Privacy Policy

This policy explains what information the City Rush mobile game for Android and iOS (“the game”) and the website rushcity.net (“the website”) handle, and why. “We” and “us” mean the developer of City Rush. You can reach us at help@rushcity.net.

1. Information stored on your device

The game keeps the following in its private storage on your phone:

• your saved games (progress, money, property, vehicles and similar game data);
• settings such as language, graphics quality, difficulty and controls;
• whether you own the Key to the City (a cached copy, checked with Google Play or the App Store on every start);
• counters the game needs to space out ads and rating requests (for example, total minutes played and when the last ad was shown).

This information is not sent to us. On Android it is excluded from cloud backup. On iPhone and iPad it may be included in the device backups you make with iCloud or a computer; those backups are handled by Apple and by you. The information is deleted when you uninstall the game (on Android, also when you clear its data in settings).

2. Advertising (Google AdMob)

The free version of the game shows full-screen ads and optional rewarded ads (never banners) through the Google Mobile Ads SDK (AdMob), provided by Google, on both Android and iOS. To show and measure ads, Google may collect:

• device identifiers: on Android, the advertising ID and app set ID; on iOS, the identifier for vendors and, only if you allow tracking in Apple’s prompt, the advertising identifier (IDFA);
• your IP address, from which the ads SDK may infer your approximate location (the game itself never uses GPS or a location permission);
• device and app information, such as device model, operating system version, language and app version;
• ad interactions (for example, which ads were shown or tapped) and diagnostic data.

Google uses this information to serve ads, measure them, limit how often you see them, prevent fraud and abuse and, if you allow it, to personalise ads. The data is encrypted in transit.

Your choices

• European Economic Area, United Kingdom and Switzerland: before personalised ads are shown, the game displays Google’s consent form (Google User Messaging Platform).
• US states with privacy laws: the same Google form lets you opt out of the sale or sharing of your personal information for ads.
• In the game: where these choices apply, you can change them at any time in Settings → Privacy choices (ads).
• iPhone and iPad: the game asks for your permission before any tracking (Apple’s App Tracking Transparency prompt). If you choose “Ask App Not to Track”, the advertising identifier is not shared. You can change this at any time in Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID, or opt out of ads personalisation, in your phone’s settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on the phone).

Ads are not targeted at children, and ad content is limited to the “T” (Teen) rating. We only receive aggregated reports from AdMob (such as the number of ads shown and earnings), not information that identifies individual players.

If you own the Key to the City, the game does not load or show ads. The ads SDK is still part of the app and may start up, check your consent status and exchange basic technical data with Google.

Google’s processing is described in the Google Privacy Policy and in How Google uses information from sites or apps that use its services.

3. Purchases (Google Play and App Store)

The Key to the City is a one-time in-app purchase processed by Google Play Billing on Android and by the Apple App Store on iOS. Google and Apple handle your payment information under their own privacy policies. We never see your card or account details. The game receives only the purchase status and a purchase token or transaction record, so it can unlock the item and restore it on a new device. Refunds are handled by Google Play or Apple.

4. Ratings

The game may show the store’s own rating prompt (Google Play’s in-app review card or Apple’s rating prompt), no more than twice. The prompt is handled entirely by Google or Apple. We don’t learn whether you rated the game, beyond what is publicly visible in the store.

5. Support and bug reports

“Report a bug” in the game’s settings opens your email app with a draft that already contains technical details to help us reproduce the problem: game version, device model, operating system version, graphics chip, game language, graphics quality, difficulty and minutes played. Nothing is sent until you press send, and you can edit or delete anything in the draft.

When you email us, we receive your email address and whatever you write or attach. We use it only to answer you and fix problems. We keep messages as long as needed for that, and delete them after 24 months at the latest. You can ask us to delete them sooner at any time. Our mailbox is provided by Proton AG (Switzerland).

6. The website

rushcity.net is hosted on Cloudflare. To deliver the pages and protect the site from attacks, Cloudflare processes technical data such as your IP address, browser type and request logs. The website sets no cookies and uses no advertising or cross-site tracking. We may use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.

Launch news (optional)

If you leave your email address in a “Notify me” form, we store that address, the date, the page language and your consent in our database at Cloudflare, so we can tell you when City Rush launches and, rarely, about big updates. To protect the form from abuse, we also keep a one-way scrambled version (hash) of your IP address for a short time. We never sell or share the list, and we don’t use it for anything else. Every email has an unsubscribe link, and you can also write to us to be removed; we then delete your address.

Links to Google Play, the App Store, YouTube or social networks lead to services that have their own privacy policies.

7. What we don’t do

• We don’t sell your personal information.
• The game doesn’t access your location (GPS), contacts, camera, microphone, photos or files.
• On Android the game itself declares only internet (for ads and purchases) and vibration. The Google libraries it includes add the standard technical permissions they need: network state, the advertising ID and basic phone state (used by the ads SDK, for example to know the network type), billing (for purchases), and wake lock and foreground service (used by Android’s background-task library for short tasks). None of them shows you a prompt, and none gives access to your location, contacts, camera, microphone, photos or files. (The ads SDK may still infer your approximate location from your IP address — see section 2.) On iOS the only permission the game asks for is the tracking prompt described in section 2.
• The game has no analytics or crash-reporting SDKs and no tracking of its own.

8. Children

City Rush is a crime action comedy with cartoon violence and simulated gambling (an in-game casino played with game money only). It is intended for players 16 and over; the store’s age rating varies by region (for example PEGI 18). It is not directed at children. We don’t knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

9. Legal bases (EEA and UK)

• Personalised ads: your consent, given in Google’s consent form, which you can withdraw at any time.
• Non-personalised ads, ad measurement and fraud prevention: our legitimate interest in funding a free game.
• Purchases: performance of a contract with you.
• Support emails: our legitimate interest in answering you and fixing the game.
• Website delivery and security: our legitimate interest in running a safe website.
• Launch news emails: your consent, which you can withdraw at any time.

10. International transfers

Google and Cloudflare may process data in the United States and other countries. They use recognised safeguards for such transfers, such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

11. Your rights

Depending on where you live (for example, under the GDPR, the UK GDPR or California’s CCPA/CPRA), you may have the right to:

• access, correct or delete your information;
• object to or restrict processing, and receive your data in a portable format;
• withdraw consent;
• opt out of personalised advertising or the “sharing” of personal information for cross-context advertising;
• complain to your data protection authority.

We hold almost no information about you. For advertising data, use the choices described in section 2 or Google’s tools. You can also simply write to us and we will help. We reply within 30 days, and you won’t be treated differently for using your rights.

12. Security

Game data stays on your device. The little information we do receive is protected: support emails sit in an encrypted mailbox, and the launch-news list is stored in an access-controlled Cloudflare database that only we can reach.

13. Changes to this policy

If this policy changes, we will update the date at the top. Significant changes will be announced on this page and, where appropriate, in the game.

14. Contact

Questions or requests about privacy: help@rushcity.net