Privacy Policy
Last Updated: 26 October 2026
1. Introduction
Welcome to Rowtate ("we," "our," or "us"). This Privacy Policy explains how information is handled when you use the Rowtate puzzle game on rowtate.com or in a native mobile app (together, the "Service").
We aim to handle personal information consistently with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and other applicable laws, including the General Data Protection Regulation (GDPR) where it applies.
2. Information We Collect
2.1 Information You Provide
You do not need to provide a name or email address to play. If you contact us, we process the contact details and other information you choose to send so that we can respond.
2.2 Automatically Collected Information
The information involved depends on the platform and enabled services:
• Local game data: The web version can store game progress and preferences in browser localStorage. The native app stores audio preferences, onboarding completion, and completed-game history in device-local application storage.
• Website analytics: Google Analytics may process page views, session duration, approximate location, device/browser details, and general usage patterns on rowtate.com.
• Optional Firebase/GA4 gameplay analytics: With your permission, the game records controlled menu/button activity, game and round entry, completion, continuation, explicit exits, turns, durations and clue use, with shared puzzle/app context. Firebase/GA4 uses pseudonymous app-installation/browser and session identifiers so events from the same installation or browser can be grouped. The SDK may process app/device information, language, session information and approximate location. We do not set a custom account/user ID or include names, emails, raw puzzle inputs or free text in gameplay events. Firebase advertising-identifier and IDFV collection are disabled, and advertising storage, user-data and personalization consents remain denied. This is pseudonymous collection, not identifier-free collection. Internal build 1.1 (45) used a separate identifier-free aggregate collector; that build and its historical data remain distinct.
• Advertising and technical data: Google H5 advertising on the web, and Unity LevelPlay with enabled native networks such as Unity Ads, may process IP address, approximate location, device and operating-system details, app version and language, mobile advertising identifiers where available and allowed, ad views, clicks, reward completion, fraud signals, and performance or diagnostics data. The exact data depends on provider settings, consent choices, and the networks enabled for an ad request.
2.3 Cookies, Mobile Identifiers, and SDK Storage
The web version and our website providers may use cookies, localStorage, and similar browser technologies. Native advertising SDKs may use mobile advertising identifiers and SDK storage on your device to deliver, limit, secure, and measure ads.
Where required, an advertising provider, operating system, or store/platform control may request consent or offer privacy choices. Availability depends on your location, platform, and enabled advertising providers. The native app provides a separate optional usage-analytics choice. On iOS, this choice is available only while Apple tracking permission is Authorized. If Apple tracking permission is denied or restricted, usage analytics is off and its controls are hidden. If tracking permission later becomes Authorized, you must choose Allow analytics again before collection restarts. This does not grant advertising consent or replace operating-system advertising controls.
3. How We Use Your Information
Information is used to:
• Provide and maintain the Service
• Save supported progress or preferences locally on your browser or device
• Understand website usage and, after app analytics opt-in, native-app usage to improve the Service
• Request, display, limit, and measure ads through Google AdSense / Google H5 Ads on the web and Unity LevelPlay with enabled networks such as Unity Ads on native mobile
• Confirm rewarded-ad completion before granting a clue or a replay of a completed game
• Detect fraud, abuse, crashes, or technical issues
• Comply with legal obligations
4. Advertising and Third-Party Services
4.1 Web Advertising — Google AdSense / Google H5 Ads
The WebGL version uses Google's AdSense H5 Games / Ad Placement technology for in-game experiences such as rewarded clue placements. Google and its advertising or measurement partners may process browser, device, network, and ad-interaction data to deliver and measure those ads, subject to applicable settings and consent choices.
Learn more: Google Privacy Policy (policies.google.com/privacy).
4.2 Native Mobile Advertising — Unity LevelPlay / Unity Ads
The iOS app uses Unity LevelPlay, including its ironSource components and Unity Ads, for banner advertising and rewarded video ads for clues and replays of completed games. Ad delivery depends on network and publisher configuration, privacy choices, and available inventory. Other native versions use advertising only when configured. LevelPlay, Unity Ads, and any enabled network may process and share ad-request, device, network, ad-event, fraud-prevention, and diagnostics data under their respective policies and the configured privacy choices.
