Privacy Policy

This policy explains what information the City Rush mobile game for Android and iOS (“the game”) and the website rushcity.net (“the website”) handle, and why. “We” and “us” mean the developer of City Rush. You can reach us at help@rushcity.net.

1. Information stored on your device

The game keeps the following in its private storage on your phone:

• your saved games (progress, money, property, vehicles and similar game data);
• settings such as language, graphics quality, difficulty and controls;
• whether you own the Key to the City (a cached copy, checked with Google Play or the App Store on every start);
• counters the game needs to space out ads and rating requests (for example, total minutes played and when the last ad was shown);
• on Android, gameplay statistics that have not been sent yet and a marker of whether the game closed normally (see section 5);
• from version 0.1.3, the story films (short videos) it has downloaded, in the app’s cache (see below).

Story films. From version 0.1.3 the story missions open and close with short films. They are not part of the app: the game downloads each one from rushcity.net (hosted by Cloudflare) shortly before it is needed. A download asks only for the film by name; it carries no identifier and no information about you or your device, and our server keeps no record of it. Like any request to a website, Cloudflare processes your IP address to deliver the file (see section 7). The films are kept in the app’s cache, which your phone may clear at any time, and are deleted when you uninstall the game. You can turn them off with the Cutscenes option in the game’s settings; the missions then show their dialogue as text and nothing is downloaded.

This information is not sent to us, except the anonymous statistics described in section 5. From version 0.1.2, on Android it can be included in Android’s automatic backup to your Google account, so your progress survives a new phone. That backup is made and kept by Google, and you can turn it off in your phone’s backup settings. On iPhone and iPad it may be included in the device backups you make with iCloud or a computer; those backups are handled by Apple and by you. The information is deleted when you uninstall the game (on Android, also when you clear its data in settings).

2. Advertising (Google AdMob)

The free version of the game shows full-screen ads and optional rewarded ads (never banners) through the Google Mobile Ads SDK (AdMob), provided by Google, on both Android and iOS. To show and measure ads, Google may collect:

• device identifiers: on Android, the advertising ID and app set ID; on iOS, the identifier for vendors and, only if you allow tracking in Apple’s prompt, the advertising identifier (IDFA);
• your IP address, from which the ads SDK may infer your approximate location (the game itself never uses GPS or a location permission);
• device and app information, such as device model, operating system version, language and app version;
• ad interactions (for example, which ads were shown or tapped) and diagnostic data.

Google uses this information to serve ads, measure them, limit how often you see them, prevent fraud and abuse and, if you allow it, to personalise ads. The data is encrypted in transit.

Your choices

• European Economic Area, United Kingdom and Switzerland: before personalised ads are shown, the game displays Google’s consent form (Google User Messaging Platform).
• US states with privacy laws: the same Google form lets you opt out of the sale or sharing of your personal information for ads.
• In the game: where these choices apply, you can change them at any time in Settings → Privacy choices (ads).
• iPhone and iPad: the game asks for your permission before any tracking (Apple’s App Tracking Transparency prompt). If you choose “Ask App Not to Track”, the advertising identifier is not shared. You can change this at any time in Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID, or opt out of ads personalisation, in your phone’s settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on the phone).

Ads are not targeted at children, and ad content is limited to the “T” (Teen) rating. We only receive aggregated reports from AdMob (such as the number of ads shown and earnings), not information that identifies individual players.

If you own the Key to the City, the game shows no ad breaks: no full-screen or video ads are loaded or shown. The ads SDK is still part of the app and may start up, check your consent status and exchange basic technical data with Google.

The billboards on Rush City’s rooftops and the radio’s commercials are part of the city and stay for everyone, Key owners too. The game draws them itself, not through an ad network, and they don’t collect or send any information about you (how long a billboard was on screen is counted only on your device).

Google’s processing is described in the Google Privacy Policy and in How Google uses information from sites or apps that use its services.

3. Purchases (Google Play and App Store)

The Key to the City is a one-time in-app purchase processed by Google Play Billing on Android and by the Apple App Store on iOS. Google and Apple handle your payment information under their own privacy policies. We never see your card or account details. The game receives only the purchase status and a purchase token or transaction record, so it can unlock the item and restore it on a new device. Refunds are handled by Google Play or Apple.

4. Ratings

The game may show the store’s own rating prompt (Google Play’s in-app review card or Apple’s rating prompt), no more than twice. The prompt is handled entirely by Google or Apple. We don’t learn whether you rated the game, beyond what is publicly visible in the store.

5. Anonymous gameplay statistics (Android)

From version 0.1.2, the Android game sends us anonymous statistics so we can find bugs and see which parts of the game are too hard or run too slowly. They contain:

• game events: a mission started, passed or failed and how long it took; being wasted or busted; an ad shown; the Key to the City screen opened or the Key turned on; a change of graphics quality;
• from version 0.1.6, how many days have passed since you first started the game (sent at most once a day, as a number of days, never as a date) and which first steps you reached (the menu, the city, the end of the intro, the first mission, 15 minutes of play, the end of chapter 1), so we can see whether players come back and where new players give up. To count the days, the game keeps the day of its first start on your phone; it is deleted when you turn the statistics off;
• smoothness: frame-rate summaries every few minutes;
• technical errors that happen inside the game;
• device and game information: phone model, Android version, graphics chip, number of processor cores, memory size, screen size, game language, settings, difficulty and total minutes played.

