Privacy Policy

Contents

1. Who is responsible
2. What data we use and why
3. What other players see
4. Service providers and countries
5. How long we keep data
6. Legal bases
7. Your rights and how to delete your account
8. Children and parents
9. Security
10. This website
11. Changes to this policy
12. Contact and imprint

1. Who is responsible

The controller for the game Recess Royale and the website recessroyale.io is:

This policy follows the Swiss Federal Act on Data Protection (FADP) and, for players in the European Union and the European Economic Area, the General Data Protection Regulation (GDPR).

2. What data we use and why

2.1 Your game account

When you open the game for the first time, our server creates an account for this phone. It contains:

• a random account ID and a player code (for example KX7P-4821), which support and the deletion page use to find your account;
• a random nickname made of two words (for example "BouncyZebra"); you cannot type your own name;
• your game progress: coins, gems, kids, camos, parachutes, battle pass progress, weapon mastery and the gear you picked;
• simple statistics: number of matches, wins, eliminations, best placement;
• a history of coin and gem changes (why you got or spent them), so we can fix mistakes and answer support questions;
• dates: when the account was created and when it was last used.

Why: to save your progress and run the game you asked for.

2.2 Sign-in with Google Play Games

If you sign in with Google Play Games, we receive your Play Games player ID and your Play Games display name. We store them to connect your progress with your Play Games profile, so that you can continue on a new phone. Your Play Games name is shown only to you in your profile. We do not receive your email address or your Google password. Google handles the sign-in under its own privacy policy.

2.3 Matches

For every online match we store which players took part, their nickname, the kid and gear they used, their placement, eliminations and the rewards they received. Why: to run the match, give out rewards and spot cheating.

2.4 Purchases

You can buy gem packs with real money. The payment is handled entirely by Google Play: we never see your name, card or bank details. To check that a purchase is real and to give you the gems, we receive and store a purchase token, the Google order number, the pack, the time of the purchase, the country of the purchase and whether it was a test purchase. We also send Google a scrambled (hashed) form of your account ID with the purchase, so a purchase can be matched to the right game account. Why: to deliver what you paid for, and because we must keep business records.

2.5 Technical and security data

• IP address: your phone's internet address is needed to connect to our servers. We use it briefly to block abuse (for example too many requests from one address).
• App and device information: app version, platform (Android) and network version, so the server knows which features your app supports.
• Country: the country from your phone's settings (for example "CH"). We use it to follow local rules, for example to hide surprise boxes in countries that restrict them.
• App integrity: we may use Google Play Integrity to check that the app is genuine and the device is not tampered with. We store only the result (pass, basic or fail).
• Fair-play checks: our server checks match results automatically for impossible values. Accounts that cheat can be flagged and banned.
• Server logs: our game servers and backend write technical logs to keep the service running and to find errors.

Why: security, fair play and a working service.

2.6 Support

If you write to us, we use your email address and message only to answer you.

2.7 What we do not do

We do not show ads, use advertising IDs, use analytics or tracking tools, build advertising profiles, sell or rent data, or share data with data brokers. The game has no chat and no friend lists with real names. We do not collect precise location, contacts, photos, microphone or camera data.

3. What other players see

In a match, other players see your nickname, your kid with its gear, your health bar, and who eliminated whom (the kill feed). After the match, the results show the placement of the players. Other players never see your account ID, player code, Play Games name or purchases.

4. Service providers and countries

We use a small number of providers who process data on our behalf, under data processing agreements:

Our game data is stored in the EU. Some providers are US companies and could access data from the USA. Such transfers are protected by the EU Standard Contractual Clauses and, where the company is certified, by the EU-US and Swiss-US Data Privacy Frameworks. Google processes payments and its own accounts as an independent controller under its own privacy policy.

5. How long we keep data

6. Legal bases

For players in the EU/EEA (Art. 6 GDPR), and in the same spirit under Swiss law:

• Contract (Art. 6(1)(b)): running your account, the matches, the battle pass and purchases.
• Legitimate interests (Art. 6(1)(f)): security, preventing abuse and cheating, fixing errors. Our interest is a safe and fair game; we keep this data small and short-lived.
• Legal obligation (Art. 6(1)(c)): keeping purchase records.
• Your choice: signing in with Play Games is optional. You can play as a guest.

7. Your rights and how to delete your account

You can ask us at any time for a copy of your data, for corrections, for deletion, to restrict or object to processing, and to receive your data in a portable format. Write to r02nils@gmail.com and include your player code (shown in the game under Profile). We answer within 30 days.

Delete your account

• In the game: Settings → Account → Delete account. Your data is removed right away; the last technical traces are cleared within 24 hours.
• Without the app: on recessroyale.io/delete with your player code. We delete the account within 30 days.
• By email to the address above.

Deleting removes your account, progress, coins, gems, items and match history. Gems you bought are deleted too. Deleting cannot be undone.

Complaints

You can complain to a data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch). In the EU/EEA, you can contact the authority in your country. We would be happy if you talked to us first.

8. Children and parents

Recess Royale is a cartoon game that children also play. That is why we designed it to collect as little as possible:

• no real names, email addresses, ages, photos, voice, contacts or locations;
• no chat and no way to send messages to other players;
• no ads, no advertising IDs and no third-party analytics or tracking;
• a random nickname instead of a name you type yourself.

Real-money purchases happen in Google Play's own purchase window and need the Google account holder's approval (for example password, fingerprint or the parental controls of Google Family Link). Parents can ask us at any time what data the account of their child holds, and can delete it in the game, on recessroyale.io/delete or by email.

9. Security

All connections between the app and our servers are encrypted (HTTPS/TLS). Access to the database is limited to the people who run the game, and secret keys never leave our servers. Payments never pass through our systems.

10. This website

recessroyale.io sets no cookies, stores nothing in your browser, and loads no fonts, scripts or images from other websites. Our hosting provider processes your IP address and the pages you request in short-lived server logs to deliver the site and protect it from attacks. The delete-account page sends only the player code you enter to our server.

11. Changes to this policy

If the game changes, we update this policy and the date at the top. For important changes we will also tell you in the game.

12. Contact and imprint

Google Play and Google Play Games are trademarks of Google LLC.