Rimfall

Privacy Policy

Effective and last updated: September 26, 2026

This policy explains how your personal data is processed when you play the Rimfall mobile game (the “Game”).

In short: We never ask for your name, email, phone number or location. The Game creates a random player ID and a random nickname (like “GizliYunus”) for you; leaderboards, coins and cosmetics are tied to this anonymous account. The Game is free and supported by optional rewarded ads, occasional short ads and optional in-app purchases. Personalized ads require your separate consent; without it, ads are not personalized. We never sell your data. If you allow it, the Game sends anonymous gameplay statistics to help us improve it (you can turn this off at any time in Settings › Anonymous stats); it also sends anonymous crash reports so we can fix bugs. You can delete all of your data at any time with Settings › Delete my data.

1. Data controller

Burak Avar (developer of the Game)
Contact: b2avargames@gmail.com

2. Data we process and why

Data	Where it is stored	Purpose
Anonymous player account: a randomly generated player ID and session token	Unity Technologies servers; a copy of the session token in your device’s iOS Keychain	Keeping your scores and progress yours; restoring the same account if you delete and reinstall the Game; one leaderboard player per device
Nickname (randomly generated by the Game, can be re-rolled with New name)	Unity Technologies servers	Showing you on the leaderboards. Your nickname and score are publicly visible to other players.
Gameplay data: score, wave reached, run duration, timing of enemy and boss knock-offs, “near miss” moments, run ID	Unity Technologies servers	Leaderboards (all-time, weekly league, daily challenge), mission progress and cheat prevention (scores are recalculated and verified on the server)
Game profile: coin balance, owned and equipped cosmetics, daily missions, daily reward streak	Unity Technologies servers; a copy on your device	Saving your in-game progress
Connection data: IP address and technical information sent when connecting (platform, software version)	Unity Technologies servers	Connecting to the servers and keeping the service secure
Anonymous gameplay statistics (only if you allow it): session start/end, device model and OS version, language, wave reached, score, run duration, selected arena, tutorial steps, cosmetics bought, mission rewards claimed	Unity Technologies servers (Unity Analytics)	Understanding how the Game is played so we can balance and improve it. Based on your consent, asked on first launch; you can withdraw it at any time in Settings › Anonymous stats.
Crash and error reports: technical information when the Game crashes or hits an error (device model, OS and app version, error log)	Unity Technologies servers (Unity Diagnostics)	Finding and fixing bugs so the Game works properly (legitimate interest)
Advertising data: device information sent to the ad partner when an ad is shown (device model, OS, language, IP address, ad view/click events) and, only if you allow it, the advertising identifier (IDFA / Android advertising ID)	Unity Technologies (Unity LevelPlay ad mediation) and the ad networks that serve the ads	Showing ads, limiting how often they appear, preventing fraud; and, with your consent, personalizing ads to your interests. Consent is asked on first launch and, on iOS, in Apple’s tracking permission prompt; you can withdraw it at any time in Settings › Personalized ads.
Purchase data: the store receipt when you make an in-app purchase (product, transaction ID, date). Your payment details (card etc.) stay with Apple / Google and never reach us.	Unity Technologies servers; Apple / Google for receipt verification	Adding the purchased item to your account, restoring purchases, blocking fake receipts
Game Center link (iOS, automatic): your Game Center player ID and Apple’s verification signature	Unity Technologies servers	Bringing your progress and purchases back on a new phone

This data is not linked to your name, email or any other identity information and is never sold. Ad partners process the advertising identifier, to the extent you allow it, under their own privacy policies. We do not derive your location from your IP address.

Data that stays on your device

Settings and local records: music, sound effect and vibration preferences, your best score and whether you have seen the tutorial are stored only on your device.
Share card: when you tap Share, the score image is created on your device and shared only with the app you choose. It is never sent to us.

Game Center (iPhone/iPad only, optional)

If you are signed in to Game Center on your device, your score and earned achievements are sent to Apple’s Game Center service under your Game Center account. Apple processes this data under the Apple Privacy Policy; your Apple ID and Game Center details are not shared with us. You can manage Game Center in iOS Settings › Game Center.

3. Service providers and international transfers

Server data is processed by our service provider Unity Technologies (Unity Gaming Services: Authentication, Cloud Code, Cloud Save, Leaderboards, Analytics, Diagnostics, LevelPlay, In-App Purchasing). Unity’s servers are located outside Türkiye, so this is an international transfer. See the Unity Game Player and App User Privacy Policy.

Advertising data is shared with the ad networks that serve the ads; the main network is Unity Ads (Unity Privacy Policy). Purchase receipts are sent to Apple for verification (Apple Privacy Policy).

Your nickname and score are shown to other players on the leaderboards. Data may be disclosed to competent authorities where required by law. Otherwise it is not shared with anyone.

4. Retention

Account, scores and game profile: until you delete them with Delete my data or ask us to delete them.
Anonymous statistics and crash reports: kept for Unity’s retention period (at most 2 years); turning off stats or using Delete my data automatically sends a deletion request.
The weekly league resets every week and the daily challenge leaderboard every day (at midnight Türkiye time).
On-device data is removed with Delete my data or when you uninstall the Game. The session token in the Keychain stays on the device after uninstalling so that the same account comes back when you reinstall; Delete my data removes it.

5. Security

All communication with Unity uses encrypted connections (HTTPS). The session token is stored in the iOS Keychain. Leaderboards cannot be written to directly; scores are saved only after server-side verification.

6. Deleting your data

In the Game, open Settings (gear icon, top right) › Delete my data and confirm. This deletes your leaderboard entries, coins, cosmetics, mission progress, player account and on-device records and sends a deletion request for anonymous statistics; the Game then starts over with a new anonymous account. Step-by-step guide: Deleting your data. You can also request deletion by email.

7. Your rights

You may ask us whether we process your data, request access to it, ask for it to be corrected or deleted, object to its processing, and — under the Turkish Personal Data Protection Law (KVKK), the EU/UK GDPR or other laws that apply to you — exercise any other rights you have. Email b2avargames@gmail.com; we respond free of charge within 30 days. Because the Game does not use names or emails, we may ask for your in-game nickname to find your account. You also have the right to lodge a complaint with your data protection authority.

8. Children

The Game does not ask for names, emails or contact details. Leaderboards show only random nicknames generated by the Game; players cannot enter their own names or message each other. The Game does not knowingly collect personal data from children under 13.

9. Changes

This policy may be updated. The current version is always published on this page; significant changes will also be announced in the Game.