Privacy at Beanling Buddies
As of 9 November 2026. This is a translation; the German version is legally binding.
For kids · For parents · In detail
For kids: what we store, in simple words
- You do not need an account. We do not want to know your name, your email address or your age.
- So that your Beanling waits for you, your device remembers a long secret number. We only get a scrambled version of it.
- We store how your Beanling is doing: when it ate, played and slept, what its name is and what is in its diary.
- Only you can see your Beanling’s name. Please do not use your real name.
- There is no chat, no advertising and nothing to buy.
- You can delete everything yourself: Settings, then “Delete game”. If you do not play for 12 months, we delete the game on our own.
- New device? A moving code lets you take your Beanling with you. The code works for one day and only once. Do not show it to anyone else.
- Got a question? Ask your parents or write to us: support@beanlings.com.
For parents: the key points at a glance
Beanling Buddies is a free creature-raising game in the browser that is also meant for younger children. There is no sign-up, no purchases, no advertising, no chat and no text that other players can see. We use no cookies and no analytics or advertising tools, and we load nothing from third-party servers.
- What is stored: a guest game save (the Beanling’s state with its care history, diary and the name chosen for the Beanling), a random device key (on our side only as a checksum), the language, the time of the last visit, only if used a moving code (as a checksum, 24 hours) and only if used the statement “at least 16” as yes/no for moving to Wildlands.
- What is not stored: name, email address, date of birth, location, photos, contacts, and no IP addresses in the game database.
- How long: until the game save is deleted, at the latest 12 months after the last visit.
- Deleting: in the game under Settings, “Delete game” (immediately and completely), or by email (see Your rights).
- To Wildlands: Beanlings Wildlands is a separate game with its own rules and its own privacy policy. The “To Wildlands” button is only unlocked after confirming “I am at least 16 years old”. Under 16 it stays locked. We do not verify the statement.
- Community egg: the community egg page only shows the shared Beanling, no data about players.
- Questions: armin.mueller.bayreuth@gmail.com or support@beanlings.com.
Privacy policy in detail
1. Controller
Cards and Supplies, Armin Müller
Polarstr. 24, 95448 Bayreuth, Germany
Email: armin.mueller.bayreuth@gmail.com
Phone: +49 160 96439378
Technical operation and development are carried out on our behalf by Tim Ebner (address in the legal notice) under a data processing agreement pursuant to Art. 28 GDPR.
2. Principle
Beanling Buddies is a guest game: we only process what is needed so that your Beanling stays saved and the game works. We do not build profiles, do not sell data, show no advertising and pass nothing on to third parties except our hosting provider (section 10). There is no automated decision-making within the meaning of Art. 22 GDPR.
3. Visiting the pages
When you open the game, your browser technically has to send, among other things, your IP address, date and time, the requested address and the browser identifier to our server. Our web server writes no access log for the Beanling Buddies pages. Only if a technical error occurs may an entry containing the IP address be created in the server’s error log; this log is deleted after 14 days at the latest.
The game application itself stores no IP addresses. To slow down misuse (for example very many requests in a short time or guessing moving codes), it counts requests per IP address and per device for at most one hour, only in memory and as a check value that cannot be turned back into the IP address. After the service restarts, this counter is gone too.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is delivering the game securely and fending off attacks.
4. Guest game save and device key
When you open the game for the first time, it creates a guest game save. For this it generates a random device key (a long string with no link to your person). The key is kept in your browser’s storage; on our server we only store a checksum of it (SHA-256) so that we can find your game save. We also store the game language, the time the save was created and the time of your last visit.
Storage in your browser. The game only places these entries in your browser’s local storage (localStorage): “nest_schluessel” (the device key), “nest_sprache” (the chosen language, only if you choose one) and “nest_toene” (whether sounds are on). In addition, a so-called service worker keeps the unchanging files of the game (program code, texts, fonts, interface images) on your device so that it loads faster and can be installed as an app; no game saves are kept there. We do not set cookies. This storage is strictly necessary for the game you asked for to work (Section 25(2) No. 2 TDDDG, German Telecommunications Digital Services Data Protection Act); no consent is required for it. You can delete the entries at any time in your browser settings. Your device will then no longer find the game save; it stays with us until it is deleted under section 11. So delete the game save in the game first, or take your Beanling with you using a moving code.
Legal basis for processing on our server: Art. 6(1)(b) GDPR (providing the game you want to use). Where, for instance with younger children, there is no valid user agreement, we base the processing on Art. 6(1)(f) GDPR: our legitimate interest is to provide the requested game. Because we only process game data without names, contact details or age, the interests of children do not override it here.
