1. Who we are
The Riverdoku app and the website at riverdoku.com (together, “Riverdoku”) are provided by Muntean Holding AS, a limited company registered in Norway (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at yolo@illebra.app.
We process personal data in line with the EU General Data Protection Regulation (GDPR) as it applies in Norway through the Norwegian Personal Data Act (personopplysningsloven).
2. The short version
- You do not need an account to play, and we never ask for your name, email address or phone number.
- The app uses Google Firebase Analytics to understand how the game is played, and Google AdMob to show ads.
- If you play with friends, the name you choose and your results are stored for about a day, then deleted.
- If you buy Riverdoku Premium, you pay the App Store or Google Play, and RevenueCat keeps a record of the purchase under a random identifier. We never see your name, email address or payment details.
- Your progress, settings and streaks stay on your device.
- Quick play on this website stores your progress in your own browser only. The website sets no advertising or analytics cookies.
3. What we collect in the app
3.1 Analytics (Google Firebase Analytics)
We use Firebase Analytics, a service provided by Google, to learn which parts of the game are played, where players get stuck, and whether the app is working as it should. Firebase Analytics collects:
- a randomly generated app instance identifier;
- events in the app, such as a puzzle started or solved, screens viewed and sessions;
- device and app information, such as device model, operating system, app version, language and screen size;
- approximate location (country or region), derived from your IP address;
- where permitted, your device’s advertising identifier.
We use this information in aggregate, to improve the game. We do not use it to identify you personally. Where the law requires consent, analytics is only used once you have given it.
3.2 Advertising (Google AdMob)
Riverdoku is free to play and is paid for by ads served through Google AdMob. To show ads, measure them and prevent fraud, AdMob may collect:
- your device’s advertising identifier (IDFA on iOS, Advertising ID on Android);
- your IP address and approximate location;
- device information such as model, operating system and language;
- interactions with ads, such as views and taps.
If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before personalised ads are shown, using Google’s consent message. If you decline, you will still see ads, but they will not be personalised from your activity. On iOS, the app will only access the advertising identifier if you allow tracking when asked by Apple’s App Tracking Transparency prompt.
You can read how Google uses data from apps that use its services at policies.google.com/technologies/partner-sites.
3.3 Playing with friends
The optional multiplayer mode uses Google Firebase Authentication and Cloud Firestore. When you open or join a room, the app signs in anonymously and receives a random user identifier. We store the room code, the name you choose to play under, and your results in that room (such as your times, hints used and mistakes). Other players in the same room can see your chosen name and results. Rooms are set to expire after one day and are then deleted. Please do not use your full name or other personal information as your player name.
3.4 Purchases (RevenueCat)
Riverdoku Premium is a one-time in-app purchase. You buy it from the Apple App Store or Google Play, which take the payment under their own terms and privacy policies; we never receive your name, email address, card or other payment details.
To check that a purchase is genuine, to unlock Premium, and to restore it on a new device or after a reinstall, the app uses RevenueCat, a service provided by RevenueCat, Inc. When the app starts, and when you buy or restore, RevenueCat receives:
- a randomly generated app user identifier, which is not linked to your name or store account;
- your purchase history for the app: the product, the price and currency, the store, the date, and the transaction identifiers and receipt from the store;
- device and app information, such as operating system, app version, language and the country of your store account;
- your IP address, which is used to deliver the service and to derive your approximate country.
We use this only to deliver and restore what you bought, to handle refunds and support requests, and to see, in aggregate, how the app is doing. It is not used for advertising.
3.5 Stored on your device
Your progress, best times, streaks, settings, whether you have Premium, and the time of your daily reminder are stored locally on your device and are not sent to us. Daily reminders are scheduled locally by your device. Deleting the app removes this data.
4. What we collect on this website
This website does not use analytics, advertising or tracking cookies. Quick play stores which puzzle you are on and your best times in your browser’s local storage, so the next visit can pick up where you left off. This information never leaves your browser, and you can remove it at any time by clearing your browser’s site data.
The website is hosted on Google Firebase Hosting. Like any web server, it processes your IP address and basic request information (such as browser type and the page requested) to deliver the site and to keep it secure.
5. Why we use your data, and our legal basis
- To provide the game and multiplayer rooms: performance of our agreement with you (GDPR Art. 6(1)(b)).
- To deliver, check and restore Riverdoku Premium, and to handle refunds: performance of our agreement with you (Art. 6(1)(b)).
- To show personalised ads and, where required, for analytics: your consent (Art. 6(1)(a)), which you can withdraw at any time.
- To show non-personalised ads, keep the service secure, prevent fraud and understand how the game performs: our legitimate interest in running and funding a free game (Art. 6(1)(f)).
- To meet legal obligations, such as keeping records of sales for accounting: where the law requires it (Art. 6(1)(c)).
6. Who we share data with
We do not sell your personal data. We use Google as our service provider for Firebase (Analytics, Authentication, Firestore and Hosting) and AdMob. Google processes data on our behalf, and for advertising also as an independent controller under its own terms. See Google’s privacy policy at policies.google.com/privacy.
For purchases we use RevenueCat, Inc. (United States) as our service provider. RevenueCat processes purchase data on our behalf, under a data processing agreement. See RevenueCat’s privacy policy at revenuecat.com/privacy. Apple and Google process your payment as independent controllers, under their own privacy policies.
We may also disclose information if required by law, or to protect our rights, our users or the public.
7. Transfers outside the EEA
Google and RevenueCat may process data in the United States and other countries outside the European Economic Area. Such transfers are protected by the EU–US Data Privacy Framework, to which Google is certified, and by the European Commission’s Standard Contractual Clauses, which are part of our agreements with Google and RevenueCat.
8. How long we keep data
- Analytics data is kept for up to 14 months, then deleted automatically.
- Multiplayer rooms and their results are deleted after about one day.
- Advertising data is kept by Google according to its own retention policies.
- Purchase records are kept for as long as you may need to restore Premium, and for as long as Norwegian bookkeeping law requires us to keep records of sales (currently five years). You can ask us to delete the rest at any time.
- Emails you send us are kept for as long as needed to answer you, and then for no longer than required.
9. Your choices and rights
Under data protection law you have the right to:
- access the personal data we hold about you, and receive a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our processing, including processing based on legitimate interest;
- data portability;
- withdraw your consent at any time, without affecting processing that has already taken place.
You can also, at any time:
- change your ad consent through the privacy options in the app, where available;
- reset or delete your advertising identifier, or opt out of ad personalisation, in your device settings;
- turn off tracking for the app under Settings › Privacy & Security › Tracking on iOS.
Because we do not ask who you are, we may need your help to find data linked to your device, such as your app instance identifier. To exercise any of these rights, write to yolo@illebra.app. We will answer within one month.
If you believe we are processing your data unlawfully, you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no, or to the supervisory authority where you live.
10. Children
Riverdoku is a general audience game and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, please contact us and we will delete it.
11. Security
Data is sent over encrypted connections and stored with Google’s and RevenueCat’s security measures. Access to multiplayer rooms is limited by security rules. No system is perfectly secure, but we work to keep the data we hold small and protected.
12. Changes to this policy
We may update this policy when the app or the law changes. The date at the top shows when it was last updated. If a change is significant, we will let you know in the app or on this website.
13. Contact
Muntean Holding AS, Norway
Email: yolo@illebra.app
Or use the contact page.