PRIVACY · SEPTEMBER 10, 2026

Your little world.

Dino 404 is operated by Derrick Frye / Fryed Apps. This notice covers the game, dino404.app, world ranking, earlier cloud-save services and support. Contact fryedapps@gmail.com.

Local play and free wardrobe

Version 0.4.5 has no Google/Apple sign-in or cloud-save recovery screen. All wardrobe items are free. Local best scores, equipped cosmetics and preferences stay on your device or browser, without cross-device synchronization. Older currency/purchase records may remain for compatibility; they are not real-money transactions. Clearing storage or uninstalling may erase local progress. Operating-system backups or migration may preserve some app data.

Nickname and world ranking

The updated web game requires a made-up nickname on first launch, not your real name. An internet connection is needed to reserve it. Returning players are recognized on the same device and can play offline after the game loads; earlier app builds may still offer offline play without a name. Names are unique without regard to capitalization; a taken name produces a numbered suggestion for your acceptance. The app creates a random private device credential and sends it over HTTPS to Dino's Cloudflare service. The server stores its hash, an internal player ID, nickname, creation time and best submitted score. This release displays your own ranking place, not a public directory of names.

Online runs use a server-issued run identifier, start time and submitted score for basic score checks. Each new run replaces the preceding run record for that player. Device and network request counters limit abuse. Practice and automated runs do not submit scores. Scores earned before joining or while ranking is unavailable are not automatically added to the online ranking.

There is no password to enter, cross-device sign-in or supported account transfer. Knowing a nickname cannot recover its identity. The private credential is kept in iOS Keychain, Android Keystore-protected storage or browser storage. Browser storage is accessible to the game on this origin. Losing your device or clearing storage may lose access; some platform credentials may survive reinstallation. Never share the credential.

Your choices and deletion

Use Settings > About > Your name & ranking > Delete leaderboard entry and confirm. This removes your nickname, best score and run record from the live ranking database; local score and outfit stay. Ranking records have no automatic inactivity-expiration rule. Expired security counters are scheduled for cleanup. If deletion fails, keep app data intact and retry or contact support. Clearing local storage alone is not a server-deletion request.

Earlier accounts and backups

Earlier versions offered optional Google/Apple identity verification and Cloudflare backups, not iCloud Drive or Google Drive. Existing accounts and saves are not automatically deleted by this update. They can contain provider identifiers, internal account IDs, game progress, cosmetic ownership, revisions, transactions, hashed session identifiers and encrypted sign-in handoff data. An encrypted Apple authorization token can be retained for authorization revocation during deletion. Dino does not receive provider passwords; Google sign-in requested OpenID identity, not Gmail or Drive access.

Earlier builds retain their deletion controls: Settings > About > Recover an older cloud save, or Options > Account & cloud saves in older versions. If those controls are no longer available, contact support. Ownership verification may be needed; never send passwords or sign-in codes. Successful deletion removes associated live database records and requires Apple authorization revocation when applicable. Legacy sessions expire after 30 days, with expired session and temporary sign-in records scheduled for hourly cleanup. Old cloud saves remain until replaced or deleted.

Hosting and security

Cloudflare hosts the website, ranking and earlier account services. Loading the site or contacting services sends network information, including IP address, requested URL and browser/device headers, to Cloudflare. Security counters, request metadata and limited error records support operations, abuse prevention and troubleshooting. The backend is designed not to log passwords, private device/session tokens or request bodies. Website error messages may be held temporarily in browser memory; the game template does not upload that list.

Cloudflare processes infrastructure logs and backups under its service policies. Live-database deletion does not immediately remove all infrastructure backups. See Cloudflare's privacy policy. Services may process information outside your country. Apple, Google and your operating system may separately process store activity and diagnostics under their policies and your settings.

No ads or real-money purchases

This release has no advertisements, subscriptions or real-money purchases. All cosmetics are free. We have not integrated an advertising tracker or gameplay analytics SDK and do not sell player information or use it for cross-app advertising tracking.

Optional reminders

Reminders are off by default. With your permission, your mobile device schedules local notifications at your chosen timing. This release does not register for remote notification campaigns. Turn reminders off in Settings > Reminders or manage notification permission in system Settings. The web game does not request notification permission. Your operating system controls delivery.

Support and children

Our Gmail support mailbox receives your email address and correspondence to help respond, troubleshoot and handle privacy requests. Send only what is needed, never passwords, private keys, sign-in codes or device tokens. You may request removal of support correspondence. Use a made-up nickname, not identifying information. Parents or guardians can contact us about a child's information or deletion.

Changes

We will update this notice when data handling changes. The date above identifies this version.