RIFTSTEP Privacy Policy
Last updated: September 14, 2026
This Privacy Policy explains what information the mobile game RIFTSTEP (the "Game") collects, how it is used, who it is shared with, and the choices you have. The Game is published by Nick Squared LLC ("we", "us", "our").
In short: you can play without creating an account or giving us your name or email. The Game uses an anonymous account ID to save your progress and purchases, collects gameplay statistics and crash reports to improve the Game (you can turn both off in Settings), and shows ads from Google AdMob, with your consent where the law requires it. We do not sell your personal information. You can delete your account at any time in the Game.
1. Who we are and how to contact us
Nick Squared LLC
United States
Email: nick@nicksquared.co
For any privacy question or request, contact us at the email above. Please include "RIFTSTEP privacy" in the subject.
2. Information we collect
2.1 Game account and cloud save
- Anonymous account identifier. When you first open the Game, an anonymous account is created through Google Firebase Authentication. It is a random identifier, not your name or email.
- Game progress. Your progress (worlds, characters, upgrades, achievements, challenges, season progress, cosmetics, in-game currencies and gameplay statistics) is stored on the device and synchronised to our servers so it can be restored and used on other devices.
- Optional sign-in ("Protect Progress"). If you choose to link your account with Sign in with Google (Android) or Sign in with Apple (iOS), Firebase Authentication receives an identity token from Google or Apple and stores the link, which can include the email address associated with that sign-in (for Apple, this may be a private relay address). We do not use that email address for marketing and the Game does not display it. Signing in is never required.
- Security tokens that keep you signed in are stored in your device's secure storage (Android Keystore / iOS Keychain).
2.2 Purchases
- When you buy something with real money, the payment is processed entirely by Google Play or the Apple App Store. We never receive your payment card or billing details.
- To deliver the purchase and prevent fraud, our servers verify the transaction with Google or Apple and keep a record of the product purchased, the date, your account identifier, a test/real flag and a one-way hashed reference to the store transaction. We do not store the raw purchase receipt or the price you paid.
- We receive refund and revocation notifications from Google and Apple so that refunded items (such as "No Ads") can be removed.
2.3 Gameplay statistics (analytics)
If enabled, the Game sends anonymous gameplay events to GameAnalytics, for example: runs started and finished, worlds and characters used, progress depth, store and purchase funnel steps (product identifiers and revenue amounts), ad placements shown, challenges and season progress, and session length. GameAnalytics assigns its own random user identifier and collects technical information such as device model, operating system version, app version and approximate country derived from the IP address. We do not send your account identifier, name or email to GameAnalytics.
You can turn this off at any time in Settings → Privacy → Share gameplay stats. In regions where consent is required (such as the EEA and the UK), analytics does not start until the consent choice allows it.
2.4 Crash and error reports
If enabled, the Game sends crash and error reports to Sentry (data stored in the European Union). A report can include the error message and technical stack trace, the Game version, the environment, the device platform, operating system, general device class and hardware information, and a short list of recent in-game actions (for example "run started"). We configure Sentry not to store IP addresses and not to attach your account identifier, and we remove anything that looks like a token or email address before a report is sent. You can turn this off in Settings → Privacy → Send crash reports.
2.5 Advertising
The Game shows ads from Google AdMob: optional rewarded ads (for example a revive) and occasional full-screen ads between runs. Google may collect and use information such as your device's advertising identifier (where available and permitted), IP address, device and app information, and ad interactions to serve, measure and, where permitted, personalise ads. Google acts as an independent controller for this data; see How Google uses information from sites or apps that use its services.
In the EEA, UK and Switzerland, and in US states with applicable privacy laws, the Game uses Google's consent tool to ask for or record your choices. You can change them in Settings → Privacy → Privacy options (shown where required). The Game does not ask for permission to track you across other companies' apps on iOS. Buying "No Ads" removes the full-screen ads; rewarded ads stay optional.
