Privacy Policy
Effective 8 October 2026. Version 1.0. This is the first version, so there is nothing yet in the change history.
This policy covers the games made by 3GA Labs, including Whisker Haven, and this website at 3galabs.com. It is written to be read, not to be survived.
The short version. Our games have no accounts and no sign-in. Your progress is saved on your own device, not on our servers. We do not collect your name, your email, your location or your contacts. We never see your card details. We do not sell your data, because we do not have it.
On this page
1. Who is responsible
3GA Labs is the trading name of Tomas Vanloock, an independent game developer operating as a sole trader. For the purposes of the UK and EU General Data Protection Regulation, Tomas Vanloock trading as 3GA Labs is the data controller for the limited personal data described below.
You can reach us at any time at support@3galabs.com. If you need our postal address for a formal request, ask and we will provide it.
2. What our games collect
Our games are single player and work offline. Here is the complete list of what they handle.
| What | Where it goes | Why |
|---|---|---|
| Your game progress. Coins, gems, which cats you have, which rooms you have built, which shelter you have reached, your settings. | Stored on your device only, in the app's own private storage. It is not sent to us and we cannot read it. | So the game is still there when you come back. |
| A record of what you have bought. Which items a purchase unlocked, and whether that purchase is still valid. | Stored on your device, and verified with Apple or Google. | So the gems you paid for stay yours, and so you can restore purchases on a new device. |
| Anything you write to us in a support email. | Our email inbox. | To answer you. |
That is the whole list. There is no account to create, no profile, no friends list, no chat and no cloud save. If you delete the app, your progress goes with it, which is the trade we have made in exchange for not holding your data.
3. What our games do not collect
To be specific, because vagueness here is not useful to anyone. Our games do not ask for, collect or transmit:
- your name, email address, phone number or postal address
- your precise or approximate location
- your contacts, calendar, photos, files or installed apps
- your microphone or camera
- health or fitness data
- your messages or call history
Our games request no runtime permissions beyond what the store requires to deliver the app itself and to bill you for an optional purchase.
4. Purchases
Whisker Haven sells optional in-app items such as gems, staff cards and the Haven Pass. Every purchase is handled entirely by Apple's App Store or Google Play, depending on where you got the game.
This matters, so plainly: we never see your card number, your bank details, your billing address or your full name. Apple or Google take the payment and tell our game only that a given purchase succeeded. They are the ones processing your payment data, under their own privacy policies:
Refunds are handled by the store, not by us, because the store is who holds the money. We will happily help you work out who to ask.
5. Advertising
As of the effective date above, our games contain no advertising and no advertising SDK. Nothing in Whisker Haven shows you an advert, and no advertising identifier is read or shared.
We expect this to change. Whisker Haven is designed to offer optional rewarded videos, the kind you choose to watch in exchange for a speed boost or a bonus, and we may add them in a future update. When that happens we will do all of the following before the update ships:
- name the advertising partner in this policy, and link their own privacy policy
- describe exactly what they receive, which for this type of advert is normally your device's advertising identifier, rough device model and country, and never your save data
- update our Google Play Data safety declaration and our Apple privacy labels to match
- republish this policy with a new version number and a dated entry in the change history below, so you can see what changed and when
If you are reading this section and it still says no advertising, then there is no advertising. We will not quietly add it and leave this paragraph standing.
6. Data from Apple and Google
Apple and Google run the stores our games are sold through, and they collect their own data about downloads, crashes and purchases whether or not we ask them to. We can see some of it, always as aggregate statistics rather than anything tied to you:
- how many people downloaded or updated the game, by country and device type
- crash and performance reports, if you have opted in to sharing those with developers in your device settings. These describe what the software was doing when it broke, not who you are.
- total sales figures, and reviews you choose to write publicly
We cannot identify you from any of this, and we do not try to.
7. This website
3galabs.com is a handful of static pages. It sets no cookies, runs no analytics, embeds no tracking pixels, loads no third party fonts and contains no advertising. There is nothing here to consent to, which is why you were not shown a banner.
The site is hosted by Vercel Inc., who keep short lived server logs that include your IP address, in the ordinary way any web server does, in order to serve the page and defend against abuse. Their practices are described in Vercel's privacy policy. We do not inspect these logs to identify visitors.
