REBUSTED — Privacy Policy

Effective date: September 6, 2026 · Cicada Productions LLC

REBUSTED is a puzzle game made by Cicada Productions LLC ("we", "us"). This policy explains what information the game collects, why, and what control you have over it. The short version: we collect very little, we don't run ads, we don't sell data, and we don't use third-party tracking.

What we collect

A device identifier. When you first open REBUSTED, the app generates a random identifier on your device and uses it to create a guest account, so you can play immediately without signing up. This identifier is random — it is not your phone's hardware ID and cannot identify you personally.

Gameplay data. Your scores, puzzle and pack progress, and coin balance are stored on our server so the game works: leaderboards, daily coins, and picking up where you left off.

Push notification token (only if you turn on notifications). If you tap "Notify me" in the app, your device gives us a notification token so we can send you a message when a new puzzle pack is released. Notifications are delivered through Apple (APNs) on iPhone and Google (Firebase Cloud Messaging) on Android. Turn them off any time with the same button, or in your phone's settings, and the token is removed.

Purchase records (only if you buy coins). If you buy a coin pack in the app, the purchase is handled by Google Play. We receive a confirmation of the transaction (a transaction identifier, the product bought, and the date) so we can credit your coins and handle refunds. We never see or store your payment method, card details, or billing address — Google Play keeps those.

A display name (optional). You may choose a username that appears on public leaderboards. Names are screened for offensive content.

An email address and password (optional). If you choose to claim your account, we store your email and a securely hashed password so you can log in on other devices and recover your account. We use your email only for account verification codes and password resets — never for marketing, unless you separately opt in to something that clearly says so.

What we don't collect

No location. No contacts. No advertising identifiers. No third-party analytics or tracking SDKs. No data from your device beyond what's described above.

Where your data lives

Data is stored on our servers hosted by DreamHost in the United States, and is transmitted over encrypted HTTPS connections. Passwords are stored hashed; verification codes are hashed and expire within 15 minutes.

Sharing

We do not sell, rent, or share your personal information with third parties for their own use. Your display name and scores are visible to other players on the leaderboard — that's the only place any of your information appears publicly. We would disclose information only if required by law.

Two services process data on our behalf, solely to make in-app purchases work: Google Play processes the payment itself under Google's privacy policy, and RevenueCat validates purchases and relays the confirmation to our server under RevenueCat's privacy policy. RevenueCat receives your in-game player identifier and purchase details — not your name, email, or payment information. If you never buy coins, neither service receives anything from us.

Deleting your data

You can permanently delete your account and all associated data at any time inside the app: Leaderboard → Account → Delete my account. Deletion is immediate and removes your scores, progress, coins, email, and name from our systems. If you can't access the app, email us at support@rebusted.com and we'll delete your data for you.

Children

REBUSTED is intended for players aged 13 and up. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us an email address, contact us and we will delete it.

Changes

If this policy changes, we'll update it here with a new effective date. Meaningful changes will be noted in the app.

Contact

Cicada Productions LLC — support@rebusted.com