2.6 App integrity and abuse prevention
To protect in-game purchases and our servers from cheating and abuse, the Game uses Firebase App Check together with Google Play Integrity (Android) or Apple DeviceCheck (iOS). These services confirm that requests come from a genuine copy of the Game on a genuine device. We do not store the resulting device signals.
2.7 Technical and server logs
When the Game communicates with our servers (hosted on Google Cloud / Firebase in the European Union), the hosting provider records standard request logs, which can include IP addresses, timestamps and technical request details. We use them to operate and secure the service.
2.8 Information stored only on your device
Settings (volume, haptics, accessibility, battery saver, privacy choices), consent status managed by Google's consent tool, and a local copy of your progress are stored on your device.
We do not collect: your name, phone number, contacts, precise location, photos, microphone or camera data, or payment card information.
3. How we use information
| Purpose | Information | Legal basis (EEA/UK) |
|---|---|---|
| Provide the Game, save and restore progress, cross-device play | Account identifier, game progress, optional sign-in link | Performance of our contract with you |
| Deliver and verify purchases, handle refunds, prevent fraud | Purchase records, store notifications | Contract; legitimate interests (fraud prevention); legal obligations (tax/accounting) |
| Improve and balance the Game | Gameplay statistics | Consent where required; otherwise legitimate interests |
| Fix crashes and errors | Crash and error reports | Legitimate interests (keeping the Game stable) |
| Show and measure ads | Advertising data (Google) | Consent where required (personalised ads); legitimate interests for non-personalised ads |
| Security and abuse prevention | App Check signals, server logs | Legitimate interests (security) |
4. Who we share information with
We do not sell your personal information and we do not share it for cross-context behavioural advertising except through the Google AdMob advertising described above, subject to your consent choices. We use these service providers:
- Google LLC / Google Ireland Limited: Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Logging, App Check and Play Integrity (hosting in the European Union); Google Play (payments); Google AdMob and the User Messaging Platform (ads and consent).
- Apple Inc.: App Store payments, Sign in with Apple and DeviceCheck (iOS).
- GameAnalytics ApS: gameplay analytics.
- Functional Software, Inc. (Sentry): crash and error reporting (data stored in the EU).
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer (such as a merger or acquisition).
5. International transfers
Our game servers and crash reports are hosted in the European Union. Some providers (for example Google, Apple and GameAnalytics) may process information in other countries, including the United States. Where required, these transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
6. How long we keep information
- Account and game progress: until you delete your account.
- After you delete your account: your profile, progress and in-game balances are permanently deleted from our servers, normally within a few days and no later than 30 days. Records of real-money purchases are kept in a form no longer linked to your account, only as long as needed for tax, accounting, refund and fraud-prevention purposes.
- Technical operation records (such as duplicate-request protection): up to 180 days. Backups of a profile replaced during an account conflict: up to 90 days.
- Server logs: typically around 30 days.
- Analytics and crash reports: according to the retention settings of GameAnalytics and Sentry.
7. Your choices and rights
- Delete your account: in the Game, go to Settings → Account → Delete account. This permanently deletes your cloud data. You can also ask us by email. More information: RIFTSTEP account deletion.
- Turn off analytics or crash reports: Settings → Privacy.
- Ad consent: Settings → Privacy → Privacy options (where available), and your device's advertising settings.
- Uninstalling the Game removes locally stored data. An anonymous account that was not linked to Google or Apple cannot be restored after uninstalling.
Depending on where you live (for example the EEA, UK, or US states such as California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of the "sale" or "sharing" of personal information. To exercise these rights, contact us at nick@nicksquared.co. We may need to verify that a request comes from the account holder. We will not discriminate against you for exercising your rights. You also have the right to lodge a complaint with your local data protection authority.
8. Children
The Game is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will delete it.
9. Security
Information is encrypted in transit (HTTPS). Our database cannot be accessed directly by the Game; all changes go through our servers, which verify your account. Sign-in tokens are kept in your device's secure storage. No system is completely secure, but we work to protect your information.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will change the "Last updated" date above and, for significant changes, let you know in the Game or on the store listing.
11. Contact
Nick Squared LLC, United States
Email: nick@nicksquared.co