Back to Goat Simulator
This legal document applies to: Goat Simulator

Goat Simulator Privacy Policy

Goat Simulator

Privacy Notice
(Last updated February 2026)

  • INTRODUCTION
Who are we? We are COFFEE STAIN PUBLISHING AB, a company with identification number 559073-7069, and with registered address at Hertig Johans gata 6, 54130 Skövde, Sweden (“we”, “us” or “our”). We are a videogames studio. 

Where we decide the means or purpose of processing your personal data, we are the “controller.” 
What’s this notice about? This notice explains how we process personal data, as a controller, in relation to individuals (“Users”, “you” or “your”) who play our game “Goat Simulator” (“Game”), which is available to play on the Apple App Store and Google Play Store.

We update this notice from time to time, so you should check back in on a regular basis.

Please note that the Apple App Store and Google Play Store, and other websites or services mentioned in the Game, are not operated by Coffee Stain Publishing AB. You should refer to the privacy notices on those websites to understand how they process personal data.
Age requirements You must be 13 years old in order to play the Game. We therefore do not knowingly solicit data from, or market to, children under the age of 13. If a parent or guardian becomes aware that their child has provided us with information without their consent, they should contact us at the email address provided below. We will delete such information from our systems within a reasonable time.
What are your rights? You have the following rights, although these rights may be limited in some circumstances:

  • Ask us to send a copy of your personal data to you or someone else 
  • Ask us to restrict, stop processing, or delete your personal data
  • Object to our processing of your personal data
  • Object to use of your personal data for direct marketing purposes 
  • Ask us to correct inaccuracies in your personal data
How do you contact us?

 

 If you have any questions concerning this notice, including how you can exercise your rights, please contact us at: gdpr_mobile@coffeestainpublishing.com. 

If we can’t resolve your issue, you can contact the relevant regulator or supervisory authority in your country. For example, if you are based in the UK, you can get in touch with the Information Commissioner’s Office: https://ico.org.uk/concerns.

 

  • HOW WE USE IT 
To understand how you play the Game

What: We use the following information: 

  • Certain “identifiers” (including Session ID and User ID). 
  • Information which identifies which country Users are located in.
  • Information relating to Users’ in-game achievements and events, progress and scores.
  • Information relating to the device and technology which Users use to play the Game.
  • Information relating to Users’ Game settings (such as the language settings and device volume level).
  • Information about errors which Users encounter when playing the Game.

Why: We use this information to: (i) understand how you play our Game (including when and for how long); (ii) improve, test and monitor the quality and delivery of the Game; (iii) identify and correct any problems on the Game; and (iv) perform essential business operations.

How (our “legal basis”): We only collect this information where you have opted-in to disclose this information before playing the Game for the first time. You can opt-out of disclosing this information to us (i.e. withdraw your consent) by [updating your preferences via the Game’s “Settings” page].

Recipients: We collect this information using Google Analytics for Firebase. Where you have opted-in to disclose this information, via the Game’s “Settings” page, a Google Analytics for Firebase functionality is activated which collects this information. For further information about how Google Analytics for Firebase collects this information, you can find out more information here. 

How long we keep this information for: Until it is no longer necessary to retain this information, taking into account the purposes described above. We will however delete this information earlier if you request us to do so.
To respond to your feedback

What: We may use your name, email address and any other information that you submit as part of your enquiries, complaints, questions or other feedback which you send to our social media channels or to us at the following email addresses:

Why: We use this information to: (i) review and respond to your enquiries, complaints or questions about the Game; (ii) provide customer care services; (iii) improve, test and monitor the quality and delivery of the Game; and (iv) receive feedback on your experience when using our Game. 

How (our “legal basis”): We process this personal data in order to pursue our legitimate interests, being to: (i) understand how you play and interact with the Game; (ii) promote the success of our business; and (iii) provide responsive customer care services. Such interests are not overridden by your interests or fundamental rights and freedoms. 

Recipients: We may share this information with Freshworks Inc, when using their ticketing solution “Freshdesk”. You can find out more information about Freshdesk here. Additionally, we may share this information with Quantic Lab, our external IT support provider. You can find out more information about Quantic Lab here.   

How long we keep this information for: We retain this information for 30 days following the date on which the relevant enquiry, complaint, question or feedback has been resolved or otherwise closed.
To show third-party advertisements to you in-Game

What: We use the following information: 

  • Device ad identifiers (including non-permanent identifiers such as the Android advertising ID and/or Apple’s ID for advertising, and tracking pixels within ads) and similar identifiers (including login-based identifiers, randomly assigned identifiers, network-based identifiers).
  • Device information (such as browser type, language settings, screen size and supported technologies). 
  • Country and region.

Why: We use this information to show you in-Game advertisements relating to third-party products and services, or track the performance of those advertisements. 

How (our “legal basis”): We only process this data where we have your consent to do so. You can withdraw your consent for us collecting this information by updating your preferences via the Game’s “Settings” page.

