Privacy Policy
1. Introduction
This Privacy Policy explains how Joy Barua collects, uses, discloses, and protects information in connection with Ludo Rocket (the "Game") and related services (collectively, the "Service"), available on iOS, Android, and as an Instant Game on the Facebook platform. By using the Service, you agree to the collection and use of information as described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
- Age screening information. At first use, we ask for your birth month and year and store the resulting age category on your account, to determine which restrictions described in Section 5 apply. This is used for no other purpose.
- Display name. You may choose a display name shown to other players in online matches.
- Linked account identifiers. If you choose to link your account, we receive an account identifier from Apple (Sign in with Apple), Google (Google Sign-In), or Meta (Facebook Login), which may include your name and email address as made available to us by that provider, depending on the permissions you grant.
- Purchase information. If you make a purchase, the purchase is processed by the Apple App Store or Google Play, and we receive confirmation of the transaction and the item purchased. We do not receive or store your payment card details.
2.2 Information Collected Automatically
- Account and gameplay data. An anonymous account identifier, your in-game progress, virtual currency balances, cosmetic item ownership, match history, and competitive ranking data.
- Real-time presence and connection data. Whether your device is currently connected to the Service, used to support real-time multiplayer matchmaking and to detect disconnections during a match.
- Device and technical information. Device type, operating system and version, app version, and general diagnostic and crash information, used to operate and improve the Service.
- Advertising data. If your account is not restricted under Section 5.2 and you choose to watch an optional rewarded video ad, our advertising provider, Google AdMob, collects information from your device in order to deliver the ad, measure it, and prevent fraud. This may include a device or advertising identifier, your approximate location (derived from your IP address, not precise geolocation), information about the ad and your interaction with it, and diagnostic information. We request only non-personalized ads, which means this information is not used to show you ads based on your interests or on your activity in other apps or websites. No ads are requested or shown for accounts identified as under 13 (under 18 in India) (see Section 5.2). Ads are optional.
2.3 Information From Other Players
Information about who you are matched with in online play (their display name and equipped cosmetic items) is visible to you during a match, and your corresponding information is visible to them, as described in our Terms of Service.
2.4 Information We Do Not Collect
The Service does not include a chat, direct messaging, or other player-to-player communication feature. We do not collect precise geolocation data. The app never asks for permission to access your device's location, so neither we nor our advertising provider can obtain your precise location through the Service. We do not collect payment card numbers or other financial account details; these are handled entirely by the applicable app store.
3. How We Use Information
We use the information described above to:
- Operate the Service, including creating and maintaining your account, matching you with other players, and processing purchases;
- Save and restore your progress across sessions and, where you have linked an account, across devices;
- Maintain the security and integrity of the Service, including detecting and preventing cheating, fraud, and abuse;
- Enforce the age-based restrictions described in Section 5;
- Diagnose technical problems and improve the Service;
- Show optional rewarded video ads to users who choose to watch them, grant the in-game reward for a completed ad, limit the number of rewarded ads available each day, and prevent reward fraud;
- Comply with legal obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising (advertising targeted to you based on your activity across other companies' apps and websites).
4. How We Share Information
We share information with the following categories of third parties, each of which processes information under its own privacy practices:
- Google Firebase (Google LLC), which provides authentication, real-time data storage, and backend processing (cloud functions) for the Service. Firebase is the infrastructure on which your account, gameplay data, and matchmaking are stored and processed.
- Apple Inc., if you choose to sign in with Apple.
- Google LLC, if you choose to sign in with Google, and in connection with your use of the Google Play Store.
- Meta Platforms, Inc., if you choose to sign in with Facebook, or if you access the Service through the Facebook Instant Games platform. Where you access the Service through Facebook, Meta's own data practices also apply to that access, independent of this Privacy Policy.
- Apple App Store or Google Play, which process purchases you make within the Service.
- RevenueCat, Inc., a purchase-verification and subscription-management service we use to confirm that a purchase you make through the Apple App Store or Google Play is genuine before granting you the in-game currency or item purchased. RevenueCat receives your in-app account identifier and information about the purchase itself (such as which item was bought and its price); it does not receive your payment card details, which are handled entirely by Apple or Google.
- Google AdMob (Google LLC), our advertising provider, which delivers the optional rewarded video ads available in the Service and receives the advertising data described in Section 2.2. We configure AdMob to serve only non-personalized ads. Google's use of this information is described at policies.google.com/technologies/partner-sites.
- Legal and safety disclosures. We may disclose information where required by law, to protect the rights, property, or safety of Joy Barua, our users, or others, or in connection with a merger, acquisition, or sale of assets.
We do not share your information with third parties for their own independent marketing purposes. Our advertising provider may use the information it collects to deliver, measure, and protect the ads shown in the Service, as described in its own policies.
5. Children's Privacy
5.1 Age Screening
At first use, we ask for your birth month and year and store the resulting age category on your account. This information is used only to determine whether the restrictions described below apply to your account, and for no other purpose.
5.2 Restrictions for Accounts Under 13 (Under 18 in India)
An account identified through our age screening as belonging to a user under 13 (under 18 in India) has the following restrictions applied automatically:
- No online multiplayer features for that account, and no information about the user shared with or made visible to other players in real-time matches.
- No in-app purchases processed for that account.
- No advertisements requested or shown for that account, and none of that account's information used for advertising, ad personalization, behavioral tracking, or interest-based advertising.
