No sign-up, but not anonymous
We never ask for your name, email or location. But the app does create a random account identifier so your adventure survives across sessions — and under the GDPR, that identifier is personal data.
Legal
Privacy Policy
Goat Deeper is a story you write by typing. This page explains, without evasion, what happens to the words you type, who else sees them, and how you get them back or erased.
Your words reach AI providers
The story is generated live. What you type is sent to OpenAI and Mistral AI to produce the next scene. They do not use it to train their models.
Deleting the app is not erasure
Your saves stay on our servers until you ask us to delete them. Email contact@goat-deeper.app and we will erase everything within 30 days.
01Who we are
Goat Deeper is published and operated by STORIA, a French société par actions simplifiée with a share capital of €1,000, registered with the Trade and Companies Register of Bastia under number 977 968 270, whose registered office is at 20 Lot Tombulu Biancu, 20620 Biguglia, France.
STORIA is the data controller for the personal data described in this policy, within the meaning of the EU General Data Protection Regulation (GDPR) and the French Loi Informatique et Libertés. You can reach us at contact@goat-deeper.app.
We have not appointed a Data Protection Officer, as we are not required to. Privacy requests are handled directly by the company's management at the address above.
02What we collect
What you give us
- The text you type in the game — the actions your character takes, and the choices that steer the story.
- Your characters — names, appearance, class, race and background, including the free-text descriptions you write when you create a custom character.
- Support conversations, if you write to us through the in-app chat.
- Bug reports, including the six-character code and the state of your game at the time of the report.
What the app generates about you
- A random account identifier. The app signs you in anonymously the first time it launches. There is no username, no password, no email. The identifier is a random string that lets us attach your saves and your purchases to you.
- Your game saves — the full state of every adventure, which necessarily contains the text you have typed.
- Purchase and subscription status, your gem balance, and your referral code and the codes you redeem.
- Your time zone, used to schedule the free gems you receive.
What your device sends automatically
- Technical and usage data — device model, operating system version, app version, language, and the in-game events you trigger (adventure started, chapter completed, purchase screen opened, and similar).
- Crash reports, including the technical state of the app at the moment it crashed.
- A push notification token, if you allow notifications.
- Your advertising identifier (IDFA), only if you explicitly allow tracking when iOS asks you. See section 10.
What we never collect
Your real name, your email address, your postal address, your phone number, your precise location, your contacts, your photos, and your payment card details. Payments are handled entirely by Apple, and we never see your card.
03Why, and on what legal basis
The GDPR requires us to have a lawful reason for every use of your data. Here they are, one by one.
| What we do | Data used | Legal basis |
|---|---|---|
| Run the game — generate the next scene, resolve combat, save your progress | Typed text, characters, saves, account identifier | Performance of our contract with you |
| Generate images of the custom characters you create | Your written character description | Performance of our contract with you |
| Sell and honour purchases — gems, subscriptions, restoring purchases | Account identifier, purchase status | Performance of our contract with you; legal obligation for accounting records |
| Moderate content — block characters that are sexual, hateful, or impersonate real people | Your character description | Our legitimate interest in a safe game; legal obligation |
| Fix crashes and diagnose bugs | Crash reports, technical data, bug reports, model interaction logs | Our legitimate interest in a working product |
| Understand how the game is played and improve it | Usage events, account identifier, technical data | Our legitimate interest in improving the game |
| Answer your support messages | What you write to us, account identifier | Performance of our contract with you |
| Prevent abuse of the referral programme | Referral codes, account identifier | Our legitimate interest in preventing fraud |
| Send you push notifications | Push token | Your consent (the iOS permission prompt) |
| Measure our advertising — attribute an install to the campaign that produced it | Advertising identifier, install and purchase events | Your consent (the iOS App Tracking Transparency prompt) |
Where we rely on our legitimate interest, we have weighed it against your rights and concluded that the processing is limited to what a player would reasonably expect. You can object to it at any time — see section 8. Where we rely on your consent, you can withdraw it at any time in your iOS settings, without affecting what we did before you withdrew it.
04Generative AI
Goat Deeper does not contain a pre-written story. Each scene is generated as you play, by large language models operated by third parties. This is the single most important thing to understand about your data in this app.
What is sent
To generate the next page of your adventure, we send our AI providers the context they need: the text you just typed, the recent history of your story, the names and descriptions of your characters and companions, and the state of the world around you. When you create a custom character, your written description is sent to generate the character's portrait and to check that it complies with our content rules.
Who receives it
- OpenAI (OpenAI, L.L.C., United States) — text generation and image generation.
- Mistral AI (Mistral AI SAS, France) — text generation.
We use their business and API offerings. Under the terms that govern those offerings, the content we send is not used to train their models. They act as our processors: they may retain the content briefly for abuse monitoring and for the technical caching that keeps the game fast, and then delete it. We do not authorise any other use.
Practical advice
Please do not type real personal information into the game — your real name, an address, anything about a real, identifiable person. Nothing in Goat Deeper needs it, and once it is in your story it is sent to our AI providers like the rest of the text.
