Skip to content

Privacy policy

Last updated: · cyberIT gaming

Your pet is cute. Your privacy is serious. This policy explains what personal information cyberIT gaming collects when you play Shardfall Pets or visit this website, why we collect it, and the rights you have under South Africa's Protection of Personal Information Act, 2013 (POPIA) and other privacy laws.

1. Who we are

Shardfall Pets is developed and published by cyberIT gaming (“we”, “us”, “our”). For the purposes of POPIA, we are the responsible party for the personal information described in this policy.

You can contact us, including our Information Officer, at privacy@cyberitgaming.com.

2. What this policy covers

This policy applies to the Shardfall Pets Android app (the “app”), this website, and our waitlist and support emails (together, the “services”).

3. Information we collect

Information you give us

  • Waitlist sign-ups: your email address and the starter pet you picked on the website.
  • Account details: if you create an account or sign in (for example with your Google account), an account identifier, display name and email address.
  • Support messages: anything you choose to tell us when you contact us.

Information created when you play

  • Game data: your pets, their names, stats and evolutions, items, outfits, Shard Cache rewards, mini-game scores and progress.
  • Purchase records: if in-app purchases are offered, a record of what you bought. Payments are processed by Google Play. We never receive your full card details.
  • Social data (when Playdates launch): friends you add, invitations and playdate activity.

Device and technical information

  • Device model, Android version, app version, language and a random app or player identifier.
  • Crash reports and performance diagnostics that help us fix bugs.

Overlay and video napping

To let your pet float over other apps, the app asks for Android's “Display over other apps” permission. This permission only lets the app draw your pet on top of the screen. We do not capture, read, record or upload the content of other apps.

So your pet can nap during videos, the app checks on your device whether video or media is currently playing. This signal is used on-device only and is not stored or sent to us.

This website

  • Our hosting provider processes standard server logs (such as IP address, browser type and pages requested) to keep the site secure and running.
  • We use your browser's local storage to remember your chosen starter pet and your best Shard Glide score. This stays on your device. We do not use advertising cookies.

4. Why we use it and our lawful basis

POPIA requires a lawful justification for processing. We rely on the following:

  • To provide the game (keeping your pet, progress and purchases safe and synced): necessary to perform our agreement with you.
  • To send launch news and updates to waitlist members: your consent, which you can withdraw at any time.
  • To keep the services secure, prevent cheating and fraud, fix bugs and improve the game: our legitimate interests, balanced against your rights.
  • To meet legal obligations, such as tax record-keeping or responding to lawful requests.

We only use personal information for the purpose it was collected for, or a compatible purpose.

5. Children

Under POPIA, anyone under 18 is a child. We do not knowingly process a child's personal information without the consent of a parent or legal guardian. If you are under 18, please ask a parent or guardian to help you set up the app. If you believe a child has given us personal information without consent, contact us and we will delete it.

6. Who we share it with

We do not sell your personal information. We share it only with:

  • Service providers (“operators” under POPIA) who help us run the services, such as cloud hosting, crash reporting, email delivery and customer support tools. They may only process your information on our instructions and must keep it secure.
  • Google Play, for app distribution and payments, under Google's own privacy policy.
  • Other players, limited to your display name and pet when you use social features like Playdates.
  • Authorities, where the law requires it, or to protect the rights and safety of our players and our company.
  • A successor business, if cyberIT gaming is involved in a merger or acquisition, subject to this policy.

7. Transfers outside South Africa

Some of our service providers store data on servers outside South Africa. When that happens, we make sure the recipient is bound by laws, binding corporate rules or written agreements that give your information a level of protection substantially similar to POPIA, as required by section 72.

8. How long we keep it

  • Account and game data: for as long as your account is active.
  • Waitlist emails: until you unsubscribe, or 12 months after Shardfall Pets launches, whichever comes first.
  • After you delete your account: removed from live systems within 30 days and from backups within 90 days.
  • Purchase records: as long as tax and accounting laws require (generally five years in South Africa).

See how to delete your account for details.

9. Keeping it secure

We use reasonable technical and organisational measures to protect your information, including encryption in transit, access controls and least-privilege access for our team. If we have reasonable grounds to believe your personal information has been accessed by an unauthorised person, we will notify you and the Information Regulator as POPIA requires.

10. Your rights

Subject to POPIA and other applicable laws, you have the right to:

  • ask whether we hold personal information about you, and request a copy of it;
  • ask us to correct, update or delete your personal information;
  • object to processing based on our legitimate interests;
  • object to direct marketing and withdraw consent at any time;
  • lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, email privacy@cyberitgaming.com. We may need to verify your identity first, and we will respond within a reasonable time (and within any period the law sets). If you live outside South Africa, you may have similar rights under your local law, and we will honour them.

11. Direct marketing

We only send marketing emails if you have opted in, for example by joining the waitlist. Every email has an unsubscribe link, and you can also just reply and ask us to stop.

12. Changes to this policy

We may update this policy as Shardfall Pets grows (for example when Playdates launch). We will change the “last updated” date above and, for significant changes, let you know in the app or by email.

13. Contact us

cyberIT gaming
Email: privacy@cyberitgaming.com