5. Game save
The game save includes: the state of your Beanling (phase, values such as full or mood, bond, care points), the care history with times (for example when you fed it or played; traits such as “night owl” come from this), the diary, mini-game results, finds, genes and form, as well as your Beanling’s name. Earlier, grown-up Beanlings stay in the same save as memories.
You pick the name from suggestions or type it yourself (2 to 14 letters, with a name filter). It only appears on your device, never on a public page. Please do not use a real name.
Purpose: providing the game. Legal basis as in section 4. Retention: section 11.
6. Moving to a new device (moving code)
In the settings you can create a moving code and enter it on another device. For this we only store a checksum of the code, the time and the expiry. The code is valid for 24 hours and only once; a new code replaces the old one. When it is redeemed, the new device gets a new device key and the old one stops working. If the new device already has its own game save, the game asks first and then deletes it. We delete expired codes. Do not share the code: anyone who knows it can take over the game save. So that nobody can guess codes, the number of attempts is limited (section 3).
Legal basis: Art. 6(1)(b) and (f) GDPR (the move you asked for).
7. Moving to Beanlings Wildlands (16 and over)
Beanlings Wildlands is a separate game with its own rules and its own privacy policy. A grown-up Beanling can move there as soon as this option is unlocked. The “To Wildlands” button only appears after you confirm “I am at least 16 years old”. We only store yes or no with the game save, no date of birth, no date of the confirmation and no ID. Under 16 the button stays locked. The statement is self-declared; we do not verify it.
If you create a transfer code (format BUDY-XXXX-XXXX), we store the code and a transfer document for your grown-up Beanling: species, colour, genes, element, rarity, form, traits, care days, bond, favourite food, finds, the times of hatching and growing up, and the Beanling’s name if it passes the name filter. The document is signed so that nobody can invent a Beanling. When you enter the code in Wildlands, the Wildlands server fetches the document directly from us; we note that the code has been redeemed. Everything that happens in Wildlands after that is covered by the Wildlands privacy policy.
Purpose: the move you asked for and compliance with the Wildlands age limit. Legal basis: Art. 6(1)(b) and (f) GDPR. Retention: together with the game save.
8. Community egg
At /buddies/serie we show the community egg: a single Beanling that we look after for everyone. The page is read-only, contains no data about players and does not link to other platforms. Voting does not take place in the game.
9. What we do not do
We use no cookies, no statistics or analytics tools, no advertising, no tracking pixels and no advertising or analytics software. Fonts, images and program code come from our own server, not from third parties. The game does not ask for location, camera, microphone, contacts or notifications. The sounds are generated by your browser itself. There is no chat and no public text.
10. Recipients and hosting
The game runs on a server of Amazon Web Services EMEA SARL, Luxembourg, in the EU region (Stockholm), under a data processing agreement. The US parent company is certified under the EU-US Data Privacy Framework. Technical operation is handled on our behalf by Tim Ebner (section 1). There are no other recipients. Only when you redeem a transfer code in Wildlands does Wildlands receive the transfer document (section 7).
11. How long we keep data
- Guest game save (with memories, the Beanling’s name, diary, language, “at least 16” statement): until you delete it, at the latest 12 months (365 days) after your last visit. Deletion without a visit runs automatically once a day.
- Moving code: until it is redeemed, at most 24 hours.
- Transfer code for Wildlands: together with the game save.
- Images in the cache (pictures of your Beanling drawn from its genes, with no link to your person): together with the game save.
- Misuse counter: at most one hour, only in memory.
- Web server error log: at most 14 days.
- Backup copies of the game database (only for emergencies, on our server): at most 14 days. Deleted game saves disappear from the backups by then at the latest.
“Delete game” in the settings immediately deletes everything that belongs to your game save: all Beanlings including memories, transfer and moving codes and the cached images. After that, the game creates a new, empty save when you open it again.
12. Children
Beanling Buddies is also meant for children. We do not process any data on the basis of consent; the special rule for consent of children under 16 (Art. 8 GDPR) therefore does not apply. The “at least 16” statement is not consent, only the requirement for the “To Wildlands” button. Parents can exercise all rights from section 13 for their children and delete the game save in the game at any time.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). For any request, an email to armin.mueller.bayreuth@gmail.com is enough; we forward requests sent to support@beanlings.com. We reply within one month.
Because we store no names and no email addresses, we can only find your game save if you show us which one it is: create a moving code in the settings and send it with your request. We only use it for your request. The fastest way to delete is to do it yourself: Settings, “Delete game”.
You can lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.
14. Security
The connection is encrypted (HTTPS). We only store device keys and moving codes as checksums. Only the service itself can read the game database, and deleted game saves are overwritten in the file. The game only accepts writing requests from its own page.
15. Changes
If the game changes, we update this policy. The version with the date above applies.