Privacy Policy

Last updated: November 2, 2026

Plantoria (plantoria.net) is operated by RP NET MEDIA SRL, Str. Ștefan cel Mare 1, ap. 21, Satu Mare, Romania (VAT RO24176366, Trade Register J30/941/2008), the data controller for the data described here. We collect what we need to run the game, keep your garden saved, take payments and keep the community safe.

Your account

You can play as a guest: we create a guest profile with a random name, so your garden is saved. If you register, we store your username, your email address, a securely hashed password and, only if you choose to add it, a phone number. We also store a referral code and, if you joined through a friend's link, who invited you.

Your garden and game data

We store your game save on our servers: plants, seeds, pots, coins, diamonds, items, level and XP, codex discoveries, orders, achievements, daily rewards and season pass progress. We keep recent versions of your save so we can restore it if something goes wrong. We also keep simple play statistics (for example when you played and for how long) to balance the game and fix problems.

Community, market and leaderboards

Posts, comments, likes, discoveries, market listings and trades you make are public, together with your username, avatar and level, and can be read by anyone on plantoria.net/social, including search engines. When you share a discovery, the post text may be written automatically from the plant's name and species with the help of OpenAI; only plant information is sent for this, not your personal data. Your username and score can appear on the weekly leaderboard.

Sign in with Google, TikTok or Facebook (optional)

You can sign in with Google or TikTok instead of a password. With Google we receive your email address, name and profile photo. With TikTok (Login Kit) we receive only your basic profile: an anonymous TikTok user id (open_id), your display name and your profile photo; TikTok does not give us your email, phone number, videos, followers or messages, and we never post to TikTok for you. We use the id to recognize your account, the name to suggest your username and the photo as your avatar (we keep a small copy on our servers). We do not keep your TikTok access token after sign-in. To unlink, remove Plantoria in TikTok under Settings and privacy, Security and permissions, Apps and services permissions, or ask us to delete your account.

With Facebook (Facebook Login) we ask only for your public profile and email address: we receive your Facebook user id for this app, your name, your profile photo and, if you allow it, your email. We use them the same way as with Google (to recognize your account, suggest your username and show your photo as your avatar). We do not see your friends, posts or messages, we never post to Facebook for you, and we do not keep your Facebook access token after sign-in. To unlink, remove Plantoria in Facebook under Settings and privacy, Settings, Apps and websites, or ask us to delete your account at plantoria.net/delete-account.

Purchases

Diamonds and other in-game items are paid through Stripe. Your card details go directly to Stripe and never reach our servers. We receive and keep the payment confirmation (transaction id, amount, currency, item and time) to deliver your purchase and for accounting, as required by Romanian tax law. Stripe's privacy policy is at stripe.com/privacy.

Notifications (optional)

If you allow notifications, your browser or device gives us a push subscription that we use to remind you about your plants and daily rewards. You can turn them off at any time in the game or in your browser or device settings, and we then delete the subscription.

IP address and approximate location

When you create a profile or log in we store your IP address and the approximate location derived from it (country and city). At sign-up the location is looked up with ip-api.com, which receives the IP address for this purpose only. To decide which cookie choices to show you, we look up your country on our own server in an offline database (this product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com); for this your IP address is not sent to anyone. We use this information to keep the game safe (for example against abuse, cheating and fake accounts) and for statistics about where our players come from.

Analytics

We use a privacy-friendly analytics service, analytics.wsgratis.ro, to count page views and to see how the game is played (for example pages visited, referrer, device type, country and anonymous game events such as a plant harvested or a tutorial finished). It sets the first-party pa_cid cookie described in our Cookie Policy and does not use advertising cookies.

Advertising measurement

We may advertise Plantoria on Google, Facebook and Instagram. With your consent we use the Google tag (Google Ads) and the Meta Pixel to measure which ads bring new gardeners and, if you also allow personalized ads, to show Plantoria ads to people who visited before. Google and Meta may set their own cookies for this. In the European Economic Area, the United Kingdom, Switzerland and Quebec these are used only if you accept them. Everywhere else they are on by default and you can turn them off at any time with Cookie settings. If you reject them, the Meta Pixel is not loaded and Google Consent Mode keeps ad storage off. See Cookie Policy.

Service providers

We use trusted providers to run Plantoria: our servers at Hetzner in Finland (EU), Google Cloud Storage for game images, Stripe for payments, OpenAI for generating plant names and post texts (plant information only), ip-api.com for sign-up location, Apple and browser push services for notifications, and analytics.wsgratis.ro for statistics. They process data only to provide their service to us.

Security and logs

Our servers keep technical logs (such as IP address, browser type and request time) for security, rate limiting and troubleshooting. These are kept for a limited time.

How long we keep data

Guest profiles that are no longer used may be deleted after a long period of inactivity. Registered accounts are kept until you delete them (in the game under Settings, Delete account, or at plantoria.net/delete-account); a deleted account is deactivated at once and erased 30 days later, unless you log in again before then. Payment records are kept for the period required by Romanian accounting law (currently 10 years). Public posts stay until you or we delete them.

Legal bases

We process your data to provide the game you asked for (contract), to keep the service safe and improve it (legitimate interest), to meet legal obligations (payments and accounting) and, for advertising cookies and notifications in the regions listed above, with your consent.

Your rights

Under the GDPR you have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw your consent at any time (for cookies, through Cookie settings at the bottom of every page). You can also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or the authority in your country.

Children

Plantoria is a cozy game for a general audience. If you are under 16, please ask a parent or guardian before creating an account, making a purchase or enabling notifications.

Changes and contact

We may update this policy; the date at the top shows the latest version. See also our Terms of Use and Cookie Policy. For privacy questions or requests, write to us in the Plantoria community or by post to RP NET MEDIA SRL, Str. Ștefan cel Mare 1, ap. 21, Satu Mare, Romania (VAT RO24176366, Trade Register J30/941/2008).