Privacy policy
Effective date: 2026-10-17
Who we are
Redfox Gaming & Hosting Inc. is a Canadian game studio and is responsible for the personal information described here. This policy covers our game and this website. Our Privacy Officer is the person in charge of protecting personal information. Contact hello@redfoxgaming.ca.
Privacy at a glance
We use account and gameplay information to run duels, keep play fair and maintain your progress. We do not sell personal information. We never read your contacts or collect precise location, camera or microphone data.
Required consent and a Settings opt-out must be implemented before analytics and experiments are enabled. Rewarded ads are optional when available. Advertising identifiers require your permission.
You can export data or delete your account in the game, or request deletion by email. This website has no cookies, analytics or tracking. The sections below explain the details and retention periods.
What we collect
Accounts and friends
Online play creates an account using a random install identifier stored on the phone, not a hardware identifier. We keep account ID, username, display name, friend code, language and time zone if sent, and creation time. Session tokens remain on the phone. Optional Apple/Google sign-in keeps the provider ID for authentication. Google profile cleanup attempts to remove email, photo and provider name after sign-in/linking, preserving the game name when names are enabled; failed cleanup can leave data behind. The account may retain an Apple email, including a private relay address.
Player names appear on cards, friends lists and boards when enabled. Friends come from codes, links or recent opponents; we never read contacts. There is no chat and preset taunts are not stored.
Gameplay and analytics
We keep duel participants’ IDs, result, gun, duration, progress, titles, statistics and a hidden matchmaking rating. Timing, lag and fair-play evidence help detect cheating. An absent player’s character may take part in ghost duels and is notified later. We keep gifts, requests, revenge rights, link counts and last seen; others see a coarse last-seen bucket and you can hide your poster. Board country is optional and public.
When server analytics are enabled, active days and gameplay events link to account IDs. Exports use a stable random pseudonym per account; they are pseudonymous, not anonymous. Gameplay analytics rows contain no names, device IDs, IP addresses or countries. Experiment group markers maintain consistent settings. Consent controls required by law must be in place before enabling analytics and experiments.
Purchases and ads, when available
Apple or Google handles payment; game records confirm product, transaction and store country. We never receive card details or derive purchase country from IP or phone language.
Rewarded ads are optional. The AppLovin MAX integration sends your game account ID for reward crediting; the server keeps callback evidence to prevent fraud. Advertising SDKs and mediation partners may process advertising identifiers, device information, IP address/coarse location, interaction and diagnostics data. The actual SDK configuration must be verified before activation. Refusing ATT means no IDFA access and no tracking; refusal and required consent controls must work before ads ship. See AppLovin’s policy.
Diagnostics and support
The server transiently uses IP addresses and stores daily keyed hashes for rate limiting, not purchase-country selection. Hosting services may maintain independent logs. Connection logs contain account IDs. App version, platform and build support update requirements.
Remote Unity crash reporting is disabled in the reviewed client settings. The phone keeps gameplay and diagnostics logs locally; they are not automatically uploaded. A feedback report leaves the phone only when you choose to share it and may include a note, screenshot with names covered, phone model, language, build and log. We cannot guarantee that content you send contains no personal information. Support receives your email address and whatever you send.
What we never collect
We do not collect precise location or access your contacts, camera or microphone. We do not receive payment card details. We do not store chat messages or taunts. We do not sell personal information. Push notifications are not currently used; if offered later, they will require your permission and be limited to at most a few per day.
Why we use information and legal bases
We use account and gameplay information to provide the game, sign you in, maintain progress, connect friends and complete purchases you request. Where a legal basis is required, these uses are necessary to perform our agreement with you.
We use security and anti-cheat information to protect accounts, prevent fraud and keep duels fair, relying on our legitimate interests where that basis applies and subject to your rights. We use support information to respond to your requests. Any separate accounting retention must be defined before purchases launch.
