RPSKill — Privacy Policy

Version 2.3 — Last updated: August 18, 2026

RPSKill ("the game") is a rock-paper-scissors battle game. This policy describes what data the game handles and how.

What we collect

• An anonymous account. On first launch the game creates an anonymous account (a random identifier). No email address, phone number, name, or password is collected, and no sign-up is required.
• A Facebook connection, only if you choose one. Connecting Facebook is entirely optional — the game is fully playable without it, and nothing asks you to. Its only purpose is to let you keep your account if you lose or replace your phone, because an anonymous account lives on the device and cannot otherwise be recovered by anyone, including us. If you connect, we receive from Facebook your Facebook user identifier, your name, and your profile picture, and we store the identifier alongside your existing account. Your name is used as your in-game nickname and your picture as your in-game profile photo, both of which you can change or remove afterwards like any other. We do not receive your Facebook password, your friends list, your posts, or anything else, and we never post anything to Facebook. Facebook will know that you signed in to this game; what Facebook then does with that is governed by Facebook's own privacy policy. You can disconnect by deleting your account (see below).
• Game data. Your chosen in-game nickname, match results and moves, in-match reaction emotes, in-game token balances, rating, records of in-game purchases (made with in-game currency only), and (where used) friend and guild membership. A record of the moves played in a match is kept for at most 90 days, is used only to improve the game's computer opponents, and is deleted with your account. All in-game currency is earned inside the game — there are no real-money purchases. Tokens can be earned by playing or by choosing to watch a rewarded ad (see "Advertising" below). If you appear on a leaderboard, the nickname, level and rating on that row are shown to other players, next to the drawn fighter you have chosen — never a photo you have uploaded and never your token balance. Only players who have played at least five ranked matches can appear there.
• A country code. When you search for a ranked match, the game sends the two-letter country code from your device's region setting — not GPS and not IP geolocation, just the setting you chose in your operating system. It is shown to your opponent as a small flag beside your name while a match with you is being set up or played; if the setting is unavailable, a neutral "unknown" flag is shown instead. Change your device's region setting to change it. It is deleted with your account.
• Moderation records. If you report or block another player (or another player reports or blocks you), the game stores that record: the two anonymous account identifiers, the reported nickname, and a reason from a fixed list — never free text. See "Deleting your account" for how long reports are kept.
• A profile photo, only if you add one. You may choose a drawn fighter (the default) or a photo from your device. If you choose a photo, the game resizes it to 256×256 on your device before it is uploaded — the original never leaves the phone. It is stored in a private bucket and is shown to an opponent only while a match with you is live, through a link that expires within two minutes. It is never shown on the leaderboard. You can remove it at any time, and it is deleted with your account. The game does not ask for access to your photo library: you pick one file through your operating system's own picker, and the app never sees the rest.
• Gameplay telemetry. The game records first-party usage events — screens viewed, match outcomes, session length, and error reports — tied only to the anonymous account identifier. This data is stored in our own backend (see below), is used solely to improve the game, is deleted with your account, and is retained for at most 90 days. A copy of these usage events (never the error reports) is also processed for us by an analytics service — see "Analytics" below.
• Crash diagnostics. If the game crashes or hits a serious error, a diagnostic report is sent to Sentry so the fault can be found and fixed. A report contains the error and the code path that produced it, the app version, and the device model and operating system version. It is tied to the anonymous account identifier only. No screenshot and no picture of the screen's contents is ever attached, and no nickname, photo or message is included. Nothing is sent before you accept this policy on first launch.

