Privacy notice

MO LOOT is intended for people aged 13 and over. This notice covers MO LOOT separately from other AMOMOA products. The browser game and native releases use the same optional nickname/ranking rules; native releases may also offer ads when configured and available.

Controller and contact

Ahmed Mouloud Almoghrabi, trading as AMOMOA, Schafgasse 14, 73433 Aalen, Germany. Contact: hello@amomoa.info.

Local play and settings

The game stores language, local scores, collected gems, chosen crew colour, lives, regeneration times and the ad interval counter on your device. The browser uses local storage; native apps use app preferences. This necessary storage lets the game remember your progress. The game does not request precise location, contacts, camera, microphone or photo access, and it contains no independent analytics SDK.

Optional nickname profile

You can play as a guest. Creating a profile sends your chosen nickname and six-digit PIN over HTTPS. The server stores a per-profile salted PBKDF2-SHA256 PIN hash and a hash of the session token. The device stores the token, not your PIN. Your nickname, best global score and rank are public. Started runs, submitted scores, pickup counts and run timing are processed for the optional leaderboard and basic fraud checks. Login-attempt counters limit guessing. A successful sign-in rotates the old session. These profile functions are provided at your request; security checks also protect our legitimate interest in operating a safe service.

Native advertising

Configured native releases use Google Mobile Ads and Google's User Messaging Platform. Ads are requested only when the privacy flow permits them. Non-personalized-ad settings do not eliminate personal-data processing. The SDK may process IP-derived approximate location, device or advertising identifiers, app/ad interactions and diagnostics for ad delivery, measurement and fraud prevention. No nickname, profile PIN or leaderboard session token is supplied by the game to the advertising SDK. There is no cross-app AMOMOA profile sharing. Use “Ad privacy” in the game to review available privacy choices. Refusing consent does not block ordinary gameplay; ad requests or rewards may be unavailable. The current integration does not request Apple's App Tracking Transparency permission.

See Google's privacy policy and advertising subprocessors. Ad timing and skip controls belong to Google; the game does not promise an exact ten-second skip time. Rewarded ads are optional, and the reward is granted only on the earned-reward callback.

Hosting, security and retention

The public service is designed for Cloudflare Workers and a separate D1 database. Cloudflare processes technical network information needed to provide and secure the service. See Cloudflare's privacy policy and data-processing terms. Processing may occur internationally subject to applicable provider safeguards. Essential hosting logs and backups follow the provider's actual processes; no fixed log or backup deletion deadline is promised here.

Nickname profiles persist until deleted. Run records older than one day are cleaned up in bounded batches when new runs start, so cleanup is not an exact daily deletion guarantee. Deleting a profile removes its active global results and associated runs. Local preferences remain until cleared on the device, subject to operating-system behavior. Support email is handled only when you choose to contact us.

Your choices and rights

Delete your profile in the game or on the authenticated deletion page. Clear app/browser data to remove local progress. Contact us for applicable rights of access, correction, erasure, restriction, portability or objection. Where processing depends on consent, you can withdraw it for the future. You may complain to a competent data-protection authority. We do not sell player profiles or offer financial products.

Deutsch

Verantwortlich: Ahmed Mouloud Almoghrabi, trading as AMOMOA, Schafgasse 14, 73433 Aalen, Germany; hello@amomoa.info. MO LOOT richtet sich an Personen ab 13 Jahren. Spielstand, Leben und Sprache bleiben lokal auf dem Gerät. Das freiwillige Profil verarbeitet Spitzname, PIN-Hash, Sitzungskennung und Ergebnisse zur Bereitstellung der Rangliste; Spitzname, Bestwert und Rang sind öffentlich. Der Server speichert nur gesalzene PIN- und Sitzungs-Hashes. Sicherheitsprüfungen dienen auch dem berechtigten Interesse am Schutz des Dienstes. Daten aus MO flip werden nicht übernommen.

Native Versionen können Google Mobile Ads und UMP verwenden. Nicht personalisierte Werbung kann weiterhin IP-Adresse, ungefähren Standort, Gerätekennungen, Interaktionen und Diagnosen verarbeiten. Erforderliche Werbeeinwilligungen und verfügbare Datenschutzoptionen werden über UMP verwaltet; Ablehnen verhindert normales Spielen nicht. Das Spiel sendet keine Profil-PIN oder Ranglisten-Sitzung an das Werbe-SDK. Cloudflare hostet den Dienst. Profile bleiben bis zur Löschung; alte Spielrunden werden bei neuen Runden nach einem Tag schrittweise bereinigt. Technische Protokolle und Sicherungen folgen den tatsächlichen Verfahren des Anbieters. Die Profil-Löschung ist im Spiel und auf dieser Website möglich; lokale Daten werden separat auf dem Gerät gelöscht. Du kannst die anwendbaren Datenschutzrechte ausüben und dich bei einer Aufsichtsbehörde beschweren.