Rover Crystal

Privacy Policy

Effective date: November 2, 2026

This Privacy Policy explains how WCF TECH LLC ("we", "us") handles information when you play Rover Crystal (the "Game") on your mobile device. By using the Game you agree to this Policy.

Who we are
WCF TECH LLC, 9250 Sydney Hayes Road, Orlando, FL 32824, United States.
Privacy contact: rcsupport@wcftech.com

1. Information we collect

a) Game data on your device

Your progress (levels, crystals, credits, gems, items, upgrades), settings (language, sound, graphics) and a nickname and random player ID that the Game creates for you are stored locally on your device. If you uninstall the Game or clear its data, this information may be deleted.

b) Online features and cloud save

When your device is online, the Game automatically creates an anonymous player account on our servers (hosted by our provider Supabase): a random player ID and a secret device key. It is not linked to your name, email or phone number. We use it to keep a copy of your save in the cloud (your progress, items, gold and gems, nickname, profile ID and chosen avatar, rover and pets), so your progress can be restored if you reinstall the Game or change devices, and to run online features such as rankings. If you choose to connect Google Play Games, we receive your Google Play Games player identifier, only to link your save to you on other devices.

c) Purchases

In-app purchases are processed by Google Play. We never receive your card or payment details. We receive purchase information (product, order ID, purchase token, date and status) so we can deliver the items you bought, restore one-time purchases and prevent fraud. We also look up in Google Play the amount paid, currency, taxes, the developer's estimated revenue and, when applicable, refunds or voided purchases together with the reason reported by Google (for example, a refund or a chargeback). We store this data linked to your anonymous player ID and use it primarily in aggregated reports. Individual access is restricted to auditing, support, fraud prevention, refunds and accounting obligations.

To validate purchases, restore one-time purchases and manage season passes, we use RevenueCat, a purchase-management service. When you make or restore a purchase, RevenueCat receives your anonymous player ID, the purchase information listed above (product, order ID, purchase token, date, status, price and currency) and basic technical data about the app and device (such as app version, platform, country/store and IP address). RevenueCat processes this data on our behalf to verify purchases with Google Play and to tell our servers what you are entitled to. RevenueCat does not receive your card or payment details. RevenueCat's privacy policy: https://www.revenuecat.com/privacy

d) Advertising

The Game shows ads through Google AdMob, including optional rewarded videos. AdMob may collect your device's advertising ID, device and app information, IP address (used to estimate an approximate location) and information about how you interact with ads. This is used to show, measure and, where allowed, personalize ads, and to prevent fraud. In the European Economic Area, the United Kingdom and Switzerland we ask for your consent before personalized ads are shown, and you can change your choice at any time in the Game under Settings → About → Ad privacy options. Learn how Google uses this data at policies.google.com/technologies/partner-sites.

e) Gameplay analytics

To balance the difficulty of the Game and fix problems, the Game sends us gameplay statistics linked to your anonymous player ID: for each attempt at a level, the level number, whether you completed or failed it, time played, hits taken, stars, what ended the attempt, gold and crystals earned, your upgrade levels, rover, pets and boosts used, your gold and gems balance and the game's performance (frames per second and graphics setting); and, when you open the Game, your language, app version, operating system version (for example "Android 13") and progress summary. We also record events such as challenge results, rewarded videos watched and purchases made. We do not collect your name, contacts, precise location or files.

f) Fair play and security

To keep rankings and rewards fair and to prevent fraud, we check that saves and progress are plausible (for example, detecting a save edited outside the Game), verify purchases with Google Play, and may use Google's Play Integrity service to confirm that the Game was installed from Google Play on a genuine device. Accounts that show signs of cheating may have their save restored from the cloud and may be excluded from rankings and prizes.

g) Support

If you contact us, we receive the information you send us (such as your email address and message) and use it only to answer you.

h) Crash reports and diagnostics (Firebase Crashlytics, Google)

When the Game crashes or an error occurs, the app may send a technical report to Firebase Crashlytics, a Google service. The report may include:

We do not deliberately include your name, email, nickname, player ID or your saved progress in these reports: the Game removes this data from error messages before sending them.

In the European Economic Area, the United Kingdom and Switzerland, reports are only sent if you agree in the privacy message. You can change this choice at any time in the Game's privacy options.

Purpose: finding and fixing bugs. Retention: up to 90 days in Firebase.

i) Install source and referral codes

When the Game is installed from Google Play, we read once the install referrer that Google Play itself provides: the campaign or creator/partner code and the installation date. If you enter a referral code in the Game, it is also recorded.

We store the attributed source (source, campaign and date) with your anonymous player ID. The raw referrer text is not stored. A fingerprint of it (hash) is kept for up to 30 days to prevent fraud and is then deleted. Referral code attempts are also deleted within 30 days.

Rover Crystal does not use your IP address or device identifiers for this attribution.

Purpose: understanding which campaigns and partners bring players, paying partners correctly and preventing fraud. Suspicious attributions may be reviewed manually.

2. How we use information

Where the GDPR applies, we rely on: performance of our contract with you (running the Game and delivering purchases); our legitimate interests (security, analytics, crash diagnostics, improving the Game); and your consent (personalized ads and, where required, crash reports).

3. Sharing

We do not sell your personal information for money. We share information only with service providers that help us run the Game — Google (Play, Play Games, Play Integrity, AdMob and Firebase Crashlytics, which processes crash reports on our behalf), RevenueCat (purchase validation and entitlements) and Supabase — under their own terms and privacy policies, and when required by law or to protect our rights and users. Google may use advertising data as described in its policies; you can limit ad personalization in your device settings (Android: Settings → Google → Ads).

4. Retention

Data on your device stays there until you clear it or uninstall the Game. Detailed gameplay statistics are kept for up to 60 days; after that only aggregated statistics per level (such as averages and completion rates), which do not identify any player, are kept. Your cloud save and other online data are kept while your player profile is active and deleted within 30 days after you ask us to delete it, except where we must keep it for legal reasons. Purchase records, including the revenue, refund and chargeback data described in item 1c, are kept as required for accounting and tax purposes.

5. Children

The Game is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

6. Your rights

Depending on where you live (for example the EU/UK under the GDPR, Brazil under the LGPD, or California under the CCPA/CPRA), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain uses, and to withdraw consent. To make a request — including deleting your online data, cloud save and gameplay statistics — email rcsupport@wcftech.com with your player ID (shown on your profile in the Game). We will not discriminate against you for exercising your rights. You may also contact your local data protection authority.

7. International transfers

We are based in the United States, and our providers may process data in other countries. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

8. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure.

9. Changes

We may update this Policy. The effective date above shows when it last changed; important changes will also be announced in the Game or on its store page.

10. Contact

WCF TECH LLC · 9250 Sydney Hayes Road, Orlando, FL 32824, United States · rcsupport@wcftech.com