which you should read if this matters to you: How Google uses information from sites or apps that use our services.
The browser version
The version you can play at purrflowgames.com/play contains
no advertising SDK at all — there are no banners, no rewarded
adverts, and Google AdMob is not present in it. Everything the mobile game unlocks with a
rewarded advert is simply available.
It makes one external request. The game's rendering engine downloads a fallback font from
fonts.gstatic.com (Google Fonts) so that Japanese, Korean, Chinese, Arabic,
Hindi, Thai and Lao text can be drawn; the fonts bundled with the game cover Latin
scripts only. That request goes to Google and, like any web request, carries your IP
address and browser user-agent. Nothing about your progress or your play is sent with it.
No other external host is contacted — the game's own code, artwork and audio are
all served from this site.
Progress in the browser version is stored in your browser's local storage
for this site, under the same key names listed in section 3. Clearing site data for
purrflowgames.com erases it, and it is not shared with the mobile app.
Controlling advert personalisation
You can limit personalised advertising on the device itself, outside the game:
- Android — Settings → Google → Ads → Delete advertising ID or Opt out of Ads Personalisation.
- iOS — Settings → Privacy & Security → Tracking, and turn off Allow Apps to Request to Track. PurrFlow works fully whether you allow tracking or not.
Turning personalisation off does not remove the adverts and does not affect anything you have already unlocked with one.
5. Cookies and website analytics
This is the one place where the answer is no longer "nothing", and it applies to
this website only — purrflowgames.com and its pages.
The game does not do any of what follows: not the Android or iOS app, and not the browser
build framed at /play, which still ships no advertising and no analytics of
its own.
We advertise the game through Google Ads, and without measurement we cannot tell which of
those adverts brings anyone here rather than simply spending money. So the site runs
Google Analytics 4 (property G-4TDJ3YKNCM). It counts visits,
records which page was seen and which site or advert referred it, and reports an
approximate city-level location derived from the IP address. It does not know your name,
and it is not joined to anything in the game, because the game sends us nothing to join it
to.
What is stored in your browser
| Stored as | What it holds | For how long |
|---|---|---|
_ga | A random identifier that lets Analytics tell one browser from another | 2 years |
_ga_4TDJ3YKNCM | The state of the current visit, so a reload is not counted as a new arrival | 2 years |
_gcl_au | Set only when you arrive from a Google advert, so the click can be tied to the visit | 90 days |
pf.consent | Your answer to the banner. Not a cookie — local storage, never sent anywhere | Until you clear site data |
Only pf.consent is written before you have agreed to anything, and only
because refusing has to be remembered too — otherwise the banner would ask again on
every page.
The second counter, and why it is not in that table
Our hosting provider, Cloudflare, also counts page views through its own Web Analytics. It is deliberately a different kind of thing from Google Analytics: it sets no cookie and writes nothing to your browser, it builds no profile, and it does not follow you to any other site. It records that a page was requested, from roughly where, and how quickly it loaded.
Being honest about the consequence: because it stores nothing on your device, it is not covered by the banner below, and it keeps counting even if you decline. There is nothing for you to consent to and nothing to withdraw — but you should know it is running rather than find out from a network log. It is also why declining Google Analytics does not leave us blind, which is exactly why we would rather ask you honestly than nag.
Asking first
In the EEA, the United Kingdom and Switzerland, none of the four entries in the table above is set until you accept them. The Google tag is loaded in Consent Mode with every storage signal denied by default, the banner is shown, and Analytics is held until you answer. Declining is a button of the same size as accepting, and closing the banner with Esc counts as declining. Elsewhere, local law works the other way round — storage begins on and you turn it off — so the control below is how you do that.
You can also refuse it entirely without us: Google publishes a browser add-on that disables Analytics on every site, and any tracker blocker will stop the tag loading at all. Nothing on this site breaks if you do — there is no feature behind the measurement.
What Google does with the data once it has it is governed by its own terms, not ours: How Google uses information from sites or apps that use our services.
