Find A Brainrot

Privacy Policy

Effective September 30, 2026 · version 2026-09-30 · Terms of Service · Privacy Policy

This is what Find A Brainrot knows about you and your kids, why, who can see it, and how to get rid of it. The short version: we keep what the game needs to work, we never sell it, there are no ads, and a grown-up is in charge of every kid profile.

1. What we collect, and why

Your account
Your email address and a password (we store only a scrambled version), your year of birth so we know you're 13 or older, when you signed in and the network address you signed in from, and your time zone, which your browser tells us so that "today" in the game means today where you live.
Profiles
For you and each kid profile: a display name, a username, an avatar from our set, and for kids a 4-digit PIN chosen by you (scrambled too). No email, phone number or real name is ever asked of a child.
The game
The brainrots you've caught and how you look after them, the calendar days you cared for one, coins and tokens, items, trades, friendships, your progress through the Index, and the nicknames you give a brainrot.
Leaderboards
The global leaderboards show every player's username, avatar and standing (coins, catches, the Index, care days, quests). A kid's row links to nothing for anyone outside their family and friends, and a grown-up can keep a kid off the boards under Settings → Kids.
Messages
Text between grown-ups; when a kid is on either end, only the phrases and stickers we provide. Reports you make about a message. A grown-up can read every conversation of their kids' from Settings. A message someone removes is hidden from players and kept for a while so we can deal with reports.
Location
While the hunt map is open, your device sends its position so we can show brainrots near you. We work in map cells about 110 m across. Each catch keeps the rough area it happened in (that cell, roughly a block), never an exact point, so a parent can see where a kid has been playing. Friends nearby is off until you switch it on (a kid needs your yes, which lasts 90 days); while it's on and you're playing, mutual friends see the ~150 m square you're in, and that record is deleted minutes after you stop. We never keep a trail of where you've been.
Photos
Pictures from the in-game camera are composed on your device and never uploaded. We don't see them.
Kid phones
When you link a kid's phone we store a token for that phone and when it was last used. Unlink it from Settings → Kids and the token stops working straight away.
Cookies and storage
A cookie that keeps you signed in, a year-long cookie on a linked kid phone plus a short unlock stamp, and your light/dark theme choice kept in the browser. That's all: no advertising or analytics cookies, no trackers.

2. Kids

Find A Brainrot is built for families, and children under 13 play only through a kid profile made and controlled by a grown-up with an account. That grown-up chooses the kid's name and avatar, approves friends and location sharing, can read their messages and pause messaging, gets a weekly summary if they want one, and can delete the profile. Kids can't type free text to anyone, don't appear in search, and their profile is visible only to their household and the friends a grown-up approved. If you think a child is using the game without a parent's knowledge, tell us and we'll remove the account.

3. Who can see what

  • Other players can open a grown-up's profile: look, brainrots, Index progress and nicknames. A kid's profile: household and approved friends only.
  • Friends can message you and, if you've both turned it on, see when you're nearby.
  • Your household's grown-up sees everything on the kid profiles, as described above.
  • The people who run the game can see accounts, act on reported messages, and keep a history of the changes they make. They don't read private conversations unless one is reported.

4. Who we share it with

Nobody buys or rents your data from us, and there are no ads. We use a few companies to run the game, and they only process data on our behalf: DigitalOcean hosts our servers, database and files in the United States; an email service carries the messages you ask us to send (password resets, the weekly summary); Sentry records errors on our server (which page broke and which version of the app asked, never who you are or where); and MapTiler draws the map, so your phone asks it for the map squares around you, which shows MapTiler your phone's internet address and which squares, and nothing about who is asking. We'd hand data over only if the law required it, and we'd tell you if we were allowed to.

5. How long we keep it

  • Account and game data: until you delete the profile or account. Deleting removes the players, their brainrots, coins, friendships, messages and linked phones right away; our backups roll off within a few weeks.
  • Nearby-friend records: minutes. Spawn locations: a short while after they expire; a caught brainrot keeps only its rough area for as long as you keep it.
  • Our own moderation history (that an account was switched off or messaging paused, and why) stays after the account is gone so we can spot repeat problems.

6. Your choices

  • Change your look, name and username under Settings → Profile; a kid's under Settings → Kids.
  • Switch Friends nearby on or off under Settings → Permissions & privacy (kids ask from the Rooms page, then you approve).
  • Turn the weekly email on or off under Settings → Notifications.
  • Keep a kid off the global leaderboards under Settings → Kids.
  • Delete a kid profile under Settings → Kids, or the whole account under Settings → Account.
  • Want a copy of what we hold, or something corrected? Email us and we'll sort it.

7. Keeping it safe

Outside. Read this part with your kids. The game only ever needs you to be where you already are. These are the rules the game asks every household to play by, shown once in the app and in the welcome email:

  • Look up. Never walk, cross or stop while looking at the phone. Spot the brainrot, put the phone down, then walk.
  • Streets, driveways and car parks are not part of the game. If a brainrot is across a road, leave it. Another one will appear on your side.
  • Stay away from water (rivers, canals, lakes, pools), railways, cliffs and building sites. Nothing in the game is worth one step closer to any of them.
  • Only go where you're allowed to be. No private gardens, no climbing, no fences.
  • Younger kids play with a grown-up, and everyone plays in daylight and decent weather.
  • Other players. Kids only see friends you have approved, nobody can message a kid without your yes, and the game never keeps a history of where anyone has been.

Everything travels over HTTPS. Passwords, PINs, link codes and phone tokens are stored scrambled, never in the clear. Access to the servers is limited to the people who run the game. If you spot something that looks wrong, please tell us first.

8. Changes and contact

If this policy changes in a way that matters, the new version appears here with a new date and version. Anything about your data: nick@findabrainrot.com.