Privacy Policy

Who is responsible for your data

Right of Way is operated by Schmucker Desenvolvimentos e Sonorizacao LTDA, registered in Brazil under CNPJ 53.947.853/0001-00. That company decides what is collected and why, which under Brazilian and European data protection law makes it the controller of your data.

It is also the company behind the app on the App Store and Google Play, and the one registered with Google AdMob for the advertising described above. For anything about your data, write to support@playrightofway.com.

Playing without an account

You can play without signing in. Everything a guest does stays on the device and never reaches us: unlocked levels, best results, the run you have in progress, cached puzzles, your settings, and whether you have already seen the tutorial hints. Delete the app and all of it goes with it.

Guests can play the Daily Challenge too. That result is not ranked, and it stays on the device unless you create an account before the day closes.

What we collect when you sign in

Signing in goes through Google. Social sign-in means we neither create nor store a password for you, and your Google password is never visible to us.

What we keep from your Google account is your name, email address, profile image, and the identifiers Google hands back so the account can be recognised next time. You also pick a username and receive a friend code, and both are stored with the account.

Every active session carries a session token and its expiry. The sign-in library’s standard session record also stores the IP address and the browser or device user agent seen at sign-in.

What we store about your play

Once an account exists, the game stores:

• Campaign progress, plus your best result on each level: moves, time, stars, whether a hint was used, and the sequence of moves.
• Daily Challenge attempts, and which days you completed enough levels to keep a streak.
• Friend Challenges you send or receive, how they ended, and any custom board you build for one.
• Friends you follow, and ranking points earned from challenges.
• Hints granted each day, and lives recovered. These are the counters behind the daily limits.
• Whether your account owns the ad-free purchase.
• Maps you build for the community: the board, the name you give it, when you sent it, and the review decision with its reason. An approved map is shown to other players with your username (or your name, if you have not picked one) and your profile picture. We also store the thumbs-up you give, your best result on each community map, the reports you send (with any detail you write), and the sanctions tied to them: if maps you send are refused or reported, strikes, a temporary block on sending more, and in the end a permanent ban on sending maps; if reports you send keep being rejected, the loss of the right to report.
• If you allow notifications, your device's push token and whether it runs iOS or Android. The token is tied to your signed-in session. Signing out asks us to remove it, and so does turning notifications off in Settings; if that request cannot reach us, for example with no connection, the token can stay active until that session ends on our side. It is used only to tell you about your own maps, such as one being approved or scheduled as a Daily.
• Arrow styles you build: the name you give each one, the colors and effects you pick from our palette, whether you keep it private or send it for review, and the review decision with its reason. An approved style can be shown to other players in the gallery. We also store the reports you send about styles, with the reason you pick.
• Preferences that follow your account: the arrow style you picked and when you picked it, and the app's language, so the notifications we send you are written in it.
• The achievements you unlock, and when.

We keep the move sequence because the server replays a result before it counts toward a ranking. That is how a reported result gets verified instead of simply trusted.

This website's analytics

These pages, the ones you are reading now, use Google Analytics to count visits. It sets a cookie and gives you an identifier that recognises you when you come back, which is why we ask before it runs.

Nothing loads until you allow it. If you say no, your browser makes no request to Google at all, and the choice is remembered on your device so we do not ask again. Advertising signals and ad personalisation are switched off, so the visit is not used to build an advertising profile.

The site also stores one cookie of its own, and analytics is not what it is for. Called NEXT_LOCALE, it remembers which language version of these pages you are reading. It holds a language code and nothing else.

Separately from Google, this site keeps a count of its own, and it runs for everyone, including people who refuse the analytics above. That is the point of it: a count that only includes visitors who accept a cookie is not the audience of this site, it is the part of that audience willing to be measured.

It sets no cookie and it stores no IP address. What is written down for each visit is the day, the page you opened, which language version you read, and a single identifier. That identifier is produced by hashing the day's secret together with your IP address and your browser's description. The address itself is never recorded; it only passes through the calculation and is gone when the request ends.

The secret changes every day, and the previous one is discarded rather than archived. So the same visitor produces a different identifier tomorrow, yesterday's identifier cannot be recomputed, and none of it can be turned back into an address. Two visits from you on the same day count once. Two visits a day apart cannot be connected to each other.

That applies to the website. None of it is in the game.

Advertising, analytics and crash reports

Advertising, crash reporting, product analytics and purchases are the four features that can involve a company other than us. Each one is listed below, with what it does and whether it is running today, so that turning one on is a change you read here rather than one you find out about later.

Crash reportsRunning today

When it runs, a crash sends technical context: what failed, in which operation, on which level. It never carries your name, email address or session. That rule is written into the code, not only into this page.