Recipients: When you play the Game, this information is shared with our advertising partners to enable the technical delivery of ads to your device. Our advertising partners may combine this information with information which they have collected about you when you use their services, or the websites or services of third parties, in order to serve you more relevant ads in-Game, or to improve the accuracy of their targeting and measurement systems. Our advertising partners include:

  • Google AdMob (provided by Google LLC), and you can find out more information on this service here.
  • AppLovin (provided by AppLovin Corporation), and you can find out more information on this service here.
  • Unity Ads (provided by Unity Technologies), and you can find out more information on this service here.
  • ironSource (provided by ironSource Ltd), and you can find out more information on this service here.
  • InMobi (provided by InMobi Pte Ltd.), and you can find out more information on this service here.
  • Meta (provided by Meta Platforms, Inc.), and you can find out more information on this service here.
  • Liftoff (provided by Liftoff, Inc.), and you can find out more information on this service here. 

And in order to track the performance of third-party advertisements, which we make available to you in-Game, we use third-party tools such as: 

  • Google Ads (provided by Google LLC), and you can find out more information on this service here.
  • AppsFlyer (provided by AppsFlyer UK Ltd.), and you can find out more information on this service here.
  • Singular (provided by Singular Labs, Inc.), and you can find out more information on this service here.

How long we keep this information for: Until it is no longer necessary to retain this information, taking into account the purposes described above. We will however delete this information earlier if you request us to do so.

 

  • STORAGE, TRANSFERS AND DISCLOSURE
Storage & Transfers We are based in Sweden, regularly collaborate with an international network of partners and may from time-to-time use subcontractors based in other countries. Where we transfer personal data internationally, we implement certain contractual measures in order to safeguard such transfers, where required by applicable data protection laws to do so. For more information, please contact us using the contact details at the start of this notice.
Disclosure Other than as set out above, we may disclose your personal data:

  • Where required by law, government, competent authorities or the courts or to establish, exercise or defend our legal rights, and for the purposes of preventing crime and fraud. Legal basis: our legal basis for this processing is likely to be: compliance with legal obligation or legitimate interests in: (i) obtaining advice in relation to legal and similar proceedings; (ii) communicating with relevant third parties in relation to legal and similar proceedings; and/or (iii) protecting and defending ourselves from legal and similar proceedings. 
  • With suppliers and subcontractors, as necessary for the purposes (and on the legal basis) set out in this notice. 
  • If involved in an investment, merger, acquisition, or sale of our organisation or assets, personal data we hold may be shared on the basis of the legitimate interests of us, our shareholders, customers and other parties to a transaction, unless those interests are outweighed by prejudicial impacts upon you. Legal basis: our legal basis for this processing is likely to be: our legitimate interests pursued would typically include our interest (and that of our shareholders) in negotiating and concluding the relevant transaction, and our interest (and that of our users) in financing the business and ensuring the development and continuity of our products and services.

 

  • COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES
Cookies, pixels and other technologies store and access data on devices to help websites and apps work. This table explains their purpose, how long they last, and who else can access their data. We get consent to use them unless they’re essential to the Game.

Most browsers allow control over cookies, for more information: Google Chrome | Microsoft Edge | Mozilla Firefox | Microsoft Internet Explorer | Opera | Apple Safari.
Cookie/data Duration Purpose Access
Google AdMob – by default it collects and shares device identifiers, IP address, device/account identifiers, user product interactions, diagnostics.  This SDK operates on a session basis – it runs only while the Game is in use and does not persist long‑term tracking technology on your device.  Serving ads, performance measurement This SDK collects and shares data with Google and its ad partners. 
Applovin – collects device identifiers and attributes, coarse geolocation, ad and tracking preferences, in-app behaviour. This SDK operates on a session basis – it runs only while the Game is in use and does not persist long‑term tracking technology on your device. Primary purpose is to deliver, optimise, and measure advertising and monetisation services.  AppLovin accesses and processes the data collected. Some information may be shared with third-party service providers, measurement analytics partners, ad networks, and clients.
Unity Ads – – Standard website cookies (stored on user’s device) to recognize returning visitors.

– Analytics cookies via Google Analytics, including anonymized IP addresses, browser type, operating system, referrer URL, time of visit, and device information.

– Does not create individual user profiles.

– May also use cookies for technical operation and performance optimization.

 This SDK operates on a session basis – it runs only while the Game is in use and does not persist long‑term tracking technology on your device.  Collects data to analyze website performance and user behaviour for improvement, to ensure technical operation and optimize content and marketing, to track aggregate visitor statistics.  Google Analytics has access for analytics-related data collection. Possibly other third-party providers (e.g. payment or hosting services). 
IronSource – this SDK may collect device identifiers for advertising purposes, approximate location, app activity or other interaction data and device performance/diagnostic data.  This SDK operates on a session basis – it runs only while the Game is in use and does not persist long‑term tracking technology on your device.  Data collected by IronSource to deliver ads relevant to you, prevent fraud and improve ad quality, to analyze ad-SKD usage The data is accessed by IronSource as the SDK provider (controller or processor depending on context).