What we do not collect

No email, phone number, or contacts, and no precise location — no GPS, and the game itself performs no IP-based geolocation, nothing finer than the country-level region setting described above, which you control in your OS settings. One carve-out, and it is deliberate: when an ad is shown, Unity Ads derives an approximate location from your IP address and uses it for its own advertising and fraud-prevention purposes. That is why Google Play's data form lists approximate location as shared; see “Advertising” below. The usage telemetry above is collected by the game itself, not by a third-party behavioural-tracking SDK, and apart from the ad network just mentioned, the only third parties that receive anything about how the game runs are the analytics service and the crash-reporting service described below — the first receives usage events, the second receives faults, and neither receives anything before you accept this policy. If you connect Facebook, Facebook learns that you signed in and nothing else — no gameplay, no telemetry, no purchases — and if you do not connect it, Facebook is never contacted at all. We never read your advertising identifier ourselves and never join it to your account; the ad network described under "Advertising" processes device identifiers when an ad is shown, and uses your advertising identifier to personalize ads only if you have chosen to allow that.

Crash reporting

Crash and error diagnostics are processed by Sentry (Functional Software, Inc.), which we use only to find and fix faults in the game. Reports are retained for at most 90 days. Sentry receives the IP address of the sending device as an unavoidable part of any network request; we configure it not to store personal data alongside a report, and we do not use it to identify players. See Sentry's privacy policy. Sentry and the analytics service below are the only third-party services that receive data about the running game as you play, and neither receives anything until you have accepted this policy. (The email service described under "Reporting another player" receives something only if you report somebody, and nothing otherwise. Facebook, if you connect it, receives nothing about the running game — only the fact that you signed in. The ad network below receives nothing about how you play — only what it needs to deliver an ad, and only when one is shown.)

Analytics

To understand how the game is used in aggregate — which screens are reached, where new players stop, whether an update helped — a copy of the usage telemetry described above is forwarded from our own backend to Mixpanel, an analytics service. There is no Mixpanel software inside the app. Mixpanel receives the anonymous account identifier, the event name and its properties, the country code from your device's region setting, and the app version and platform. It does not receive your IP address — our server sends a zeroed address in its place, which also disables Mixpanel's own location lookup — and it does not receive error reports. The data is stored on Mixpanel's European Union servers and is deleted there automatically after at most 12 months. Nothing is forwarded before you accept this policy on first launch. See Mixpanel's privacy policy.

Reporting another player

When you report an opponent, the report is stored on our server so that it can be reviewed, and it is also emailed to us so that a report is seen within the time our Terms promise. That email contains the reason you chose from the fixed list on the card, the nickname of the player you reported (the same nickname every opponent already sees), the internal account identifiers of both of you, and the match identifier. There is no free-text field anywhere in a report, so it cannot contain anything either of you wrote. The email is delivered by Resend, which processes it only in order to deliver it. See Resend's privacy policy. Blocking a player, on its own, sends no email and tells nobody.

Advertising

The game shows ads in exactly one place. Rewarded video is always your explicit choice (a "FREE TOKENS" button), is never forced, never interrupts a match, and grants in-game tokens. A rewarded video has to be watched through to earn the tokens, and the card tells you so before you start it. No ad is ever shown to you that you did not press a button asking for. Ads are served by Unity Ads (Unity Technologies). To serve an ad and prevent fraud, Unity Ads receives device information such as device identifiers (including the advertising ID), IP address, and device model. See Unity's privacy policy for how Unity processes this data.

Personalized ads — your choice

By default, ads are non-personalized (contextual) only: no behavioural profiling and no cross-app tracking. That is what you get if you do nothing, and it is what you get if you say no.

On iOS, non-personalized is the only mode. The iOS app does not track you: it does not use Apple's App Tracking Transparency framework, never shows Apple's tracking permission dialog, and never uses your advertising identifier to personalize ads. There is no personalization setting on iOS because there is nothing to switch on.

On Android, before the first ad you ever see, the game asks whether you would like ads chosen for you instead. If you agree, your device's advertising identifier is used by Unity Ads to select ads, which may involve profiling and cross-app tracking as described in Unity's policy. This earns the game more per ad, which is what keeps it free. The number of ads you see is exactly the same either way; only their relevance changes. Saying no costs you nothing and unlocks nothing.

On Android you can change your answer at any time in Settings → Ad preferences inside the game. Turning personalization off takes effect on the next ad.

