Last updated: 7 November 2026
This policy explains what the iOS game Rug Reveal (by V23 Labs, an independent developer) stores and why. Contact: support@v23labs.com.
Random device id. On first launch the app generates a random id and keeps it on your device. It is sent to our server so the game can give you a friend-invite code and credit referral bonuses. It is not linked to your name or identity.
Friend invites (referrals). When someone opens an invite link on our website, we store a salted hash of their IP address (SHA-256 of the IP plus a secret value) together with the invite code and the time. The raw IP address is not stored. This hash is kept for 72 hours and is used only to match the later app install to the invite, so the inviter and the friend can each receive Turbo time. If you enter an invite code by hand, no IP match is needed. We also store which code (if any) a device used and whether the inviter's bonus was already paid.
Gameplay analytics. The app sends simple events to our server, for example app opened, rug started or finished (with the rug number and duration), tools bought, purchases, ads shown or rewarded, shares and invite use. Each event carries the random device id and a timestamp. We use them to understand how the game is played and to fix problems. We do not embed a third-party analytics SDK.
On your device. Your progress, coins and settings are saved locally on your phone.
The game shows interstitial and rewarded ads through Google AdMob. Google may collect and use data such as your IP address, device information and, if you allow it, the advertising identifier, to deliver, personalise and measure ads. Where required, Google's consent form (and Apple's App Tracking Transparency prompt) is shown the first time, and you can change your choice later in the game menu when offered. If you decline personalised ads you still get ads, but not personalised ones. Google's handling of data is governed by its own policies:
A Remove Ads purchase stops interstitial ads. Rewarded ads that you choose to watch stay available.
Optional purchases (Remove Ads, Turbo time) are processed by Apple. We never see your payment details. Apple's own terms and privacy policy apply to the payment.
Our server runs on Cloudflare Workers with a Cloudflare D1 database. Data is encrypted in transit with TLS.
Analytics events and device records are kept as long as they are useful for running the game. IP hashes are deleted after 72 hours. To have the server data tied to your device id deleted, email us from your device's details (the id can be shown on request in the app menu, or just describe the problem) at support@v23labs.com. Deleting the app removes everything stored on your phone.
The game is not directed at children under 13 and we do not knowingly collect personal information from them.
We may update this policy. Material changes will appear here with a new date.