Privacy Policy — Dewkeep
This site is operated by the AI Agency. Last updated 14 September 2026.
What we collect
There is no account here: no sign-up, no email address and no profile, so we never ask you for anything that identifies you.
Like any website, our hosting records ordinary technical request logs (IP address, timestamp, the URL requested and your browser’s user-agent string) for security and diagnostics. We do not use them to build a profile of you. Advertising and analytics are covered in their own sections below.
What your browser sends us
Nothing about your pet ever leaves this device. No pet, no pet name, no care action and no day count is ever sent to us or to anyone else. Dewkeep has no account, no server-side save and no write endpoint, and its own code makes no request that carries anything you did in the app. That is a narrow promise about your pet, and not a claim about the page as a whole: the three third-party requests listed at the end of this section do happen, and the advertising and analytics sections below describe what Google sees.
Where the pet actually lives. Your creature’s name, its three needs, its age and every piece that has grown in its terrarium sit in one entry in your browser’s localStorage, under the key dewkeep.save.v1. That is not a cookie: it is never attached to a request, and no server — ours or anyone else’s — can read it. It stays until you clear site data for this site. (The app also writes a key called __dewkeep_probe__ and deletes it again immediately, which is how it finds out whether your browser allows storage at all.) We have no copy of any of it, and there is nothing on our side to delete.
The name you give your creature is the strictest case. It is stored in that same local entry and shown on screen, and it is deliberately kept out of the page title, the page address, every meta tag, the share image and its filename, the storage key itself, and every analytics and advertising call. It is not transmitted anywhere, by anything.
The export code is yours alone. The DK1… code that moves a pet to another browser is generated inside the page, from the save already on your device, and it is never uploaded — there is nowhere for it to go. Only you can move it, by copying it. Bringing a pet in works the same way in reverse: you paste the code into a field in the app, which reads it in the page. Dewkeep never accepts a save from a link, so a code cannot end up in a URL, in your history, or in the referrer your browser sends to the next site.
Because the save is local, clearing your browser data deletes your pet. So does using a different browser, a different device, or a private window. That is the trade for not asking you to sign up, and we would rather say it plainly than have you find out. Keep the export code if the day count matters to you.
Three requests do leave your browser, and none of them carries anything you did in the app:
- Our own server delivers the page, its script and its stylesheet, and answers a
/api/healthstatus check. Like any web server it records ordinary request logs, as described above. It has no route that accepts data from you. - Google Fonts (
fonts.googleapis.comandfonts.gstatic.com) serves the two typefaces this site is set in. Your IP address and browser user-agent reach Google in the course of that request, as they would for any file fetched from another domain. No cookie is set by it and nothing about your pet is included. - Google Analytics and Google AdSense, covered in the next two sections. They count page views and serve ads; like any request, they let Google see your IP address and your browser’s user-agent string. They receive no game state.
Advertising and cookies
This site is paid for by advertising. We use Google AdSense, which loads Google’s advertising script (pagead2.googlesyndication.com) on every page. Google and its advertising partners may set cookies (including the DoubleClick cookie) to choose which ad to show and to measure whether it worked, and they see your IP address and user-agent as any request does. They are given nothing about your pet, your care actions or your day count — those never leave your device.
Your cookie choice runs the whole thing. The banner you see is Google’s own certified consent management platform, integrated with the IAB Transparency & Consent Framework (TCF) v2.2 — not a banner we wrote. Until you choose, Google Consent Mode holds ad_storage, ad_user_data and ad_personalization denied for every visitor, wherever they are, so no personalised advertising happens unless you grant it. You can reopen the banner and change or withdraw that choice at any time, and clearing your browser’s cookies for this site removes what was set.
You can also opt out of personalised advertising across Google at Google Ads Settings, or out of many third-party vendor cookies at aboutads.info/choices. How Google handles data from sites that use its services is described at policies.google.com/technologies/partner-sites.
Analytics
We use Google Analytics 4 (measurement ID G-6X8XEWPK1C) to count how many people find this page and which pages they read. It is how we tell whether anyone is playing at all, and we use it for nothing else.