What comes back
AI-generated text and images are, by nature, unpredictable. They can be wrong, incoherent, or occasionally unpleasant, despite the filters we apply. They do not represent the opinions of STORIA. If the game produces something that shocks you, tell us at contact@goat-deeper.app.
06Where your data is stored
Our servers run in the United States (Google Cloud, us-central1), and several of the
providers listed above are established there. Your data therefore leaves the European Union.
These transfers are covered by the safeguards required under Chapter V of the GDPR: the EU–US Data Privacy Framework, where the provider is certified under it, and otherwise the Standard Contractual Clauses adopted by the European Commission, together with the technical measures described in section 12. You may ask us for a copy of the relevant safeguards.
07How long we keep it
| Data | Retention |
|---|---|
| Your account identifier, gem balance and referral data | Until you ask us to delete it |
| Your game saves and custom characters | Until you ask us to delete them |
| Logs of our interactions with the AI models | 7 days, then deleted automatically |
| Prompt records kept to improve the game | 7 days, then deleted automatically |
| Temporary generation state while a scene streams | 10 minutes |
| Bug reports | Up to 12 months after the bug is closed |
| Crash reports and analytics events | Up to 14 months |
| Support conversations | Up to 3 years after our last exchange |
| Purchase and accounting records | 10 years, as French commercial law requires |
Important
Deleting the app from your iPhone does not delete your data from our servers. It removes the copy on your device. Your saves, your characters and your account identifier remain with us until you ask us to erase them. To do that, write to contact@goat-deeper.app. We will erase everything within 30 days, except the purchase records we are legally required to keep.
08Your rights
Under the GDPR you have the right to:
- Access your data, and obtain a copy of it.
- Correct it, if it is inaccurate.
- Erase it — see the box in section 7.
- Restrict how we use it, while a dispute about it is resolved.
- Port it — receive it in a structured, machine-readable format, or have it sent to another provider.
- Object to any processing we base on our legitimate interest, including analytics.
- Withdraw your consent at any time, for notifications and for advertising tracking, in your iOS settings.
- Give instructions about what happens to your data after your death, under French law.
Write to contact@goat-deeper.app to exercise any of these. We answer within one month. Because we hold no identifying information about you, we may need you to prove that you control the account before we act. The simplest way is to generate a bug report from inside the app and send us the six-character code it gives you: that code points to your account, and to nothing else.
If you are unhappy with how we have handled your request, you may lodge a complaint with the French data protection authority, the CNIL, or with the supervisory authority of the country where you live.
09Content you make public
If you choose to publish a custom character to the in-app gallery, its name, description and images become visible to other players, who can like it. The generated images are stored on a public web address: anyone holding the link can open it, even without the app. Do not publish anything you would not want to be public, and do not include information about yourself or about a real person.
You can unpublish a character at any time. Ask us at contact@goat-deeper.app if you also want the stored images deleted.
10Advertising and tracking
Goat Deeper shows no advertising inside the game, and no third party targets you with ads based on what you do here.
We do advertise Goat Deeper elsewhere, and we need to know which campaigns work. For that, the app includes the TikTok Business SDK and uses Apple's SKAdNetwork. The TikTok SDK reads your device's advertising identifier (IDFA) and reports installs and purchases back to TikTok, which allows your activity in this app to be linked to your activity on TikTok. That is tracking as Apple defines it.
It only happens if you allow it. iOS asks you for permission the first time, and we do not read your advertising identifier unless you agree. You can change your mind at any time in Settings → Privacy & Security → Tracking. SKAdNetwork, which reports aggregated, non-identifying campaign results to Apple, runs regardless — it is Apple's privacy-preserving alternative and it does not identify you.
This website, goat-deeper.app, uses no cookies and no analytics. It stores your language preference locally in your browser and nothing else.
11Children
Goat Deeper is not intended for children under 13, and we do not knowingly collect data from them. The game generates mature fantasy themes — violence, peril, dark humour — and its App Store age rating reflects that.
If you are under the age at which you can consent to online services in your country — 15 in France, between 13 and 16 elsewhere in the European Union — you may only use Goat Deeper with the permission of the person who holds parental responsibility for you.
If you are a parent and you believe your child has used the game without your permission, write to contact@goat-deeper.app and we will delete the account and its data.
12Security
Traffic between the app and our servers is encrypted in transit. Data is stored on Google Cloud infrastructure and encrypted at rest. Our servers verify that requests genuinely come from an authentic copy of the app before they answer, and access to production data is restricted to the people who need it.
No system is perfectly secure. If a breach ever affects your data and is likely to create a risk for you, we will notify the CNIL within 72 hours and inform you, as the GDPR requires.
13Changes to this policy
We will update this page when the game changes. The date at the top always tells you which version is in force, and we keep no secret older versions — ask and we will send you the previous text.
If a change materially affects how we use your data, we will tell you inside the app, at least seven days before it takes effect. We cannot email you, because we do not have your email address. Continuing to play after that notice means you accept the new version.
14Contact
Questions, requests, complaints, or a paragraph of this policy that you think is wrong: contact@goat-deeper.app.
STORIA SAS — 20 Lot Tombulu Biancu, 20620 Biguglia, France.
See also our Terms of Use.