Mesozoic Protocol is a single-player tower defense game. It runs offline, has no accounts and shows no ads. This page says what the game stores, what the website records, and how to reach us.
It covers the web version at play.mesozoicprotocol.com and the iOS, Android, macOS, Windows and Linux apps.
Ricos Labs LLC builds and publishes Mesozoic Protocol. Write to imprint@mesozoicprotocol.com with any question about this policy.
The game saves your campaign progress, save slots, unlocks, achievements, language and audio settings on the device you play on. In a browser that is the site's local storage. In the iOS and Android apps the game also mirrors those saves into the app's own storage, so the operating system cannot evict them. We cannot read any of it.
Your phone's own backup (iCloud on iOS, Google backup on Android) can include the app's saves if you turned backups on. Those copies go to your Apple or Google account, not to us.
The web version loads a self-hosted Plausible Analytics script from plausible.trebeljahr.com. It reports:
Plausible sets no cookie and stores no IP address. It counts unique visitors with a hash that changes every day and that nobody can turn back into a person. The counts live on a server we run. No other company gets them.
To opt out, block plausible.trebeljahr.com with a content blocker, or play in one of the apps.
The website runs behind Cloudflare, Inc. (San Francisco, USA). Cloudflare also adds its Web Analytics script to each page of mesozoicprotocol.com and play.mesozoicprotocol.com. Your browser loads it from static.cloudflareinsights.com. It reports the page, the referrer and how long the page took to load. Cloudflare shows us totals by page, country, browser and device type.
The Cloudflare script sets no cookie and stores nothing on your device. It keeps no ID from one page view to the next. Cloudflare receives your IP address with the report, discards it at the nearest data center and does not store it. Cloudflare does not add the script for visitors who connect through a Cloudflare data center in the EU, the EEA, the United Kingdom or Switzerland. To opt out elsewhere, block static.cloudflareinsights.com.
The about page has an optional signup form. If you use it, we store your email address and the date you signed up. Nothing else is required.
The form sends your address to a small program we run on Cloudflare Workers at mesozoicprotocol.com. It stores the address on a Listmonk server we run at listmonk.trebeljahr.com. Then it emails you a confirmation link from noreply@mail.mesozoicprotocol.com. You join the list only after you click the link. Amazon Web Services (Simple Email Service, region eu-west-1, Ireland) delivers the emails for us.
Cloudflare uses your IP address only to limit how often one network can send the form. We do not store the IP address. If you never click the link, we send you nothing more. The address stays on the Listmonk server, but on no list, until you ask us to delete it.
We use the address only to email you about Mesozoic Protocol. We email you at four moments: Steam page live, demo live, Next Fest, Early Access launch. After that, only big Early Access updates. Nothing else. Listmonk does not store your IP address and does not tie email opens or link clicks to your address.
Every email has an unsubscribe link. The same link lets you delete your data from the list. You can also write to the address above and we delete it. We keep the address until you unsubscribe or ask us to delete it.
If you send feedback from the game, we receive the text you enter, the screen or level shown in the form, the game build, your language, and whether you use a browser or app. Bug reports can also include recent game events and error categories if you select that option. The form shows those diagnostics before you send. It does not attach saves, screenshots, device details or your email address.
A Cloudflare Worker receives your report and stores it in a private Cloudflare D1 database. It also sends a copy to our support inbox through our Listmonk server and Amazon Simple Email Service in Ireland. Cloudflare uses your IP address to limit repeated submissions, but we do not put it in the report or email. We use reports to fix bugs and improve the game. Ask us at imprint@mesozoicprotocol.com if you want a report deleted. Include the report text or other details that let us find it.
When the game hits an error it did not expect, it sends an error report to an error tracker we run. The tracker is a GlitchTip server at glitchtip.trebeljahr.com. A report holds:
? or # removed? or #A report holds no user id, email address, cookie or request body. It holds no request header except the browser identifier. It holds nothing you typed and no part of your saves. If an error message contains an email address, the game replaces it before it sends the report.
The game sends nothing until an error happens. It sends no session pings, no performance traces and no screen recordings. The web version sends reports only from play.mesozoicprotocol.com. The Mac App Store version sends no error reports.
The tracker does not store your IP address. Reports reach it through Cloudflare's network, so the address it records, with the last part removed, is Cloudflare's. The reports stay on a server we run, and we use them only to fix bugs. To opt out on the web, block glitchtip.trebeljahr.com with a content blocker.
The iOS, Android, macOS, Windows and Linux apps send a feedback report only if you use the feedback form. They also send an error report when an error happens, as described under Error reports. The iOS and Android apps also check for game updates, as described under Update check. The analytics scripts only attach on the two web hostnames above, and the apps load the game from their own bundle. Apple, Google and Steam keep their own store statistics under their own policies.
Each time you start the iOS or Android app or return to it, the app checks for a game update. It asks ota.ricoslabs.com, a server we run on Cloudflare. The web, macOS, Windows and Linux versions never make this check.
The check contains the app ID, the platform, the installed versions and the update channel. It also contains a random ID that the update tool creates on your device. The server logs the app ID, the platform, the channel and the versions, and drops the random ID. Cloudflare deletes these logs after seven days at most. The server receives your IP address with the check, as with any connection, but its log does not keep it. The legal basis is legitimate interest (Art. 6(1)(f) GDPR) in delivering fixes to the game.
No name, password or payment detail. No email address, unless you sign up for the mailing list yourself or write it in a feedback report. The game has no account and no in-app purchase. No device location, contacts, photos, microphone or camera. No advertising id or device fingerprint.
The game is intended for players aged 13 and older. Store age ratings vary by region. Apart from error reports and the update check, which identify no one, the game collects data only when someone uses an optional form.
The website's aggregate counts (visits per page, per country, per day) are kept indefinitely. They contain no identifier that leads back to a visitor.
We keep feedback reports and the support emails they create until we no longer need them to address feedback or you ask us to delete them.
The error tracker deletes error reports automatically after 90 days.
If this policy changes, the date at the top changes with it. A change that affects the apps also gets a note in the next release.
← Back to Mesozoic Protocol · About · Press kit · Imprint & Credits