This is the entire list of analytics events this site sends, and everything each one carries:
page_view— sent automatically by Google Analytics when a page loads, with the page address, the referring address if there is one, and your approximate location, device and browser as Google derives them from the request.
That is the whole list: Dewkeep sends no events of its own. Feeding, watering, settling the creature to sleep, naming it, exporting it, sharing a card and every other thing you do in the terrarium are invisible to analytics — the code that would report them does not exist. No pet name, no day count, no need levels and no free text is ever sent, because there is nothing here that sends them.
Google may set analytics cookies (such as _ga) in your browser to tell a returning visit from a new one. Google’s certified consent banner records your cookie choice and Google Consent Mode applies it: analytics_storage is held denied for visitors in the EEA, the UK, Iceland, Liechtenstein and Norway until you grant it. You can change or withdraw that choice at any time in the same banner, and clearing your browser’s cookies for this site removes these cookies.
Your rights (GDPR / CCPA)
Why we are allowed to process any of it. The advertising and analytics cookies described above, and everything Google collects through them, rest on your consent (Art. 6(1)(a) GDPR), which Google’s certified consent banner collects before those cookies are set and which you can withdraw at any time in that same banner. The ordinary hosting request logs described in What we collect rest instead on our legitimate interest (Art. 6(1)(f)) in keeping this site available, secure and debuggable. Your pet, its name and its history are not a legal basis question at all: they never leave your device, and we cannot read them.
Who else sees it. Google is the only recipient of anything about your visit: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for visitors in the EEA and the UK, and Google LLC elsewhere. Google processes the analytics measurement described above on our behalf under Google’s data processing terms, and handles the advertising data described in Advertising and cookies on its own account as well as ours. This site is hosted on Amazon Web Services in its Ireland (eu-west-1) region, which is where the request logs sit. Nobody else is given anything.
Transfers outside the EEA. The hosting logs stay in the EU. Data collected through Google’s ads and analytics is processed in the United States among other countries; Google LLC is certified under the EU–U.S. Data Privacy Framework and its UK extension, which is the transfer mechanism relied on here, and Google’s terms also incorporate the European Commission’s standard contractual clauses.
How long any of it is kept. Our Google Analytics property is set to Google’s shortest event-level retention, 2 months; the user-level record behind the _ga cookie is kept 14 months and its clock restarts on a new visit, so it expires 14 months after you last come here. Hosting request logs are deleted automatically 7 days after they are written. The dewkeep.save.v1 entry on your device stays until you clear it — we have no way to expire it for you and no copy to delete — and the ad and analytics cookies expire on Google’s own schedule or when you clear them.
Your rights. Where the GDPR applies you have the right to ask us for a copy of your personal data (access), to have it corrected (rectification), to have it deleted (erasure), to have its use restricted, to object to processing we base on our legitimate interests, and to receive data you gave us in a portable form. You can withdraw your consent at any time through the consent banner, without affecting what was lawful before you withdrew it. One honest limit: because there is no account here and we hold nothing that identifies you by name, we usually cannot pick your data out of the rest — if you can give us something that narrows it down we will do what we can, and we will tell you plainly when we cannot.
Complaints. If you think we have handled your data badly you can lodge a complaint with a supervisory authority — in the EEA the data protection authority of the country where you live, where you work, or where the problem happened (the list is at edpb.europa.eu), and in the UK the Information Commissioner’s Office (ico.org.uk). You do not have to come to us first, though we would rather you did.
Selling and sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising, in the sense the California Consumer Privacy Act uses those words; we receive no payment for anything about you. ad_personalization is denied by default and only your own choice in the consent banner can turn it on; the same banner turns it off again, and California residents can use it as their opt-out of sale and sharing.
Children
Dewkeep is made for a general adult audience and is not directed to children. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child has provided personal information through this site, email auto-ai-agency@quantum-solutions.hr and we will look into it.
Contact and data rights
To exercise your GDPR/CCPA rights, opt out of personalised ads, or ask a privacy question, email auto-ai-agency@quantum-solutions.hr. We respond to verified requests within 30 days.