Privacy Policy
The short version, if you are under 18:
🔒 We only know about you what Telegram itself gives to any game: your account number, name and username. We do not get your phone number, photos, contacts or the exact place where you are.
📊 We count how many people visit the game, but we don’t know which one of them is you.
👀 Other players see your Telegram name, your pet and your progress in the game.
🚫 We don’t sell your data and don’t show you ads “targeted at you”.
🗑 Type /deletedata in the bot and we will delete your account. Your parents can ask us to do this too.
1. Who processes the data
The personal data operator is the owner of the game “Pufiki”: Zentrik Games studio. Questions about data: support@zentrik.games.
This policy explains what data the game (the Mini App and the bot in Telegram) collects, why, and how you can control it.
2. What data we receive
| Data | Source | Purpose |
|---|---|---|
| Telegram account ID, name (first name), username | Telegram, when you open the game | To recognize you when you log in and to show your name in the leaderboard, to friends and in your clan |
| Game progress: your pet and its name, coins, crystals, items, room, tasks, history of pranks and boss fights, settings | Your actions in the game | To run the game |
| Who invited you (referral link), clan | The link you came from; your choice | Invitation rewards, clans and boss fights |
| Purchases: what was bought, amount in Stars, status, time, Telegram payment ID, ID of the person who paid (if it was a gift) | Telegram, after payment | To deliver the purchase, purchase history and spending limit for parents, refunds, accounting |
| Time of last login, time of last notification, consent to reminders | The game and the bot | Reminders no more than once every 3 hours, and only if you have not turned them off |
| Group chat: chat ID and title | Telegram, when the bot is added to a group | The chat’s clan, boss announcements and fight results |
| Visit statistics: which pages of the game were opened and when, device type, browser and operating system, screen size, language, approximate country and city from the IP address, where on the screen you tap and how far you scroll | Our own visit counter on our server (Umami), without cookies | To count how many people visit the game. The counter does not link visits to your account and does not store the IP address. It does not record what is on the screen or the whole session: only tap coordinates and scrolling. The data is kept for no longer than 90 days |
| Technical data: IP address, time and address of the request | The server and network equipment | Security and troubleshooting. Logs are kept for no longer than 30 days |
3. What we don’t collect
- Phone number, e-mail, photos, contact list, precise location.
- Bank card details: payments are processed by Telegram, and we only see that a payment was made and its amount in Stars.
- Messages in groups. In a group, the bot sees only commands addressed to it and the “bot added / removed” events.
- We do not use third-party analytics systems and do not install advertising trackers. Our visit counter runs on our own server, and we do not share its data with anyone.
4. Legal grounds for processing
- Performance of a contract — so that the game works under the Terms of Use: account, progress, purchases.
- Consent — for reminders from the bot (can be withdrawn with the /stop command or in the game settings). For children under 14, consent is given by a parent.
- Legal obligation — keeping payment records for accounting and refunds.
- Legitimate interest — protection against cheating and abuse, technical logs, anonymised visit statistics.
5. Who sees your data
- Other players see your Telegram name, your pet’s look and name, your hype, your room and your clan. Your ID and username are not shown to other players.
- Members of a group chat with a clan see the bot’s announcements, which may include your name (for example, the top player of a fight).
- Telegram — the platform that runs the game, the bot and payments. See the Telegram Privacy Policy.
- Adsgram — our advertising partner. Its code is loaded in the game, and when you choose to tap “watch video”, it receives technical data about your device and your IP address in order to show the video. We do not pass your name or game data to Adsgram. See the Adsgram policy at adsgram.ai.
- Google Fonts — the game’s font is loaded from Google’s servers, so Google sees your IP address and browser type.
- Hosting provider in Georgia — stores the server and database on our behalf.
- Government authorities — only upon a lawful request.
We do not sell or rent out personal data and do not use it for personalized advertising.
6. Children
- The game is made for children, among others. That is why we collect the minimum: only what Telegram gives to any Mini App, and game progress.
- If a child is under 14 (or under the age of digital consent in their country, for example 16 in some EU countries), they may use the game with a parent’s consent.
- Parents can view the purchase history, set a spending limit and turn off reminders in the “⚙️ For parents & settings” section of the game.
- If you are a parent and believe your child is playing without your consent, write to support@zentrik.games — we will delete the child’s account.
7. How long we keep data
- Account and progress — for as long as you use the game, or until they are deleted at your request.
- Payment records (Telegram ID, purchase, amount, date) — 3 years after payment, including after the account is deleted: they are needed for refunds, disputes and accounting.
- Technical server logs — up to 30 days.
- Visit statistics — up to 90 days, then deleted automatically.
- If you have deleted your account, your name may remain in old records shown to other players (for example, “prank from …”) until those records are updated in the game.
- If you open the game again after deletion, a new empty account will be created.
8. Your rights
- Find out what data we have about you and get a copy of it.
- Correct inaccurate data. Your name comes from Telegram — change it there, and it will update the next time you log in.
- Delete your account: the /deletedata command in the game’s bot or an e-mail to support@zentrik.games. Deletion cannot be undone.
- Withdraw consent to reminders: the /stop command in the bot or the switch in the game settings.
- Complain to the personal data protection authority in your country (in Georgia, the Personal Data Protection Service; in Russia, Roskomnadzor).
We respond to requests within 10 working days. To make sure a request comes from the account owner, we may ask you to send it from the game’s bot.
9. Data protection
- The connection to the game is encrypted (HTTPS).
- Every request from the game is verified using Telegram’s signature, so no one can log in to someone else’s account by using another person’s ID.
- Only the owner of the game and those who maintain the server on the owner’s behalf have access to the database.
10. Cookies and browser storage
The game does not set cookies, nor does the visit counter. Telegram and Adsgram may use their own storage in the Mini App under their own rules. The game’s server and database are located in Georgia. If you live in another country, your data is transferred to Georgia so that the game can work.
11. Changes
We will update this page if there is a change in what data we collect or who we share it with. The version date is shown at the top. We will tell you about significant changes in the game or in the bot.