We rely on consent for analytics and experiments where required by law, and for advertising identifiers and tracking permissions. You can withdraw consent through Settings or your device's settings. Withdrawal does not affect processing that was lawful before you withdrew. The legal basis and rights that apply depend on your location.
Who processes information
Railway, a US company, provides our game servers and database, hosted in Amsterdam in the European Union. Cloudflare R2 stores encrypted backups. Cloudflare also hosts these static web pages.
Apple and Google provide optional sign-in, purchases when available and app store services. AppLovin and its ad partners process optional rewarded ads when available. Remote Unity crash reporting is disabled in the reviewed client settings.
These providers process information for the functions described in this policy; stores and advertising providers also operate under their own privacy policies. See Apple's privacy policy and Google's privacy policy, as well as AppLovin's policy linked above.
International transfers
Your information may be processed outside your province or country, including by the providers described above. Game servers and the database are hosted in the European Union; a provider's country of incorporation may differ from the hosting location. Laws in other places may provide different protections.
Where applicable law requires safeguards for an international transfer, those requirements apply to our handling of your information. Contact the Privacy Officer for information about the destinations and safeguards relevant to your data.
How long we keep information
| Information | Reason and expiry, including after deletion |
|---|---|
| Account, install/provider identifiers, names/email, progress, wallet/ledger, friends, titles and skill rating | To operate the account: until account deletion. Local settings remain until cleared; account deletion clears local install ID and session tokens. |
| Duel records and anti-cheat evidence | For results, settlement and fair play: 90 days, including after deletion. Duel expiry starts at decision or cancellation; records without an end time need manual resolution. Evidence windows keep only their current 90-day contributions. |
| Weekly board country/totals; last seen | For boards and presence: 12 weeks; 14 days respectively, or account deletion sooner. |
| Gifts, challenge-link counts and ghost logs; friend requests | For social history and abuse prevention: 30 days; requests 7 days. Own rows go with deletion; another player’s history may keep your former ID for these periods. |
| Revenge rights; retired challenge-link codes and system friendship records | To prevent repeat rewards: rights are pruned 90 days after ending. Retired codes become unassigned tombstones to prevent reuse; no fixed expiry is set. System friendship records prevent races and repeated rewards; no general time expiry is defined. |
| Head-to-head records and referral records kept in other players’ accounts | Another player’s head-to-head record keeps your account ID with the counts of your duels’ results and the time of the last one, so they can see their record against you. A player who joined through your challenge link keeps your account ID as the one who invited them, so the referral reward is paid only once. Both stay for the life of that other player’s account and go when it is deleted; deleting your own account does not remove them. |
| Analytics queue, duel rows and active days | For gameplay measurement: queue entries older than 7 days are dropped when processed; duel rows 90 days; active days 400 days. Account-linked database rows and pseudonym mapping go with account deletion. |
| Encrypted analytics exports; count summaries and loss counters | For analysis and pipeline reliability: exported pseudonymous rows 90 days, including after deletion; exported count summaries 730 days; database loss counts 400 days. Account deletion does not erase existing exports. |
| Experiment enrollment | For consistent test groups: until account deletion or pruning 90 days after the experiment ends. |
| Purchases and store country | To validate purchases and enforce storefront restrictions: account-owned records go with deletion; store-country sources expire after 30 days. Stores retain independent records under their policies. Separate accounting retention has not been defined. |
| Ad offers, reward counters and callback evidence | To credit rewards and prevent replay fraud: offers, counters and pending rewards go with account deletion. System callback evidence remains after deletion with no fixed expiry. An offer’s 15-minute validity is not a storage expiry. |
| IP-derived security keys | For rate limiting: daily keyed hashes (IPv6 grouped by /64) expire from rate storage after about ten minutes. They are pseudonymous, not anonymous. IP is not used to determine purchase country. |
| Deletion marker; connection/deletion logs | To reject old tokens: completed markers are eligible for pruning after 2 hours and 1 minute; incomplete markers remain until cleanup succeeds. Logs contain account IDs for security and replaying deletions after restores. Log retention, including after deletion, is not yet set. |
| Encrypted R2 backups | For disaster recovery, including after deletion: daily copies are eligible for pruning after 30 days only when 7 newer copies are kept; monthly copies after 180 days only when 3 newer copies are kept. Outages can extend retention. Restores must replay deletions from logs. |
| Local diagnostics, reports and support email | To diagnose problems: later local event logs rotate at 1 MB with one older copy; the first-session log has no time expiry. Saved reports are capped at 20, 30 days and 15 MB, pruned when the report store runs. Shared reports, emails and deletion verification correspondence have no fixed expiry yet, including after account deletion. |
| Advertising SDK data, provider records and website delivery logs | For ads, store services and website delivery: provider-specific retention needs verification before enabling these services or publishing this policy. Account deletion does not automatically erase providers’ independent records. |
What account deletion removes
The server removes the account and device/provider links, progress, wallet and ledger, friends in both directions, notifications, account-owned storage and analytics, invite lookup, challenges, board entries, last seen, ad offers, pending rewards and daily counters. It ends friendships, retires challenge-link codes and voids unbound revenge rights against you. System duel and anti-cheat records, other players’ history containing your former ID, callback evidence, logs, existing exports and backups remain as listed above. A former ID or exported pseudonym does not guarantee anonymity.
Your rights and choices
You can export a copy of your account data in the game. Some security data, including anti-cheat signals and the hidden skill rating, is left out of the standard export. Contact the Privacy Officer for access requests beyond that export.
Request account deletion
In the game, open Settings and tap Delete account (next to Export my data), type DELETE to confirm, then tap Delete. Finish any duel first. Or email hello@redfoxgaming.ca with “Account deletion”, your friend code and your deletion request. A public friend code locates the account; we verify control through the signed-in account. If you lost the code or access, tell us; we will help locate the account and arrange another ownership check, such as matching a store transaction reference to our records. Never send passwords or full payment details. We aim to complete verified requests within 30 days and reply if more information is needed. See retention for what is deleted and what remains.
A Settings opt-out for analytics/experiments and withdrawal of tracking consent must be available before these features are enabled. Rewarded ads are optional. You can choose whether to show a country on the board and hide your poster to limit last-seen visibility.
Depending on applicable law, you may have rights to access, correct, delete or obtain a portable copy of information, withdraw consent, object to processing or ask us to restrict it. These rights may have legal exceptions. This includes protections under Canada's PIPEDA and Quebec's Law 25, the EU and UK GDPR, Brazil's LGPD, and the personal data protection laws (PDPL) of Saudi Arabia and the UAE.
Contact our Privacy Officer to exercise rights or raise a concern. You can also complain to the Office of the Privacy Commissioner of Canada or your local privacy authority, including the appropriate provincial authority in Canada. Contacting us first does not remove your right to complain directly.
Children
The game is rated for ages 13 and up and is not directed to children under 13. If a parent believes a child under 13 has an account, contact us and we will delete it.
Security
Backups and analytics exports are encrypted. We use security rate limiting and anti-cheat signals for the purposes described above. No system can guarantee complete security. Please do not send passwords or payment card details in support messages.
This website
These are static pages with no cookies, analytics or tracking, and no third-party fonts or scripts. Cloudflare processes your IP address to deliver pages and protect the site. Following a provider's privacy link takes you to that provider's website, where its own policy applies.
Changes to this policy
We may update this policy as the game or legal requirements change. We will publish the revised policy here with its effective date. Where the law requires notice or renewed consent, those requirements apply.
Contact
Privacy Officer, Redfox Gaming & Hosting Inc.. Email hello@redfoxgaming.ca for privacy questions or requests. For game support, email hello@redfoxgaming.ca. We aim to reply within a few business days.