8. If you email us
When you write to support@3galabs.com we receive your email address, your message and whatever you choose to tell us. We use it only to answer you and to fix the thing you told us about. Our email is provided by Google, so your message sits in Gmail. We keep support threads for up to 24 months so that we have the history if you write again, then delete them. Ask us to delete yours sooner and we will.
9. Children
A game about looking after cats is going to attract younger players, and we have built it with that in mind.
Our games do not knowingly collect personal information from anyone, of any age. That is the strongest protection we can offer and it applies to children by default. We comply with the United States Children's Online Privacy Protection Act, the children's provisions of the UK and EU GDPR, and the Google Play Families policy.
Specifically, for children and for users whose age we do not know, our games do not transmit the advertising identifier, device serial, IMEI, IMSI, MAC address or SSID, do not show personalised advertising, and do not contain social features through which a child could share anything about themselves.
In-app purchases are real money, and parents should know they exist. Both platforms let you turn them off or require a password for every one. See Ask to Buy and Screen Time on Apple devices, and purchase authentication and parental controls on Google Play.
If you are a parent or guardian and you believe your child has somehow sent us personal information, write to support@3galabs.com and we will delete it and confirm that we have.
10. Who else sees anything
We do not sell personal data. We do not share it for advertising. We do not trade it, rent it or hand it to data brokers. We have no business model that depends on it.
The complete list of outside parties involved in anything described above:
| Who | What for | What they get |
|---|---|---|
| Apple | App distribution and payments | Your purchase and payment data, as their customer |
| App distribution, payments, and our email | Your purchase and payment data, and support emails you send us | |
| Vercel | Hosting this website | Server logs containing your IP address |
We would also disclose information if a law or a valid court order required it, which has never happened. If 3GA Labs were ever sold or wound up, any data covered by this policy would be subject to the same commitments, and we would say so here first.
11. How long we keep things
- Game progress: on your device, for as long as you keep the app. Deleting the app deletes it. We hold no copy.
- Support emails: up to 24 months, then deleted.
- Website server logs: held briefly by our host under their own retention schedule, typically days rather than months.
- Purchase records: held by Apple and Google for as long as their own tax and accounting obligations require.
12. Your rights
Because we hold so little, most requests have a short answer. We will still take every one seriously, and we will never charge you or make you create an account to ask.
If you are in the UK, the EU or the EEA
Under the GDPR you have the right to access your personal data, to correct it, to have it erased, to restrict or object to how we use it, to data portability, and to withdraw consent where we relied on it. For support emails, our lawful basis is legitimate interest in answering you. For purchase records, it is the performance of our contract with you and our legal obligations.
Write to support@3galabs.com and we will respond within 30 days. You also have the right to complain to your national data protection authority, and you do not have to come to us first.
If you are in California
Under the CCPA and CPRA you have the right to know what personal information is collected, to delete it, to correct it, and to opt out of its sale or sharing. We have never sold or shared personal information as those terms are defined, and we do not use it for cross context behavioural advertising. We will not discriminate against you for exercising any of these rights.
Everywhere else
Ask us anyway. We will treat your request the same way.
How to delete everything
Delete the app. That removes your save data, since your save data only ever existed on your device. Then, if you have emailed us, ask us to delete the thread.
13. International transfers
We are based in Europe, and Apple, Google and Vercel are United States companies that operate globally. Where a support email or a server log is processed outside your country, that transfer relies on the receiving company's own safeguards, which for all three means the EU Standard Contractual Clauses and, where applicable, the EU to US Data Privacy Framework.
14. Security
Your game progress is protected by your own device's app sandbox and whatever lock screen you use. Our website is served over HTTPS only. Our email is protected with two factor authentication. We hold no database of users, which removes the thing most often breached.
No system is perfect. If you find a security problem in one of our games or on this site, email support@3galabs.com and we will take it seriously and credit you if you would like.
15. Changes to this policy
When we change something that matters, particularly if we add advertising or analytics, we will update the version number and effective date at the top of this page and add a line here saying what changed. Material changes will also be announced in the game's update notes. We will not change this policy retroactively.
| Version | Date | What changed |
|---|---|---|
| 1.0 | 8 October 2026 | First published. |
16. How to reach us
One inbox, read by a person: support@3galabs.com
Tomas Vanloock, trading as 3GA Labs. Postal address available on request.