Privacy notice
Updated September 24, 2026
Outgrow: Last Tree Standing is operated by Prime Protocol Interactive LLC, managed by Matthew Pollice, formed in Delaware and based in Georgia. Mailing address: 4927 Oakview Ln Lot 29, Blackshear GA 31516. Contact primeprotocolgame@gmail.com about privacy, your data or these policies.
Playing, accounts and recovery
Your device stores progress, appearances and settings in browser storage or app-private files. Exported saves and reconnect files can contain private recovery credentials; keep them private. Clearing storage or uninstalling can remove local saves.
Online features send profile identity, display name, appearance and gameplay commands to our server. We store progress, discoveries, results and match diagnostics. Other players see permitted public names, builds and results. Hosting providers receive connection/security information, including IP addresses. We use Railway for application and database hosting and Cloudflare for our HTTPS service.
Optional accounts use Google Firebase Authentication for Google/email sign-in, verification and password resets. Firebase processes sign-in identity, email and connection information under Google’s privacy policy. Passwords go to Firebase, not our game server. Account identity connects to your server profile; your email is not shown to other players. Cloud recovery keeps the latest personal save and its previous revision, with older hosting backups possible. Signing out leaves local saves on your device.
Optional analytics and PostHog
Gameplay analytics is off by default. If enabled in Privacy settings, our server receives random installation/session identifiers, version, broad device class and bounded gameplay/performance events. These identifiers are pseudonymous, not anonymous. First-party event analytics excludes raw names, email addresses, passwords, recovery credentials, save contents, precise location and payment-card details. Global Privacy Control and Do Not Track keep optional analytics off.
A separate PostHog choice allows selected new events to reach PostHog when that service is configured. A derived account identifier can link opted-in sessions across devices; raw Firebase UID, email and payment credentials are not forwarded. PostHog may process data in the United States or European Union according to the configured service. Its own retention settings apply; contact us for information or deletion help. See PostHog’s privacy policy.
Masked browser interface replay requires another separate choice and enabled configuration. Private panels, form inputs, images and gameplay canvases are blocked; replay is disabled on Android. Existing analytics consent does not enable PostHog or replay. Changing a choice stops new optional collection and clears unsent work, but does not automatically erase records already received.
Connected features, safety and notifications
Necessary application presence uses installation/account identity to count current foreground players and maintain connected features. Records expire after 45 seconds without an update; individual presence history is not saved. This operational processing is separate from optional event analytics.
Social features store friends, invitations, preset reactions, blocks, mutes, age bands and moderation reports. Age eligibility and safety settings restrict communication and sharing. Outgrow is intended for players aged 13 and older. Contact us if a child below that age has supplied personal data. We do not offer arbitrary private chat.
In-app notifications store notice content, read state and preferences. Push requires separate service configuration and device permission. When available and enabled, Firebase Cloud Messaging processes device tokens and message data to send notices. Optional offer notifications default off. Device notification permission and optional analytics consent are separate choices.
Leaf, payments, referrals and creators
Live checkout is available only when the provider and release controls allow it. A disabled or local-test checkout is not a real purchase. Web checkout, when enabled, uses Stripe’s hosted payment page; card details go to Stripe. The game records account-linked checkout attempts, provider payment references, receipts, grants, spending, refunds and entitlements to fulfill purchases, prevent duplicate grants and reconcile disputes. Google Play payment support is separate and may be unavailable. See Stripe’s privacy policy and our purchase and refund information.
Referral records connect eligible accounts and server-verified qualification evidence. Creator onboarding records an invited verified email/account, legal name, reviewed terms version/hash and acceptance time. Creator accounting and owner sale approval do not automatically send money or substitute for the creator’s acceptance.
Retention
First-party analytics events normally expire within 30 days and are capped at 50,000. Activity indexes, consent records and rollups normally expire within 180 days; event deduplication within seven days; analytics receipt hashes within 365 days. Aggregate release summaries without account, installation or session identifiers can remain longer. Pending PostHog work expires within two days.
In-app notices expire within 30 days and are capped at 100 per account. Unused push registrations expire after 90 days. Accounts and recovery data remain to provide the service until deletion or other cleanup. Financial, referral, safety, signature and deletion-prevention records can remain where needed for unresolved requests, fraud prevention, disputes or accounting. Their applicable retention is reviewed separately; this notice does not promise that every provider or backup uses the analytics periods. Contact us to understand the records retained for your request.
Your information and choices
Use Account & saves to export local progress and manage recovery. Signed-in players can select Delete my account; the app reports completed or pending identity cleanup. You can also request account or particular-data deletion without opening the game. We verify ownership without asking for passwords, sign-in codes or private recovery keys. Exporting a save is not a complete export of all server or provider records; contact us for a broader data request.
Deletion removes linked game data and requests Firebase identity deletion. Financial records, necessary deletion-prevention markers, optional analytics, hosting recovery copies and provider records may need separate handling. Local saves and exported files remain under your control. Contact primeprotocolgame@gmail.com for access, correction, deletion or other privacy requests. Your applicable legal rights, including rights to object or complain to a regulator where available, are not limited by these controls.
No advertising provider is enabled in this build. Some Android packages contain historical advertising/consent libraries; their presence is not permission to display advertising. Current player flows do not offer advertisements or ad-based rewards. We will update relevant disclosures before materially changing data use.