Learn more: Unity Privacy Policy (unity.com/legal/privacy-policy).
4.3 Website Analytics and Optional Firebase/GA4 Gameplay Analytics
Website analytics may use Google Analytics cookies or similar browser technologies to analyze use of rowtate.com. You can use browser controls and Google's available opt-out tools to limit this processing.
Gameplay analytics is optional and starts disabled until a valid saved or new permission permits it. Choose No thanks and continue playing, or change your choice in Settings > Usage analytics. On iOS, analytics also requires Apple tracking permission to be Authorized; the analytics choice does not grant advertising consent. An original Firebase choice can be retained only if no later aggregate-build choice supersedes it. An aggregate-only grant does not authorize Firebase identifiers, and a later denial remains denied. Activity from before permission, or a game already in progress when permission is granted, is not backfilled. Normal restarts preserve the permitted pseudonymous identifier. See Google Analytics data collection for SDK information.
Withdrawing gameplay analytics consent stops collection and clears pending local analytics data/reset identifiers without deleting game progress. It cannot recall data already received by Google or automatically delete historical Google reports. If local storage cannot save all privacy changes, analytics remains off for the session and a notice offers a retry; a previous saved choice can return after restarting. Internal build 1.1 (45) used a Cloudflare aggregate collector: its local retries expire after seven days, server delivery receipts after eight days and aggregate totals after thirteen weeks. That collector does not retain raw event histories, IP addresses, user agents or request-body logs in application storage. Network providers still process addresses to deliver requests, and provider-managed security processing and backups have separate retention periods.
5. Data Storage and Security
Data saved by Rowtate in browser localStorage or device-local application storage remains part of our own save system. Consented gameplay events are processed by Google/Firebase; pseudonymous identifiers allow events from the same installation/browser to be grouped. Advertising data is processed separately by Google, Unity and enabled networks under their policies and configured choices. Internal build 1.1 (45) used Cloudflare-hosted aggregate gameplay totals; its historical dataset remains subject to the retention limits described above. Provider-managed network/security processing and backups have their own retention periods.
We use reasonable safeguards, but no method of electronic storage or internet transmission is completely secure.
6. Your Rights and Choices
6.1 Australian Users
Under the Australian Privacy Principles, you have the right to:
• Access your personal information
• Correct inaccurate information
• Request deletion of your information (where applicable)
• Complain to the Office of the Australian Information Commissioner (OAIC)
6.2 EU Users (GDPR)
If you are located in the European Union, you have additional rights including:
• Right to access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
6.3 Platform and Advertising Controls
You can control or clear browser cookies and localStorage through browser settings, although doing so may reset progress or affect website functionality. On mobile, use the privacy and advertising controls supplied by your operating system or any choice presented by an advertising provider. An App Tracking Transparency request appears only when the reviewed shipping configuration requests tracking authorization; declining it prevents tracking; contextual ads may still appear and play remains available. You may also contact us about applicable access, correction, deletion, objection, or complaint rights.
7. Children's Privacy
Rowtate does not require account registration or direct submission of personal information to play. Advertising SDKs may nevertheless process the technical data described above. Any release directed to children requires appropriate audience, COPPA, age, and advertising settings before the advertising SDK is initialized. If you believe a child has provided personal information directly to us, please contact us.
8. International Data Transfers
Advertising and analytics information may be processed outside Australia, including in the United States and other countries where Cloudflare, Google, Unity, or an enabled advertising network operates. Those providers describe their transfer safeguards in their respective privacy materials.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
Email: privacy@rowtate.com
Website: rowtate.com
For Australian users: If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au
11. Advertising Partners
On the web, Rowtate uses Google AdSense H5 Games / Google H5 Ads. Native apps use Unity LevelPlay when configured, with Unity Ads or other mediated networks delivering ads only when their dashboard networks are enabled. The active provider may use cookies, local browser storage, mobile identifiers, or SDK storage to deliver, cap, secure, and measure banner and rewarded ads.
Personalized advertising is used only where allowed by the shipping configuration and applicable choices. Provider and industry privacy options may include:
• Google Privacy & Terms
• Unity Privacy Policy
• Your Online Choices (Australia)
• Network Advertising Initiative
• Digital Advertising Alliance