6. Photos
Settings → Appearance lets you use a photo of your own as the app background. If you choose to, the system's own picker opens and you select a single image. That image is copied into the app's private storage — which is what lets it survive after the picker's temporary handle expires — and is used only for drawing behind the game.
It is never uploaded, never sent to us, and never sent to Google. The game contains no network client capable of sending it anywhere. Choosing a different background or uninstalling the app removes the copy. The game asks for photo access only at the moment you tap to pick one; you can decline and everything else keeps working.
7. Permissions
- Internet — used only to fetch adverts. The 575 story rooms, the 100 daily rooms, the shop and every setting work with no connection at all.
- Photo library — requested only when you actively choose a background photo, and only for that.
- Vibration — for the haptic feedback you can switch off in Settings.
PurrFlow does not request location, microphone, camera, contacts, calendar, storage browsing, or the ability to read other apps.
8. Children
PurrFlow is suitable for a general audience and is not directed at children under 13. We knowingly collect nothing from anyone, of any age, because we collect nothing at all. The adverts, however, are served by Google, so if the game is played by a child we recommend turning off advert personalisation using the device controls in section 4.
If you believe a child has provided personal information through the game, please write to us — though as described above, there is no store of ours for it to be in.
9. Your rights
Rights of access, correction, deletion, portability and objection — under the GDPR, the UK GDPR, the CCPA or any comparable law — apply to personal data a company holds about you. We hold none, so there is nothing for us to hand over, correct or erase.
To exercise the equivalent in practice:
- Delete everything the game has stored — uninstall PurrFlow, or clear the app's data in your device settings. That removes all of section 3, permanently and immediately. There is no copy anywhere else.
- Advert data — that is held by Google, not us. Use the device controls in section 4, and Google's own tools at My Ad Center.
Because unlocks and progress live only on your device, clearing the app's data also clears chapters and cats bought with rewarded adverts. That is the trade-off of a game with no account: nothing to sign into, and nothing to restore from.
10. Data we transfer or sell
We do not sell or rent personal data, and we hold none of our own to sell. In the app, nothing has changed: no analytics service, no crash-reporting service, no attribution SDK and no social network SDK. Google AdMob is still the single third-party component in it.
On the website there are two more, both described in section 5: Google Analytics, and Cloudflare's Web Analytics on the hosting that already serves every page. Sharing with those two is the whole purpose of them, so we name them rather than claim there is nothing to name — but we neither sell that data nor pass it to anyone beyond Google and Cloudflare.
11. Security
Game data is protected by your device's own app sandbox and whatever device encryption you have enabled. Since nothing is transmitted to us and no account exists, there is no server of ours to breach and no credential of yours to steal.
12. Regional availability and geolocation
PurrFlow is not offered, distributed, or made available to users located in Vietnam. To enforce this territorial restriction, we and our hosting, content delivery and security providers process your IP address and the country code our content delivery network derives from it, in order to determine the region from which the Service is being accessed.
Concretely: our content delivery network (Cloudflare) resolves the connecting IP address
to a two-letter country code and passes that code to our server with the request. The
server compares it against the list of restricted territories and, for a request from a
restricted territory to the game, answers 451 Unavailable For Legal Reasons
instead of the game. We do not keep a per-visitor record of that decision.
The country code and the IP address may also appear in technical and security logs kept by us and by those providers, according to their own configuration and retention periods. We do not use IP-based country detection to determine your precise physical location, and we do not combine it with anything else to identify you. Browser language and time zone are not used for this purpose.
13. Availability in Vietnam
The publisher currently operates as an individual and has not obtained authorization to distribute or provide PurrFlow in Vietnam. For this reason, the Service is not offered or made available in Vietnam through this website, through mobile application stores, or through other distribution channels.
This Privacy Policy, the Terms of Use and the availability notice remain accessible from every territory, including Vietnam.
14. Changes to this policy
If the game gains something that changes any of the above, this page is updated and the date at the top changes with it. Material changes will also be noted in the store listing's release notes. Continuing to play after a change means you accept the updated policy.