Privacy Policy

Rust to Riches: Car Detailing Simulator (the “Game”)
Effective date: 1 November 2026 · Last updated: 2 November 2026

1. Who we are

The Game is made and published by the developer (“we”, “us”), a small games studio in Baku, Azerbaijan. We are the controller of the personal data described in this policy.

• Legal name: [registered company name]
• Address: [registered business address]
• Privacy contact: see section 15

This policy covers the Game on Android and iOS and this website. The website itself sets no cookies and runs no analytics; it loads its fonts from Google Fonts, so Google receives your IP address when you open a page.

Messages you send us through the website

The form on the Support page sends us what you type into it: your e-mail address, the topic, your message, and, only if you fill them in, your name and your phone and game version. It also sends the language the page was shown in. We use this only to answer you and to fix what you report.

If you attach screenshots or files to your message, they are sent to us the same way, together with the message, and kept only as long as we need them to handle your request. Please do not attach pictures that show other people's personal details.

• How it reaches us: the form is delivered by FormSubmit (formsubmit.co), a form-to-e-mail service, which passes the message on to our support inbox at Zoho Mail. Both handle it only to deliver and store it for us; FormSubmit, like any website, also sees your IP address.
• How long we keep it: the message itself, like support e-mails, up to 2 years after your last message, then it is deleted (see section 8).
• Deleting it sooner: write to the address in section 15 and we will delete your messages and our replies.

If you prefer, you can e-mail us directly instead of using the form.

2. Data stored only on your phone

The Game keeps the following on your device. We do not receive it, and it is not uploaded anywhere:

• Your save: progress, in-game money, stars, unlocked districts, tools and vehicles, settings, your chosen language and voice, and the company name you type for your business in the Game.
• Your privacy choices (your consent answers and the age range you gave), so we do not ask again each time.
• Photo album: the before-and-after pictures of cars you cleaned in the Game. These are image files the Game makes from its own 3D scenes, stored in the Game's private storage. They never contain your camera photos and are not uploaded. If you tap Share, your phone's own share menu opens and you decide where the picture goes; we do not see what you share.

There is no account, no login and no cloud save. The Game does not ask for your name, e-mail address, phone number, contacts, location (GPS), camera, microphone or photo library.

3. Data the Game sends, and why

Consent first. In the European Economic Area, the UK and Switzerland, the Game asks for your consent before sending any analytics events, using Google's consent form. Until you answer “yes”, analytics events are not sent. You can change your answer at any time in the Game under Settings → Privacy.

We do not sell personal data, we do not build profiles of you ourselves, and we do not combine Game data with data about you from other sources.

4. Service providers

These companies process data for us under their own terms and privacy policies:

5. Ads and your choices

• Ads are optional. The Game shows only rewarded videos that start when you tap a button that says what you will get. There are no banners, no pop-up ads and no ads at launch. You can play the whole Game without watching any.
• Personalised or not. Personalised ads use your advertising identifier to show ads that match your interests. In the EEA, the UK and Switzerland they are shown only if you agree in the consent form; otherwise ads are non-personalised (based only on the context, such as the Game and your rough location).
• iPhone and iPad: the advertising identifier is used only if you allow it when iOS asks (“Allow the app to track”). The Game works exactly the same whatever you answer.
• Android: you can reset or delete your advertising ID in your phone's settings (Settings → Privacy → Ads, or Google → Ads, depending on the phone).
• Under 13, or under 16 in Europe: see section 7; such players get non-personalised ads only.
• You can change your consent at any time under Settings → Privacy in the Game.

6. Purchases

All purchases are optional, one-time and made through Google Play or the Apple App Store. Payment is handled entirely by the store: we never see your card number, bank details or billing address. We receive only what is needed to deliver and restore the item (see the table in section 3). Refunds follow the store's rules.