Computer-controlled opponents

Online matches are played against other people whenever someone suitable is available. When nobody is, the game seats a computer-controlled opponent so you are not left waiting. These opponents carry a name and a rating and play under exactly the same rules as a human opponent, and matches against them affect your rating in the same way. This includes matches played for a stake: at a staked table the computer-controlled opponent stakes the same amount from its own in-game balance, and the pot, fee and refunds work exactly as they do between people. No real person's name, likeness or account is used for them.

Where data is stored

Game data is stored with our backend provider, Supabase, on servers in the European Union (Frankfurt, Germany), and is used only to run the game (matchmaking, match state, balances, ratings). Like any hosting provider, Supabase keeps short-lived infrastructure request logs that include the IP address and browser/device signature of each request; we do not use these to identify players, and they age out on the provider's schedule. Usage telemetry forwarded to Mixpanel (see "Analytics") is likewise stored in the European Union, under Mixpanel's EU data-residency programme. Unity Ads (see "Advertising") processes its data under its own policy, which may involve transfers outside the EU under standard contractual clauses. Your data is never sold, and never shared with third parties for marketing.

How data is protected

In transit. Everything the game sends to or receives from our backend travels over HTTPS (TLS). Nothing about your account is sent over an unencrypted connection.

At rest. The data described above is held in our provider's database and file storage, which are encrypted at the storage layer.

Who can reach it. The game on your device never talks to the database directly. Every request goes through a single server function that first verifies the token belonging to your account, and the database itself denies all access except to that function. A profile photo, if you add one, is kept in a private storage area and is handed to an opponent only through a link that stops working within two minutes.

What this is not. This is not end-to-end encryption, and we do not claim it is. Your nickname, country code, rating, balances and match records are stored in a form we — and, with lawful access, our hosting provider — can read. That is what lets us run matchmaking, show a leaderboard, act on a report and delete your account when you ask. No security measure is perfect, and we do not promise that one is.

Deleting your account and data

You can delete your account at any time from inside the game: Lobby → SETTINGS → DELETE ACCOUNT. Deletion is immediate and permanent: the account identifier, balances, rating, country code, match history, chat, emotes, telemetry, purchase records, photo, friends, blocks, guild membership and any connected Facebook identifier are all erased. Three narrow exceptions remain for a limited time: moderation reports are kept up to 180 days (so that deleting an account cannot erase the moderation queue) and are then deleted automatically, provider infrastructure logs age out on the provider's schedule, and the copy of usage events already forwarded to Mixpanel — tied only to the now-deleted anonymous identifier — is deleted automatically at the end of its retention window (see "Analytics"). You can also request deletion without the app — see the account deletion page.

Your rights

If you are in the European Economic Area or the UK (GDPR), you have the right to access the data held about you, to have it corrected or erased, to receive a portable copy, and to object to or restrict processing. Our legal bases are: performance of a contract (running the game you asked to play — accounts, matches, balances), legitimate interest (first-party telemetry to keep the game working, and moderation records to keep it safe), and — for personalized advertising only — your consent, which you give in the card described under "Personalized ads" and may withdraw at any time in Settings without losing access to any part of the game. Withdrawing it does not affect processing carried out before you did. To exercise any right, email the address below with your friend code; deletion also works entirely self-service inside the app. You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident (CCPA/CPRA): we do not sell your personal information for money. If — and only if — you have turned personalized ads on, your advertising identifier is made available to our ad network to select ads, which CCPA/CPRA treats as sharing for cross-context behavioral advertising. You have the right to opt out of that at any time, and the switch is in Settings → Ad preferences inside the game; with it off, ads are contextual only. You also have the right to know, delete, and correct, exercised the same ways as above, and we do not discriminate for exercising any of them.

Children

The game is not directed at children under 13, a neutral age screen must be passed before an account is created, and no account or data exists until the privacy gate is accepted on first launch. If you believe a child under 13 has nevertheless used the game, a parent or guardian can email the address below and we will delete the child's account and all its data.

Contact

Questions or requests: maoravital752@gmail.com