Privacy policy

Last updated 30 October 2026 (version 1.0).

Peetako is designed to collect as little as possible. There are no accounts, and we never ask for your name, email, phone number or age. This policy is written with Malaysia's Personal Data Protection Act 2010 (PDPA) in mind.

What we store

• Your pet: its name, type, colour, country, stats, tier and timestamps, plus its public Call Code.
• Country: you choose it once, when you hatch your Peetako, from the ISO 3166-1 list of countries and territories (or “Prefer not to say”, which is never shown). It is public: it appears with a flag next to your Peetako on the leaderboards and on its share page. It cannot be changed. When you hatch, your network may suggest a country (Cloudflare's guess from your connection); nothing is saved unless you confirm it. The list follows the ISO standard and is not a political statement by Peetako.
• A hash of your PIN: a one-way scrambled form. We cannot turn it back into your PIN. We also count wrong PIN attempts, to lock a pet against guessing.
• Game records: coins, cosmetics owned and worn, gifts, Pampers, battles and Mentor Boosts and Cuits (friendly pokes) between pets (by pet, not by person), Bond points for each pair of pets that played together, the Call Codes your pet saved as friends or blocked, hibernation days used, the link between a fallen pet and its Legacy Egg, daily counters for the coin limits, mini-game scores for the leaderboards and the daily top-3 badges. QR codes on share pages are drawn on your device; nothing is sent to make them. Leaderboards show a pet's name, Call Code and country.
• Invites: which pet invited yours, and a hashed form of the network address used at hatch, only to stop people inviting themselves.
• Reports: when a pet name is reported, we keep the reported text, which pet reported it and when, so it can be reviewed.
• Session records: a hash of the session token for each device you choose to remember, with an expiry date.
• Care alerts (only if you turn them on): the push address your browser gives us, the encryption keys that go with it, and your device's time zone (so we stay quiet at night). We also record which alerts your pet has already had and how many it had today, so each is sent once and you never get more than the daily limit. This is removed when you turn alerts off, tap "Leave this device", or your pet falls.
• Rate-limit counters: short-lived counters keyed by a hashed form of your IP address, used to stop abuse. They are deleted automatically once they expire.

Cookies

We set one strictly necessary cookie, ptk_session, so the game knows which pet you are caring for. It is HttpOnly (scripts cannot read it) and lasts until you close the browser, or 30 days if you tick "Remember this device". Leaving the device deletes it.

The game also keeps a few settings in your browser's own storage, on this device only: your view, sound and music choices, the last Call Codes you visited, and an invite link until you hatch. They are never sent to us, and clearing your browser data removes them.

Services we use

• Cloudflare hosts the game and its database. Cloudflare may process technical data such as IP addresses to deliver and protect the site.
• Cloudflare Turnstile may be used when hatching a pet, to check that you are human.
• Google Fonts serves the fonts used on the site.
• Share buttons (WhatsApp, Facebook, X, Telegram, Threads) are plain links: nothing is sent to those services unless you tap one, and then only the link you chose to share.
• Your browser's push service (Google, Apple, Mozilla or Microsoft, depending on your device) delivers care alerts if you turn them on. Alerts are encrypted so only your device can read them.

Peetako is free and sells nothing for real money. We may show light advertising on the home page only. No advertising is switched on until this page has been updated to say what the advertiser collects and how to opt out.

Age

Peetako is for players aged 13 and over. If you are under 13, please do not create a Peetako; if we learn that a pet belongs to a child under 13, we will delete it. There is no chat and no personal data is asked for. The only free text is a pet's name, filtered for rude words and hidden at once if another player reports it. Friends, gifts, Cuits and battles only exist between pets and use no text written by players.

How long we keep data

• A pet that has had no care and no check-in for 12 months is deleted automatically, together with its coins, cosmetics, friends, Bond, scores and alerts.
• Daily counters are kept for about a week, finished game runs for a day, and news about your pet (gifts, Pampers, Cuits) for 30 days.
• Care alert addresses are removed when you turn alerts off, leave the device, or your pet falls.
• Reports are kept for as long as needed to review them and to protect other players.

Deleting your data

You can delete your Peetako yourself at any time: open the menu and choose Delete my Peetako, then enter your PIN and type DELETE. Your pet and all the records listed above are removed from our servers at once and cannot be restored. Your Call Code then becomes available for others to choose. Backups made by our host may take a short while to expire. If you cannot sign in, email hello@peetako.com with the Call Code; we will ask you to prove it is yours before deleting anything.

Your rights and contact

Under the PDPA you may ask what we hold about a Call Code, ask us to correct it, or ask us to delete it. Because we do not know who you are, we can only act when you can show the PIN or sign in. Contact: hello@peetako.com.