- Information collected from that account limited to what is reasonably necessary to operate the offline and single-device features of the Service — including that transaction-level records of individual offline matches are not created for these accounts, while the account's own currency balance and inventory continue to function normally.
Some countries set the age at which a person can agree to online services on their own higher than 13 (for example, up to 16 in parts of Europe). The age screening above is a minimum standard, not a legal determination for every country. If you are below the age of digital consent where you live, please ask a parent or guardian before using the Service. A parent or guardian can contact us using the contact details in this policy to ask us to delete the account.
We do not knowingly collect personal information from children in a manner inconsistent with applicable children's privacy laws.
5.3 Parental Rights
If you are a parent or guardian and believe we have collected information from your child inconsistent with this Policy, or if you wish to review, correct, or request deletion of your child's information, please contact us using the information in Section 10.
5.4 Compliance
Our practices with respect to children's information are intended to comply with the Children's Online Privacy Protection Act (COPPA) and comparable laws in other jurisdictions. The technical enforcement mechanisms described above are built and operating. This section, and the compliance posture it describes, has not yet been reviewed and confirmed by outside legal counsel — that review remains outstanding and this section will be updated to reflect its outcome once complete.
6. Data Retention
We retain your account and gameplay information for as long as your account is active, and for a reasonable period afterward as needed to operate the Service, resolve disputes, and comply with legal obligations.
Wallet and purchase transaction records. Entries in your virtual currency transaction history are retained for six months from the date of the transaction, after which they are automatically deleted. This period allows us to investigate and resolve purchase disputes, refunds, and account-security issues within the timeframe those typically arise.
Match, lobby, and matchmaking records. Technical records associated with completed or abandoned matches, and with matchmaking lobbies you have joined, persist for a limited operational period as part of routine system maintenance, after which they are automatically removed.
Inactive guest accounts. If you use the Service without linking an Apple, Google, or Facebook account and the account has no activity (no gameplay, no earned or spent currency) for 60 consecutive days, the account and its data are automatically deleted.
Retention after account deletion. When you delete your account, we delete your account and substantially all associated data, including your progress, virtual currency balances, and match history. One limited exception: a record confirming that a one-time sign-up bonus was previously granted to the account is retained after deletion, solely to prevent the same bonus from being claimed repeatedly by re-registering. This record is de-identified at the time of deletion — the account identifier is removed, and what remains cannot be used to identify you or your deleted account. It is retained only for this fraud-prevention purpose and is not used for any other purpose.
Device backups on Android. On Android, the operating system's backup feature may copy the app's local data, including your sign-in session and your age-screening answer, to your Google account so it can be restored if you reinstall or change devices. Google handles this backup under your Google account's settings; we do not receive or control it, and you can turn it off in your Android backup settings.
7. Your Choices and Rights
7.1 Account Information
You may update your display name and cosmetic selections at any time within the Service.
7.2 Linked Accounts
Linking your account to Apple, Google, or Facebook lets you access your progress from a new device and protects your account from being lost if you reinstall the Service. We do not currently offer a way to unlink a connected account through the Service. If you no longer want an account linked to a particular Apple, Google, or Facebook identity, you may delete your account entirely (Section 7.3) and, if you wish, create a new one.
7.3 Account Deletion
You may permanently delete your account and associated data at any time through the Service's Settings menu. Deletion is immediate and permanent — there is no waiting period, because the request is handled directly by the Service and is not routed through us manually. Deleting your account removes your progress, virtual currency balances, cosmetic ownership, and match history, subject to the limited retention described in Section 6.
Delete Account is available in Settings for every account, including accounts that have not linked an Apple, Google, or Facebook identity.
If you are unable to access the Service to delete your account yourself, contact us using the information in Section 10 and we will assist you.
7.4 Advertising Choices
Rewarded video ads are always optional; you choose whether to watch one. If you are in the European Economic Area, the United Kingdom, or Switzerland, we ask for your choices through Google's consent tool before any ad is shown, and you can review or change them at any time in Settings under "Ad privacy choices." You can also reset or delete your device's advertising identifier through your device's settings.
7.5 Regional Rights
Depending on where you live, you may have rights regarding your personal information, including the right to access it, correct it, delete it, receive a copy of it in a portable format, and object to or restrict certain processing. We will not discriminate against you for exercising any of these rights.
European Economic Area, United Kingdom, and Switzerland. Where the GDPR or UK GDPR applies, we process your information to perform our agreement with you (operating the Service), for our legitimate interests (keeping the Service secure, preventing cheating and fraud, and improving the Service), to comply with legal obligations, and, where the law requires it, based on your consent (for example, for advertising). You may withdraw consent at any time, without affecting processing that took place before withdrawal, and you may lodge a complaint with your local data protection authority. Your information is processed in the United States, where our service providers operate.
California and other U.S. states. If you live in California or another U.S. state with a comprehensive privacy law, you have the right to know what personal information we collect, use, and disclose; to request that it be corrected or deleted; and to opt out of the sale of personal information or its sharing for cross-context behavioral advertising. We do not sell or share personal information in either of those ways.
Many of these rights can be exercised directly in the Service: you can update your display name (Section 7.1), manage your advertising choices (Section 7.4), and delete your account (Section 7.3). For any other request, contact us using the information in Section 10. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law.
8. Data Security
We use reasonable administrative, technical, and organizational measures designed to protect information within the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other reasonable means before the changes take effect. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Policy.
10. Contact Us
Questions about this Privacy Policy, or requests regarding your information, may be directed to: