Privacy Policy

Privacy Policy

Rush Box is dedicated to providing fun, engaging casual games while respecting your privacy and safeguarding your personal data.

Effective Date: September 1, 2026 Last Updated: September 1, 2026

1. Overview & Commitment

Rush Box ("we", "our", or "us") is dedicated to providing fun, engaging casual games while respecting your privacy and safeguarding your personal data.

You can enjoy all core arcade and casual games as a Guest without registering an account. If you choose to register an account, we use industry-standard security and minimal data collection solely to enable cloud game synchronization, gamer level progression, and virtual economy features.

2. Information We Collect & Process

👤 Account & Authentication Data (Optional) When you create an account, we collect your email address, unique username, display name, and avatar preference. Passwords are encrypted using irreversible salted cryptographic hashing (bcrypt) and are never stored in plain text. If you sign in via Pi Network, we associate your verified Pi UID and username.
☁️ Cloud Game Progress & Scores For authenticated accounts, we synchronize your unlocked levels, completion stars, personal high scores, best completion times, and game attempts to Google Cloud Firestore so you can seamlessly resume progress across devices.
⭐ Global Gamer Level & XP Progression We track active in-game playtime minutes to calculate your global Gamer Level (Levels 1–100) and cumulative XP points.
🪙 Virtual RB Points & Economy Ledger We maintain an immutable transactional activity ledger recording RB Points earned (daily check-ins, achievements) and exchanged for in-game coins.
💾 Local Device Storage Audio preferences (SFX/music volume), haptic feedback settings, and local cached saves are stored directly on your device via SharedPreferences.
📊 Diagnostic & Performance Analytics Anonymous app diagnostics, performance metrics, and crash reports may be processed to optimize game framerate and stability.

3. Advertising & Monetization

On our mobile Android application, we deliver non-intrusive advertisements to keep Rush Box free for all players:

🎬 Rewarded Video Ads Voluntary ads that you choose to watch in exchange for in-game rewards (such as Daily +10 RB Points).
📱 Interstitial & Banner Ads Displayed between game sessions with strict frequency capping to prevent gameplay disruption.
🛡️ Consent & Privacy Frameworks We strictly comply with the Google User Messaging Platform (UMP) and IAB Europe Transparency and Consent Framework (TCF v2.2) for players in the European Economic Area (EEA) and UK.

4. Third-Party Infrastructure & Partners

We integrate trusted third-party SDKs that operate under strict data protection agreements:

Google Firebase (Google LLC) Provides secure Cloud Firestore databases, security rules, and performance infrastructure.
Google Mobile Ads / AdMob (Google LLC) Provides privacy-compliant advertising services and UMP consent management.
Meta Audience Network (Meta Platforms, Inc.) Integrated via Google AdMob mediation for ad fulfillment.
Pi Network (SocialChain Inc.) Provides optional decentralized user authentication for Pi community members.

5. Data Security & Encryption

We employ robust technical and organizational security safeguards:

  • Transport Layer Security (TLS 1.3 / SSL): Encrypts all data in transit between your device and our servers.
  • Granular Security Rules: Firebase Security Rules strictly restrict database reads and writes to authorized account sessions.
  • Salted Cryptographic Hashing: Passwords are mathematically hashed with unique salt rounds (bcrypt).
  • No Data Selling: We do not sell, rent, or trade your personal data to any third-party brokers.

6. User Rights & Data Deletion

You have complete control over your data:

  • Local Data: Reset all local scores and game progress at any time via Settings → "Reset All Game Progress".
  • Account & Cloud Deletion: You can request the permanent deletion of your account, cloud game saves, and RB points records by emailing us at contact@rushbox.in or contact@connectpi.in with your registered username. Requests are processed within 30 days.

7. Children's Privacy (COPPA & GDPR-K)

Rush Box games are casual family-friendly experiences. We do not knowingly collect personal data from children under the age of 13 (or 16 in certain European jurisdictions). If we discover that personal information has been collected from a child without verifiable parental consent, we will promptly delete it.

For detailed information on our child privacy practices, please read our dedicated Child Privacy Policy.

8. Ad Privacy Choices & Consent Revocation

Players in the European Economic Area (EEA) and UK can review, modify, or revoke their advertising consent choices at any time using Google's User Messaging Platform (UMP) within the mobile Android application settings.

On web platforms and guest gameplay, non-personalized advertising and privacy-first configurations are active by default.

Developer & Privacy Inquiries

Developer: Aditya

Email: contact@connectpi.in / contact@rushbox.in

Country: India