They are sent in small batches to our server at rushcity.net (hosted by Cloudflare). A batch carries only a random number created for that play session. It is never stored on your phone and is not linked to you, your device, your advertising ID or your Google account. Our server does not keep your IP address: Cloudflare passes on only your country. Cloudflare still processes the IP address to deliver the request, as described in section 7. We keep the statistics for 180 days and then delete them.

To stop sending them, open the pause menu → Settings → Anonymous gameplay stats → Off. Anything not yet sent is then deleted from your phone. The iPhone and iPad version does not send these statistics.

6. Support and bug reports

“Report a bug” in the game’s settings opens your email app with a draft that already contains technical details to help us reproduce the problem: game version, device model, operating system version, graphics chip, game language, graphics quality, difficulty and minutes played. Nothing is sent until you press send, and you can edit or delete anything in the draft.

When you email us, we receive your email address and whatever you write or attach. We use it only to answer you and fix problems. We keep messages as long as needed for that, and delete them after 24 months at the latest. You can ask us to delete them sooner at any time. Our mailbox is provided by Proton AG (Switzerland).

7. The website

rushcity.net is hosted on Cloudflare. To deliver the pages and protect the site from attacks, Cloudflare processes technical data such as your IP address, browser type and request logs. The website sets no cookies and uses no advertising or cross-site tracking. We may use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.

Launch news (optional)

If you leave your email address in a “Notify me” form, we store that address, the date, the page language and your consent in our database at Cloudflare, so we can tell you when City Rush launches and, rarely, about big updates. To protect the form from abuse, we also keep a one-way scrambled version (hash) of your IP address for a short time. We never sell or share the list, and we don’t use it for anything else. Every email has an unsubscribe link, and you can also write to us to be removed; we then delete your address.

Links to Google Play, the App Store, YouTube or social networks lead to services that have their own privacy policies.

8. What we don’t do

• We don’t sell your personal information.
• The game doesn’t access your location (GPS), contacts, camera, microphone, photos or files.
• On Android the game itself declares only internet (for ads, purchases and the anonymous statistics) and vibration. The Google libraries it includes add the standard technical permissions they need: network state, the advertising ID and basic phone state (used by the ads SDK, for example to know the network type), billing (for purchases), and wake lock and foreground service (used by Android’s background-task library for short tasks). None of them shows you a prompt, and none gives access to your location, contacts, camera, microphone, photos or files. (The ads SDK may still infer your approximate location from your IP address — see section 2.) On iOS the only permission the game asks for is the tracking prompt described in section 2.
• The game has no third-party analytics or crash-reporting SDKs and doesn’t track you across apps or websites. Its own anonymous statistics are described in section 5.

9. Children

City Rush is a crime action comedy with cartoon violence. It is intended for players 16 and over; the store’s age rating varies by region. (Versions before 0.1.6 also had an in-game casino played with game money only.) It is not directed at children. We don’t knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

10. Legal bases (EEA and UK)

• Personalised ads: your consent, given in Google’s consent form, which you can withdraw at any time.
• Non-personalised ads, ad measurement and fraud prevention: our legitimate interest in funding a free game.
• Purchases: performance of a contract with you.
• Anonymous gameplay statistics: our legitimate interest in fixing bugs and improving the game; you can turn them off at any time in Settings.
• Support emails: our legitimate interest in answering you and fixing the game.
• Website delivery and security: our legitimate interest in running a safe website.
• Launch news emails: your consent, which you can withdraw at any time.

11. International transfers

Google and Cloudflare may process data in the United States and other countries. They use recognised safeguards for such transfers, such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

12. Your rights

Depending on where you live (for example, under the GDPR, the UK GDPR or California’s CCPA/CPRA), you may have the right to:

• access, correct or delete your information;
• object to or restrict processing, and receive your data in a portable format;
• withdraw consent;
• opt out of personalised advertising or the “sharing” of personal information for cross-context advertising;
• complain to your data protection authority.

We hold almost no information about you. For advertising data, use the choices described in section 2 or Google’s tools. You can also simply write to us and we will help. We reply within 30 days, and you won’t be treated differently for using your rights.

13. Security

Game data stays on your device. The little information we do receive is protected: support emails sit in an encrypted mailbox, and the launch-news list and the anonymous gameplay statistics are stored in an access-controlled Cloudflare database that only we can reach.

14. Changes to this policy

If this policy changes, we will update the date at the top. Significant changes will be announced on this page and, where appropriate, in the game.

15. Contact

Questions or requests about privacy: help@rushcity.net