PRIVACY POLICY

Retro Rally · Effective September 16, 2026

Retro Rally is operated by Ariterg ("we"). This policy explains what we collect and why. The short version: we collect the minimum needed to run a competitive online game, we don't run ads, and we don't sell or share your data with advertisers.

What we collect

• Guest play: a random device identifier, your chosen display name, gameplay results and statistics (scores, rating, XP). No account or email is required to play.
• Accounts (optional): your email address and a password, handled by Amazon Cognito. Passwords are never stored or visible in plain text. If you enable two-factor authentication, an authenticator secret is stored by Cognito.
• Technical: standard connection data (IP address, timestamps) processed transiently to operate matchmaking and gameplay servers, and server logs kept up to 14 days.

Usage analytics

To see how the game is played and improve it, the iOS app and the web version send usage events to our own server. This is the data Apple's App Privacy label describes as Product Interaction and Device ID, collected for Analytics, not linked to you and not used for tracking.

• What is sent: which screens you open; matches started and finished (opponent type, mode, difficulty, result, duration, longest rally); level-ups, perk tiers and trophies earned; that a purchase was made and which item; sign-ups, sign-ins and account deletions as events; leaderboard consent answers; friend codes created or joined; Rapid Fire sessions; settings changes. On iOS also the app version, iOS version and device model (for example "iPhone18,1"); on the web the browser family and whether the device is a phone or desktop. The country of your device's language setting is included — not your location, and we never ask for location.
• The identifier: events carry a random identifier the app generates itself and stores on the device (in the browser, in local storage). It is not Apple's advertising identifier, it is not derived from your device, and it is never joined to your account, email or display name. It exists only so we can count how many distinct devices played on a given day.
• How it's kept: events are added into daily totals (for example "matches finished today") the moment they arrive. The per-device markers used for counting distinct devices expire after three days; the daily totals contain no identifiers and are kept indefinitely as statistics. We don't build a history or profile of any individual device, and analytics data is never used to make decisions about a specific player.
• Who receives it: only our own server on Amazon Web Services. No third-party analytics, advertising or measurement service receives any of it.
• Opting out: the events contain nothing that identifies you, so there is no per-person data to opt out of or delete. Deleting the app (or clearing the site's browser storage) discards the identifier; a reinstall generates a fresh one, unrelated to the old.

Purchases

Retro Rally sells optional one-time items (attribute points, Premium, extra build slots). We never see or store your card details. On the web, payments are processed by Stripe, which handles your payment information under its own privacy policy; we receive only a confirmation that a purchase completed and which item it was. On iOS, purchases are processed by Apple through the App Store and we receive only Apple's signed confirmation of the transaction. We store the resulting entitlement (points added, Premium enabled, slots owned) on your account so it can be applied and restored.

What we don't do

• No advertising, ad SDKs, or cross-app tracking.
• No sale or sharing of personal data with third parties for marketing.
• No per-person analytics profiles — usage data is anonymous and aggregated, never joined to your account.

Where data lives

Data is stored on Amazon Web Services (AWS) in the United States (authentication in Amazon Cognito, game records and usage statistics in Amazon DynamoDB). Account records are kept until you delete the account; server logs up to 14 days; aggregated usage statistics indefinitely.

Sharing

We share data only with the service providers needed to run the game — Amazon Web Services (hosting), Amazon Cognito (sign-in), Stripe (web payments) and Apple (App Store purchases) — each under its own privacy terms, and only as much as their role requires. We disclose data when the law requires it.

Your choices

• Play as a guest — no email is ever collected.
• Change your email or password at any time in Account settings.
• Delete your account in-app (Account → Delete Account) or on the web. This permanently erases your authentication record, rating, XP, build, trophies and purchase entitlements. Aggregated usage statistics contain nothing about you and are unaffected.
• Access or correction: everything we hold about your account is visible in the app (MYPLAYER, Ranks, Account). For a copy or a correction, email us from the account's address.
• For any privacy request, contact hgnozari@gmail.com.

Children

Retro Rally is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Changes

If this policy changes materially we will update this page and its effective date.