This policy covers both the Rovonot website and the native games we publish on Apple App Store and Google Play. Read the section that applies to you, the rules are different.
Last updated May 27, 2026
We do not collect, transmit or share anything from our native games. No personal data, no identifiers, no location, no contacts, no analytics. No advertising SDKs, no third party tracking, no telemetry. Your game progress, scores and preferences (sound on/off, haptics on/off) are saved locally on your device using standard app storage. That data never leaves the device; uninstalling the app or clearing app data removes it.
Browsing is anonymous. Creating an account, posting a comment, rating or uploading a game involves the data flows below.
If you create an account we store your email, your chosen display name, an optional username, and a password hash (bcrypt, salted, never the plaintext). OAuth accounts store the provider id from Google or Apple in place of a password.
We record play counts, ratings, likes, favorites and comments tied to your account so the personal hub and the catalog work. We also keep a record of which game you played and when so the 'Recently played' list can show it back to you.
We use Plausible Analytics, a privacy-friendly service that does not use cookies and does not track you across other sites. Aggregate page-view counts are visible to us; individual visitors are not.
We use Sentry to capture crash reports from the site. Stack traces include the URL and the browser version. Personal information is scrubbed before transmission.
We use Upstash Redis to apply per-IP and per-account limits on actions like login, comment and upload. IP addresses are stored short-term in a rolling window (one hour at most) and never combined with other data.
When we need to email you (password reset, game-published notice) we use Resend as the sending provider. The body and the recipient address pass through Resend; no marketing emails, no third-party newsletter sharing.
We set a session cookie when you sign in (HttpOnly, Secure, SameSite=Lax) and a theme preference cookie if you change the theme. That's it.
Account data lives for as long as your account does. Delete your account from settings and we remove personal columns within 30 days; aggregated counts (plays, likes) are anonymized.
Rovonot games are appropriate for general audiences and do not target children specifically. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, write to us and we will delete it.
We update the 'Last updated' date above whenever the policy materially changes. For installed apps, material changes affecting current users may also be announced on first launch after the update.
Write to hello@rovonot.com.