7. Children

The Game is a general-audience game. It is not made for young children, and on Google Play it is listed for ages 13 and over. Because people of any age may still download it, the Game asks for your age range the first time it starts (it does not ask for your date of birth, and it keeps only the range, on your phone):

• Under 13 (everywhere): ads are always non-personalised, ad requests are marked as child-directed for the ad networks, the advertising identifier is not used, and iOS does not show the tracking question. Data needed to run the Game (crash reports, basic counts) is used only to keep the Game working and improve it, as allowed for internal operations under the US Children's Online Privacy Protection Act (COPPA).
• Under 16 in the EEA and the UK (or the lower age of digital consent set by your country): ads are always non-personalised and ad requests are marked as coming from a user under the age of consent.

We do not knowingly collect personal information such as names, e-mail addresses or photos from children. If you are a parent or guardian and believe your child has sent us personal information (for example by e-mailing support), contact us and we will delete it. More for parents: Children's privacy and age rating.

8. How long data is kept

• Data on your phone: until you delete the Game or clear its data.
• Analytics events: Firebase keeps event-level data for up to [14] months, then deletes it; only totals without identifiers are kept longer.
• Crash reports: about 90 days in Firebase Crashlytics.
• Ad and purchase data: as set out in each provider's policy (section 4). Purchase records may be kept as long as the law requires for tax and accounting.
• Support e-mails: up to 2 years after your last message, then deleted.

9. Deleting your data

• On your phone: uninstall the Game (or clear its storage in your phone's app settings). This deletes your save, your privacy choices and your photo album. We cannot restore them, because we never had a copy.
• Data held by our providers: e-mail us at the address in section 15 and we will ask Firebase and the other providers to delete the data linked to your installation. Because we do not know who you are, we may ask you for the identifier shown in the Game under Settings → Privacy so we can find it.
• Step by step: see Delete your data.
• Stop future collection: switch analytics off under Settings → Privacy, reset your advertising ID, or uninstall the Game.

10. Europe and the UK (GDPR)

Legal bases. We rely on:

• your consent for analytics in the EEA, UK and Switzerland, and for personalised ads;
• our legitimate interests in keeping the Game stable and secure (crash reports), adjusting balance (remote settings), and showing the non-personalised rewarded ads you choose to watch, which fund the free Game;
• performance of a contract to deliver purchases;
• legal obligations for keeping purchase records.

Your rights. You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable form. You can withdraw consent at any time in Settings → Privacy, without affecting earlier processing. You also have the right to complain to your local data protection authority.

EU / UK representative: [to be appointed if required: name and address]

The Game makes no decisions about you based solely on automated processing that have legal or similarly significant effects.

11. California and other US states (CCPA / CPRA)

In the last 12 months, and going forward, the Game may collect these categories of personal information: identifiers (app-instance, installation and, if allowed, advertising identifiers; IP address), internet or other electronic network activity (how you play the Game, ad interactions), approximate geolocation (country or region from your IP address) and commercial information (purchases). The sources, purposes and recipients are described in sections 3–6.

• We do not sell personal information for money. When personalised ads are on, ad networks may use your advertising identifier for cross-context behavioural advertising, which California law may call “sharing”. To opt out, turn personalised ads off under Settings → Privacy or delete/limit your advertising ID in your phone's settings. We honour the US privacy choices shown through Google's consent tool.
• We do not sell or share the personal information of consumers we know to be under 16.
• We do not use sensitive personal information.
• You have the right to know, access, correct and delete your personal information, and to opt out of sharing, without being treated differently for using these rights. Write to us (section 15); an authorised agent may also write for you.

Residents of other US states with privacy laws (such as Virginia, Colorado, Connecticut, Utah and Texas) have similar rights and can use them in the same way.

12. International transfers

We are based in Azerbaijan, and our providers process data in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred, our providers rely on recognised safeguards such as the European Commission's Standard Contractual Clauses.

13. Security

Data sent by the Game travels over encrypted connections (HTTPS). Access to our provider dashboards is limited to the people who work on the Game. No system is perfectly secure, but we keep the data we have to a minimum.

14. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is important (for example, a new kind of data or a new provider), we will also tell you in the Game before it applies.

15. Contact

Questions or requests about privacy: [privacy e-mail]. We answer within 30 days, usually much sooner.