Privacy Policy

Scope and controller

This Privacy Policy applies to the Android game Penalty Rush, its website and related support communications. “We”, “us” and “our” refer to the developer of Penalty Rush.

Information we process

Information stored locally

The game stores career progress, coins, unlocked items, missions, settings, language, audio preferences and purchase entitlement on your device. Online identity, leaderboard and PK records are processed separately as described below.

Anonymous online identity and game records

To provide online features, we process an installation-specific identifier and credential (stored as derived hashes), an anonymous player ID, your chosen display name and avatar, country or region selection, session metadata, leaderboard scores, reward receipts, online activity, moderation or restriction status, matchmaking events, and PK shots, results and protocol audit records. This is not a cross-device recovery account.

Realtime PK and direct connections

A human PK match may attempt an encrypted WebRTC peer-to-peer DataChannel. A direct connection can reveal your public IP or network address to the matched player. TURN or WebSocket relay is used when selected or when direct connection fails. Opponents receive your chosen display name and temporary match participant ID; the P2P channel carries only compact shot-replay events—never camera, microphone, screen video, email, installation credentials, session tokens or device identifiers.

Shared links, challenges and friend invitations

Only when you choose to share, we create an opaque, expiring link and a limited public snapshot containing your chosen display name, avatar and the selected result, challenge or achievement. PK result links do not publish the opponent’s name or avatar. Install Referrer carries only a contract version, link type and opaque token so an invitation can be restored after Google Play installation. We record coarse link interactions and result categories for operation, security and measurement; we do not read contacts, infer recipient relationships, record the selected target app or send raw link tokens to advertising networks.

Information processed automatically

When you use the game, integrated services may process app interactions, session and event data, device and operating-system information, app version, language or country region, IP address, network information, diagnostic information, Firebase installation or messaging identifiers, and the Android advertising ID where available.

Purchases and communications

Google Play processes purchases and provides us with transaction status and product entitlement information; we do not receive your full payment-card details. If you email us, we process your email address, message and any information you choose to include so we can respond.

How information is used

• Provide the game, save progress on your device and restore purchased entitlements.
• Measure feature use, balance gameplay, diagnose problems and improve performance.
• Deliver country- or language-relevant push notifications through Firebase Cloud Messaging.
• Display, limit, personalize where permitted and measure advertising.
• Prevent fraud, protect the game and comply with legal obligations.
• Create player-requested share links, restore their destination after installation, operate challenges and private friend rooms, and measure their reliability.

Third-party services

Penalty Rush uses the following providers. Their processing is governed by their own terms and privacy notices:

These providers may process data on servers in multiple countries and may act as independent controllers for some activities, such as advertising or payment processing.

Advertising and your choices

The free version of Penalty Rush displays advertising. Where required, a consent message lets you choose how advertising data is used. You can revisit available privacy choices in the app or change advertising settings on your Android device. You may also purchase the ad-removal entitlement offered in the game. Resetting or deleting the Android advertising ID may limit ad personalization but does not necessarily remove all ads.

Storage and retention

Local game data remains until you clear app data or uninstall. Personalized result and player-card links normally expire after 90 days, shared challenges after 30 days, and friend invitations after 60 minutes. Expired personalized snapshots are minimized; coarse share security and interaction records are normally retained for up to 180 days. Anonymous identity, leaderboard, reward, moderation and authoritative match records remain while reasonably needed to operate, secure and audit the service. Uninstalling does not itself delete server records. Support email and third-party data follow their applicable retention needs and policies.

Security and international processing

We use reasonable administrative and technical safeguards appropriate to the nature of the information. No method of storage or transmission is completely secure. Our service providers may process information outside your country, subject to the safeguards and legal mechanisms described in their privacy notices.

Children’s privacy

Penalty Rush is intended for a general audience and is not directed to children under 13, or the minimum digital-consent age in their country. We do not knowingly collect personal information directly from children. If you believe a child has provided personal information to us, contact us so we can review and delete it where appropriate.

Your rights and controls

Depending on where you live, you may request access, correction, deletion, restriction or objection, and withdraw consent where applicable. You can revoke your active player-card and challenge links in the game; account or verified privacy-deletion requests invalidate associated public links. Android settings clear local data but do not automatically delete server records. Contact us for data requests and include the anonymous player or installation identifier when available. We may need to verify the request and retain records required for security or law.

Changes to this policy

We may update this policy when the game, service providers or legal requirements change. The effective date above will be revised, and material changes may also be communicated in the game or on this website.