River Shaper Privacy Policy

Orbickk_Lab develops and operates River Shaper. This notice describes information used by the game and by its account, advertising, and purchase features when those features are used. Contact: [email protected] .

Game information on your device

The game stores your puzzle progress, designs, completion records, sound and haptic settings, and tutorial status on your device. It also stores account session credentials and local records of item effects, pending hint views, and pending transactions when you use those features. Puzzle progress is not uploaded as a general cloud save by the account service.

Optional recovery-code account

When you use account features, an account uses a randomly generated identifier and a recovery code instead of a username or password. Creating or restoring an account sends the necessary credentials over HTTPS. The server stores cryptographic verification hashes of recovery codes and session tokens, not their readable values. The app displays the new recovery code once and copies it only when you choose the copy button.

The account service keeps the account identifier, RevenueCat App User ID, creation time, session expiry information, and item-use operations. Operations include request identifiers, item type, the relevant puzzle identifier and version, and delivery or acknowledgment status. These records prevent duplicate consumption and recover unfinished item deliveries.

Test accounts and production accounts use separate identifiers and account storage. Test balances are not combined with production balances.

Purchases and item balances

When enabled, Google Play handles payment and RevenueCat processes purchase history, product and transaction information, the game's App User ID, entitlements, and item balances. We use these services to verify purchases, restore eligible rights, and apply requested item effects. RevenueCat also uses account and purchase information to provide account-activity and purchase-performance reports for us. The game does not collect your full payment-card number. Purchase recovery is separate from local puzzle-progress recovery. See RevenueCat's privacy policyand Google's privacy policy .

Purchases remain associated with the original purchasing App User ID. Restoring an account or purchase does not merge item balances from different accounts.

Advertising and your choices

The current Android build requests Google test ads. When advertising is used, Google Mobile Ads can process IP addresses and inferred approximate location, app-scoped or device identifiers, app and ad interactions, and diagnostic information for ad delivery, measurement, and fraud prevention. The game does not request precise GPS location for puzzles. See Google's SDK data disclosureand Google's advertising information .

We apply conservative advertising settings to all users: requests receive Google's under-age-of-consent treatment and a maximum ad-content rating of G. This disables personalised advertising for those requests. These settings do not establish a user's age and do not mean that no information is processed. See Google's description of these settings .

When the live advertising service is enabled, Google's User Messaging Platform manages applicable privacy messages. If privacy choices are available, you can reopen them from the shop's advertising privacy button. You can read this policy from both the shop and settings.

Automatic-ad removal and rewarded hint ads are separate features. Choosing to view a hint ad may still involve the advertising data processing described above.

Hosting and support

When account services are enabled and used, Cloudflare Workers and SQLite-backed Durable Objects host the service and its account records. Cloudflare processes network traffic, including IP addresses and request metadata, to deliver and secure the service. The account service uses a keyed hash of an IP address for short-lived authentication abuse prevention, not for ad targeting. See Cloudflare's privacy policy .

If you email support, we receive your email address and the information you choose to include, and use it to answer your request. Do not email a full recovery code, session token, or payment-card details.

Retention and deletion

Local game data remains until you remove it using your device's app-data controls or uninstall the app, subject to any operating-system backup settings. Account and item-operation records are retained while the account is active so recovery and delivery remain possible. Session tokens stop authenticating after 30 days; expiration does not by itself delete the account.

After a verified account-deletion request completes, the account service removes its account, session, and item-operation records. A minimal deletion receipt containing a token hash and result remains valid for 24 hours to handle a lost response, with storage cleanup scheduled at the end of that period. Authentication abuse-control records use short expiry windows and are cleaned on subsequent use or scheduled cleanup. Infrastructure retries can delay scheduled cleanup. A pending item operation or unavailable purchase provider may delay account deletion; wait for a confirmed result.

The service requests deletion of the associated RevenueCat customer. Google Play, RevenueCat, and Cloudflare may retain information for their own legal, security, or service requirements under their policies; account deletion does not erase store transaction records or issue refunds. Support correspondence is retained only as needed to handle the request and meet applicable obligations. Read how to request deletion .

Access, choices, and international processing

You can contact us about access, correction, or deletion of your information. We may need to verify ownership without asking you to publish credentials. Advertising choices are available through the in-app privacy controls where offered and your device settings. Our providers operate internationally and may process information outside your country. Their linked privacy policies describe their processing locations, international transfers, and retention practices.

Audience

River Shaper is intended for people aged 13 and over and is not directed to children under 13. The game does not collect birth dates or provide age verification. If you believe a child under 13 has provided account information, contact us so we can review the information and the available deletion options.

Changes to this notice

We will update this page and its date when material data practices change.