Privacy Policy

Last updated: 9 November 2026 · Applies to the app “CocoMico Quest” (iOS and Android)

Totoneko (“we”) sets out below how information is handled in the app “CocoMico Quest” for iOS and Android (the “App”).

1. Our approach

The App requires no account registration, and we do not collect personal information such as your name, address, phone number or date of birth. Your save data itself (the contents of your progress) is stored on your device and in your own backup (iCloud on iOS, Google backup on Android). In addition, from Ver 4.0, so that we can restore your progress if it is lost, a backup copy of your save data is sent to our server (3-13). However, for the leaderboard, friend invites, shop usage, ad and purchase measurement and game tuning, the clock check and the save backup, an anonymous ID created for each device is sent to our server, including when the app starts, together with the minimum information described in section 3.

2. Information stored on your device

The App records your progress (stage, level, items, one-time purchases you own, settings, and so on) in local storage on your device. Apart from the backup in 3-10, the save backup in 3-13 and the device transfer in 3-15, this information itself (your save data) is not transmitted off the device. Some of its numbers — your best stage, best DPS, total attack power, prestige count, raid records, titles, level and days since you started — are sent for the leaderboard (3-5) and friend invites (3-7).

From Ver4.1, the birth year and month you choose in the age check before your first purchase are also stored on your device. They are used only to set purchase limits and ad settings, and are not sent to our servers (they are also excluded from the save backup in 3-13 and the device transfer in 3-15). They are included in the backup in 3-10.

To erase it, delete the App or use “Settings → Erase save and start over” inside the game.

3. Information sent outside your device

3-1. Advertising (Google AdMob)

The App uses Google AdMob, an advertising service provided by Google LLC. In order to serve ads, AdMob may access information such as the advertising identifier (IDFA on iOS, the advertising ID on Android) and your approximate location (from the IP address).

On iOS you will be asked for permission to track before the advertising identifier is used. All features of the App remain available if you decline; in that case you will simply see ads that are not personalised. You can change this at any time in iOS under Settings → Privacy & Security → Tracking.

On Android, AdMob may access information such as your device’s advertising ID and App Set ID. You can delete or reset the advertising ID at any time in your device’s Settings → Privacy → Ads (on some devices, Google → Ads). All features of the App remain available if you do.

If you indicate in the age check that you are under 13, we ask AdMob not to show ads based on your interests.

For how Google handles this data, please see Google’s policies and terms.

From Ver 4.0, on iOS, ads from Unity Ads, an ad service provided by Unity Technologies, Inc. (United States), are also delivered through AdMob (Unity Ads takes part in AdMob’s bidding to decide which ad is shown). In doing so, Unity Ads may collect device identifiers (the advertising identifier only if you allow tracking), device and network information, ad impressions and interactions, whether in-app purchases were made, approximate location (from the IP address), and crash and performance data. For how Unity handles information, please see Unity’s privacy policy.

3-2. Game Center (Apple, iOS only)

If you are signed in to Game Center, the App submits your best stage reached and your best DPS figure to Apple’s Game Center for the leaderboards. Only these scores are sent — no save data or gameplay content. You can control Game Center in your iOS settings.

3-3. News, coupons and version checks

The App connects to a delivery endpoint we operate (GitHub Pages) to fetch news, coupon contents and the latest version number. This connection only retrieves information; it does not upload anything about you. As with any network request, your IP address may appear in the host’s server logs.

3-4. Contacting us

When you use “Settings → Contact” in the game, your device’s mail app opens. To help us understand your situation, the message is pre-filled with your game state (the app version, current stage, best stage, level, class, display language, save-data version, and a short string identifying your device type). No personal information is included, and you can review and edit the message before sending it.

Any email address and message you send us are used solely to reply to you and to investigate problems, and are not disclosed to third parties.

3-5. Leaderboard (our server)

For the in-game leaderboard, the App sends the following to our server (hosted on Cloudflare):

• An anonymous ID created for each device, and a secret known only to that device
• The “leaderboard name” you choose
• Your best stage, best DPS, total attack power, number of prestiges, raid event records, best stage on each Challenge Run path, and titles earned
• The country used for your flag (set automatically from your device’s region; you can change or hide it in Settings)

Your name, records and flag are shown on other players’ leaderboard screens. To deal with cheating and abuse, we record your IP address only in a one-way hashed form that cannot be turned back into the address; the IP address itself is not stored. Names that are reported may be hidden after we review them.

3-6. Name check (TypeSafe AI)

To prevent inappropriate names (insults, slurs, sexual content, impersonation, contact details and so on), only the text of the name you choose is sent to the classification service “TypeSafe AI” for an automated check. No other information (ID, records or device details) is sent. Depending on the result, your name may not be shown to other players until we have reviewed it.

3-7. Friend invites (our server)

For friend invites, the App sends an anonymous ID created for each device, a secret token known only to that device, the invite code, your level and the number of days since you started playing to our server, so that invite codes can be issued and matched. Your invite code is issued automatically when the app starts, even before you open the invite screen, so it is ready to share. The token is a random string used only to stop someone else claiming your rewards by pretending to have your ID; it is unrelated to your name or device. To prevent abuse, your IP address is recorded only in a one-way hashed form.

3-8. Shop usage (our server)

To improve the shop, the App sends events — opening the shop, tapping a purchase button, completing a purchase, cancelling — together with the product and the time, using the same anonymous ID as the leaderboard. These are counted in aggregate. No payment details (such as card numbers) are included.

3-9. Time check (our server)

To detect when the device clock is off, the App asks our server for the current time. No information about you is sent.

3-10. Backup (iCloud on iOS, Google on Android)

On iOS, if iCloud is available, the App saves your save data to your own iCloud so you can move to a new device. On Android, the device’s automatic backup may save your save data to the backup of your own Google account (you can turn this off in your device settings). We cannot see the contents of either.

3-11. Ad measurement (Meta, iOS only)

From Ver 4.0, the App uses the Meta SDK, provided by Meta Platforms, Inc., to measure the effectiveness of our ads. Events such as installing the App, launching it and making in-app purchases are sent to Meta, together with information such as the device model and OS version. The Meta SDK starts only after you answer the tracking permission prompt described in 3-1. If you allow tracking, the advertising identifier (IDFA) is also sent. If you do not, Meta does not receive the advertising identifier and measures effectiveness only in an aggregated form that does not identify you, using Apple’s frameworks. For how Meta handles information, please see Meta’s Privacy Policy.

3-12. Ad and purchase measurement, and game tuning (our server and Apple)

From Ver 4.0 on iOS and Ver 4.0.1 on Android, to decide how much to spend on advertising, to tune the difficulty and rewards of the game in future updates, and to investigate and fix problems that cause the App to close unexpectedly, the App sends the following to our server (hosted on Cloudflare) using the same anonymous ID as the leaderboard, where it is aggregated:

• Whether you installed the App from an Apple search ad (Apple Ads), and which ad (such as the campaign). This is checked with Apple’s own framework (AdServices) and does not use tracking permission (iOS only)
• For each day, how many in-app ads were shown and their estimated ad revenue
• For each day, how many times you tapped a video-ad button and whether an ad was ready at that time
• For each day, the products and amounts (displayed prices) of in-app purchases
• Your highest stage reached
• For each day, statistics on how you play (play time, how gems and other items are gained and spent, strength figures, how often and where you were defeated, the stages where you prestiged, gacha pulls, and how often features are used)
• App stability records (how often the App closed unexpectedly and on which kind of screen, figures on what the App was doing just before it closed (such as the number of images in use and memory usage), your device model (for example, iPhone14,2), and the App version)
• The country you are connecting from (when we receive the data, we keep only the country name determined by Cloudflare from the connection)
• Whether you use iOS or Android (determined from the device-type information (User-Agent) sent with the request)

No payment details (such as card numbers) or advertising identifier (IDFA) are included. Your IP address is not stored (to stop floods of requests, it is turned into an irreversible hash and counted for one hour only). Only the country name is kept, never a more precise location such as your city. These records are stored in our server’s storage (hosted on Cloudflare) and aggregated by us.

3-13. Save backup (our server)

From Ver 4.0, so that we can restore your progress if it is lost or overwritten by another save, the App sends a backup copy of your save data to our server (hosted on Cloudflare) about once a day, using the same anonymous ID as the leaderboard. We keep the last seven days and the copy from when you had progressed the furthest. The backup contains no personal information such as your name or email address. There is no feature to read other players’ saves; only we look at a backup, when restoring a save in response to your inquiry. Backups are deleted 180 days after they were last sent. If you would like your backup deleted, please send us your in-game support number (shown under Settings → Contact).

3-14. Ad measurement (AppsFlyer)

From Ver4.1, the App uses AppsFlyer, a measurement service provided by AppsFlyer Ltd., to measure the effectiveness of our ads. Events such as installing and launching the App, and the product type, price, currency and transaction ID of completed purchases, are sent to AppsFlyer. AppsFlyer may also collect information such as the device model, OS version and IP address. We do not send your name, email address or payment details.

On iOS, it starts only after you answer the tracking permission prompt described in 3-1. The advertising identifier (IDFA) is sent only if you allow tracking. On Android, your device’s advertising ID is sent. If you indicate in the age check that you are under 13, your information is not sent from then on (the age check happens at your first purchase, so install and launch events before it are sent). For how AppsFlyer handles information, please see AppsFlyer’s Privacy Policy.

To measure the effectiveness of our ads on X (a service provided by X Corp., USA), AppsFlyer may send X events such as App installs and completed purchases, together with information such as the advertising identifier, IP address, and device and browser information. Install events are sent even if you did not install the App from an ad on X. On iOS 14.5 or later, if you have not allowed tracking, only aggregated information that does not identify you or your device is shared. Depending on your X settings, this may be combined with other information X holds and used for interest-based ads. We do not send your name, email address or payment details. If you indicate in the age check that you are under 13, your information is not sent from then on.

To opt out of interest-based ads, on iOS turn off tracking for the App in Settings → Privacy & Security → Tracking. On Android, you can delete your advertising ID as described in 3-1. If you use X, you can turn off “Personalized ads” in X’s Ads preferences settings. For how X handles information, please see X’s Privacy Policy.

3-15. Device transfer (our server)

From Ver4.1, only when you use the in-game device transfer, we temporarily hold your save data on our server (hosted on Cloudflare) so it can be passed to your new device. It is handed over once to the device that enters the number and passcode, and is deleted when received or after the 30-minute limit expires. Your birth year and month and your one-time purchases are not included. To confirm receipt, we keep the transfer details and a one-way hash of the passcode for 30 days.

4. Purchase information

In-app purchases are processed by Apple (the App Store) on iOS and by Google (Google Play) on Android. We never receive your payment details, such as credit card numbers. The App receives only whether a purchase completed and which product it was (on Android, including a token used to verify the purchase), and grants the corresponding item. From Ver4.0, to prevent fraudulent purchase records, when a purchase completes the App sends the proof of purchase issued and signed by Apple or Google (including the transaction ID, product, purchase date and price) to our server (hosted on Cloudflare), together with the same anonymous ID used for the rankings, to check that it is genuine. We keep the result together with the transaction ID, product, purchase date and price to prevent duplicate grants and ranking-reward fraud. The proof of purchase does not contain payment details or your Apple ID / Google account information. No other purchase information is sent to our server, apart from the “purchase completed” event and product in 3-8 and 3-12.

5. Children

The App is not directed at any particular age group. Parents and guardians can prevent in-app purchases using iOS Screen Time → Content & Privacy Restrictions → In-app Purchases, or on Android with Google Play’s Settings → Authentication → Require authentication for purchases, or Family Link.

6. Disclosure to third parties

We do not disclose your information to third parties except where required by law, apart from the external services described in 3-1, 3-2, 3-6, 3-10, 3-11 and 3-14, and the Apple Ads attribution check in 3-12.

7. Deleting your records

If you would like your leaderboard records and name deleted, please send us your in-game name using the contact details below. We will delete the matching records. We will also delete your save backup (3-13) and the records in 3-12 if you send us your support number.

8. Changes to this policy

We may update this policy as needed. Significant changes will be posted on this page and announced in the App or in its release notes.

9. Contact

Privacy Policy／Terms of Use