ScanBeast logo ScanBeast v2.0.1 Play free

Privacy & Policy

What we collect, why, and the control you have over it.

Last updated: 17 July 2026

The short version: ScanBeast never sells or rents your data. The only ads are optional rewarded ads you choose to watch for in-game rewards — there are no forced, interstitial or banner ads. Ads are served by Google AdMob, and in the EEA/UK/Switzerland you’re asked for ad consent first. Anonymous usage analytics are off by default and only turn on if you tap “Accept” — you can switch them off anytime in Settings.

1. Who we are

ScanBeast (“the app”, “we”, “us”) is a free barcode monster-battler game for Android, developed by fugush. This policy explains what personal data the app processes, why, and your rights over it. It applies to the ScanBeast Android app and this website.

For any privacy request or question, contact us at crifuga.dev@gmail.com.

2. Data we process, and why

Account & sign-in

You can play as an anonymous guest. In that case we create an anonymous account identifier (via Google Firebase Authentication) so your online progress can be saved — no name or email required. If you choose Sign in with Google, we also receive your Google account’s email address and display name, used only to preserve your progress across devices and to secure your account.

Online game profile

To power the online features you use, we store a public game profile: your chosen nickname, level, total XP, leaderboard rank and a friend code. This is what other players see on the leaderboard or when you add each other as friends.

Friends, messages & trades

If you add friends, send private messages, or trade beast cards, we process the content needed to deliver those actions between you and the other player. Private messages are relayed through a temporary server buffer and stored in the conversation history on your device; the server buffer is cleared once the message is delivered.

Push notifications

If you allow notifications, Google Firebase Cloud Messaging issues a device token so we can deliver notifications (friend requests, duel and trade invites, new messages, streak reminders). You can disable notifications at any time in your device or app settings.

Barcode scans

When you scan or type a product barcode, the barcode is sent to Open Food Facts, an open food database, to fetch that product’s public information (name, nutrition). Only the barcode is sent — no personal data about you is attached.

Anonymous usage analytics — optional, opt-in

To understand how to improve the game, we can collect anonymous usage statistics through Google Firebase Analytics: which screens are visited, app version, device type and country. This is disabled by default. It only starts if you explicitly accept the consent request shown in the app, and you can turn it off again at any time from Settings → Privacy. We do not use it for advertising and it carries no advertising identifier.

Website analytics — this site

This website (the pages you are reading right now) uses Cloudflare Web Analytics to count aggregate page views and visits. It is cookieless, sets no identifiers on your device and does not track you across other websites. Only anonymous, aggregate metrics are collected (page URL, referrer, country, browser and device type) — no personal data, and nothing is sold. This is separate from, and independent of, the app’s opt-in Firebase Analytics described above. See Cloudflare’s Web Analytics and privacy policy.

Advertising — optional rewarded ads (Google AdMob)

ScanBeast offers rewarded ads: short video ads you can choose to watch in exchange for in-game rewards (coins, a bonus after a battle, or a free daily chest). They are always optional — the game is fully playable without watching any ad, and there are no forced, interstitial or banner ads. Ads are served by Google AdMob. To show them, AdMob may process your device’s advertising identifier along with technical device and usage information, and shares this with Google as the ad provider. In the European Economic Area, the UK and Switzerland, Google’s consent request (User Messaging Platform) is shown before any ad is requested; if you decline personalised ads, you receive non-personalised ads instead. You can limit or reset ad personalisation at any time from your device’s Google ad settings (Android: Settings → Google → Ads).

Data stored only on your device

Your beast collection and app settings are kept locally on your phone (in the app’s local database). They stay on your device unless you sign in with Google to back up your online progress.

3. What we do not do

  • No forced, interstitial or banner ads — the only ads are optional rewarded videos you choose to watch.
  • No selling or renting of your data, and no sharing for marketing beyond what Google AdMob needs to serve the rewarded ads you choose to watch.
  • No precise location tracking.
  • No access to your contacts, photos or files beyond the camera used to scan barcodes.

4. Service providers

We rely on a small number of trusted providers strictly to run the app:

  • Google Firebase (Authentication, Realtime Database, Firestore, Cloud Messaging, Analytics, App Check) — hosts online accounts, profiles, social features and, if enabled, analytics. See Google’s Firebase privacy and Google Privacy Policy.
  • Google AdMob — serves the optional rewarded ads, together with Google’s User Messaging Platform for ad consent. See Google’s AdMob & privacy and Google Privacy Policy.
  • Open Food Facts — supplies product data for scanned barcodes. See their privacy policy.
  • Cloudflare Web Analytics — provides cookieless, privacy-first visitor statistics for this website only (no cookies, no cross-site tracking, no personal data). See Cloudflare’s privacy policy.

Data may be processed on Google servers outside your country under Google’s standard data-protection safeguards.

5. Legal basis (GDPR)

  • Consent — for anonymous usage analytics, and (in the EEA/UK/Switzerland) for personalised ads via Google’s consent request. You can withdraw either at any time.
  • Legitimate interest — for serving non-personalised rewarded ads to keep the game free, where consent to personalisation is not given.
  • Performance of the service — for account, online profile and the social features you actively use.
  • Legitimate interest — for keeping the game secure and preventing abuse/cheating (e.g. App Check).

6. Data retention

Online profile and account data are kept while your account exists. Message delivery buffers are cleared once delivered. Analytics data (if you enabled it) is retained according to our Firebase Analytics retention setting and then aggregated or deleted. When you delete your account, your online data is removed as described below.

7. Your rights & control

  • Delete your account — from Settings → Delete account in the app, or see the account deletion page. This removes your online profile, leaderboard entry, friends, messages and sign-in record. Your locally stored beast collection is on your device and is removed if you uninstall the app.
  • Withdraw analytics consent — turn off “Anonymous usage stats” in Settings → Privacy at any time.
  • Access, correction, objection — under the GDPR you may request access to, correction of, or deletion of your personal data by contacting us.

8. Children

ScanBeast is a general-audience game and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us and we will remove it.

9. Security

Data is transmitted over encrypted connections. Requests to our backend are attested with Google App Check to help block abuse. No online service can be guaranteed 100% secure, but we work to protect your data.

10. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new “Last updated” date.

11. Contact

Questions or privacy requests: crifuga.dev@gmail.com.