 

Advertising partners, mediated ad networks, and other third-party ad technology networks may receive the data for ad-serving and targeting, based on your consent and mediation configuration.
InMobi – InMobi may collect device identifiers (such as advertising ID, device ID), IP address, device-type, OS version, app usage data, and other technical identifiers that allow ads to be delivered and measured. This SDK operates on a session basis – it runs only while the Game is in use and does not persist long‑term tracking technology on your device. -To serve you advertisements that are more relevant or tailored to your interests.

-To measure and report on ad performance
-To detect fraud, improve ad quality, maintain system integrity and security. 

-To build aggregated insights about usage, device types, ad-effectiveness.
-To comply with legal obligations, enforce contracts, resolve disputes. 

 InMobi may share data with its affiliates, clients (i.e., advertisers, publishers) and other third-parties such as service providers.

 

Data may be transferred to other countries (outside the user’s country of residence) subject to contractual or legal safeguards.

 

InMobi may disclose information to law enforcement, regulators, or in conjunction with legal proceedings. 
Meta – may collect: device and browser information, IP address, page or screen visited, actions taken (clicks, views, conversions), referrer URL, potentially hashed identifiers This SDK operates on a session basis – it runs only while the Game is in use and does not persist long‑term tracking technology on your device.  To show you relevant advertisements, to build and refine audiences so that ad delivery can be optimised, to analyse how our game and ads are performing,

to secure and improve the game experience 

 Meta receives the data collected via their SDKs, and uses it under their own policies (you should reference Meta’s privacy/cookie policy) such as their Advertising & Data Policy. 

We (the game publisher/developer) have access to aggregated and/or user-level insights via Meta’s ad/analytics dashboards.

Ad networks or partners working with Meta may receive some of this data in order to serve adverts or to measure performance — this may include anonymised or pseudonymised information.
Liftoff – Device identifiers and mobile device information.

 

IP address and device IP-based approximate location information.

 

Approximate location.

 

Device and app performance data to support ad performance.

 

Interaction with ads for measurement/analytics.

 

Demographic data (such as age-range, gender) if the publisher (us) supplies or enables it via the SDK.

 

Cookies, pixels, web-beacons and other tracking technologies may be used in certain web or hybrid environments.

 This SDK operates on a session basis – it runs only while the Game is in use and does not persist long‑term tracking technology on your device. To deliver and optimise ads, to evaluate ad performance, To assist with fraud detection, Where permitted, to allow personalised advertising  The SDK data may be shared with Liftoff’s advertisers and partners in anonymised or pseudonymised form for the purpose of ad-delivery and measurement (as per Liftoff’s contractual terms). The game developer/publisher) have access to aggregated ad performance data (impressions, eCPM, ad-unit stats) coming from Liftoff.

Liftoff (as an ad-network/SDK provider) acts as an independent controller for most of the data it collects via its SDK. 
Firebase – Firebase may collect email addresses and the platform on which users are registered. This SDK issues an ID token which persists for ~1 hour; and issues a refresh token which is long‑lived (and is used to request a new ID token whenever the old ID token expires).  To sign users in securely, keep users signed in, and identify who each user is. The data is accessed by Firebase as the SDK provider.
Google Analytics for Firebase – 

collects app instance IDs, device identifiers, event‑level analytics data, engagement data, and other behavioural analytics.

 

 This SDK operates on a session basis – and a “session” continues while the app is in the foreground and ends after 30 minutes of inactivity by default. If the app is backgrounded and no events occur for 30 minutes, a new session will start on next open.  Analytics, user engagement measurement, performance insights, understanding how users interact with the game, and supporting product optimisation. Data is collected and shared with Google (Firebase). Developers can access analytics dashboards; Google processes the data to provide measurement and analytics services.
AppsFlyer – AppsFlyer collects device identifiers (e.g., IDFA/GAID), install attribution data, session counts, engagement/ launch events, and other attribution‑related metadata.

 

 This SDK operates on a session basis – and a new session is generally counted each time the app is launched or brought to the foreground, subject to the default minimum session gap of 10 minutes.

If a user returns within the minimum time window, the activity may be counted as part of the same session.

 Attribution, marketing analytics, install and re‑engagement measurement, campaign optimisation, and performance tracking. Data is collected and shared with AppsFlyer, and may also be shared with integrated advertising/marketing partners.
Singular – Singular collects device identifiers (IDFA/GAID), attribution data, session data, in‑app engagement events, and performance analytics. This SDK operates on a session basis – and a session lasts while the user is active; if the user becomes inactive for more than 1 minute – or the app is backgrounded for more than that – a new session is counted.  Attribution, marketing analytics, user engagement measurement, and campaign performance optimisation. Data is collected and shared with Singular, and may also be shared with relevant advertising or analytics partners.