Product analyticsNot running today

When it runs, it counts named events, such as a level started or an attempt abandoned, so the game can be fixed where people actually get stuck. It reads no advertising identifier and builds no profile of you.

AdvertisingRunning today

Ads are served by Google AdMob. The game shows an occasional ad between Campaign levels, plus optional ads you can choose to watch in exchange for a hint or extra lives. Before the first ad you are asked for consent. Declining does not remove the ads: it removes the personalisation, and you keep seeing ads chosen without using your data. The app does not track you across other apps, which is why iOS never asks for tracking permission. What Google does on their side is governed by Google's own privacy policy.

PurchasesOn sale on Google Play

The Premium purchase removes the ads you did not choose to watch and unlocks the Premium arrow styles. Apple or Google handles the payment end to end: your card and billing details never reach us, only the receipt confirming the purchase happened.

Whatever is running, three things hold. We do not sell personal data, we do not build advertising profiles ourselves, and a crash report never carries your name, email or session.

This page is updated before the release that switches any of them on, not after.

The launch mailing list

The website has a form asking for your email so we can tell you when the game launches. Filling it in is optional and has nothing to do with playing: you never need an account, and an account never puts you on this list.

If you submit it, we store your email address, the moment you ticked the consent box, and which language version of the site you were reading. The language is there so the launch email arrives in the language you signed up in, not to profile you.

We write about the launch: when it is close, and when the game is released. The list is not used for anything else, is not sold, and is not shared. Leave at any time through the link in every email or by writing to the address below, and we stop writing; ask for deletion and the record goes as well.

Who else touches your data

• Google handles sign-in, serves the ads inside the app through AdMob and, if you allow it, measures visits to this website. What happens on their side is governed by Google's own privacy policy.
• Neon hosts the database, in a United States region.
• Vercel hosts this website.
• Apple and Google distribute the app and process purchases.
• Sentry receives crash reports, in a European Union region. The report carries what failed and where; never your name, email address or session.
• Expo (650 Industries, in the United States) delivers notifications to your device through Apple's and Google's push services. It receives the push token, the text of the notification and which of your maps it is about; never your name, email address or session.
• Anthropic (in the United States) runs an automatic first review of the maps you send to the community, before a person looks at them. It receives the map's name and layout, never your name, email address or account.
• Other service providers host our server, carry the app's traffic to it and send our emails, some of them outside your country. They work under contract and only to provide that service. The server host and the traffic provider handle everything the app sends to us; the email provider receives your address and the email we send you.

Keeping and deleting your data

Account data lives for as long as the account does. You can delete your account from inside the app, under Settings. The account leaves rankings, friend lists and search **immediately**, and everything belonging to it is erased **30 days later**, on its own. During those 30 days you can change your mind: open Settings again and choose to keep the account, and everything returns as it was. Signing in on its own does not cancel the request; only that choice does, so nobody undoes a deletion by accident. After the window there is nothing to return to, and that is what makes the deletion real. If you no longer have the app installed, there is a form at playrightofway.com/delete-account: it sends a link to your address, and confirming it does exactly what the button does.

Deleting the app clears everything held on your device. On its own it does not delete an account you created.

Your rights over your data

Three things allow us to handle your data, and each covers a different part. Your account, your progress and your results are handled because you asked for the service: without them there is no account to play with. Personalized advertising and the analytics on this website happen only with your consent, which you give freely and can take back at any time. Re-checking a result before it counts for ranking is our legitimate interest in keeping the game fair, and it goes no further than that.

Wherever you live, you can ask us for a copy of your data, correct what is wrong, have it deleted, receive it in a form you can take elsewhere, or object to a particular use. Deletion has a button inside the app, under Settings, and it does not depend on us. For everything else, write to support@playrightofway.com and we answer within 30 days.

If you think we handled your data badly, you can complain to a supervisory authority instead of, or as well as, writing to us: the ANPD in Brazil, or your national data protection authority in the European Union and the United Kingdom. You never have to talk to us first.

The database is hosted in the United States, so data belonging to your account leaves your country to reach it. Google, Vercel and the database host each handle it under a data processing agreement with us, and it is those agreements that allow the transfer.

Children

The game is made for players aged 13 and over, and that is the audience we declare in the stores. Content ratings are set by each country's own authority and differ from place to place, so every store shows its local one. We do not ask for your age when you sign in, and we do not knowingly collect data from anyone below that age.

The default is non-personalized ads. Personalized advertising happens only if you agree to it, and you can change your mind later, in Settings. If you believe a child's data reached us, write to support@playrightofway.com and we will delete it.

Changes and contact

Whenever this policy changes, so does the date at the top. For anything touching your data, whether access, correction or deletion, write to support@playrightofway.com.

See also the Terms of Service.