Rivercut: Let It Flow – Privacy Policy

Last updated: 29 October 2026.

The data controller is KOTACME, the publisher of Rivercut: Let It Flow. Contact: support@rivercutgame.com. The game works without an account and offline. The data below is processed only to run the leaderboards, keep your progress across devices and keep the game working and fair. Signing in is optional.

What data and why

DataWhenPurpose
A random player id and a device keyWhen a score is first sentAttributing scores to a player; signing submissions (against impersonation)
The country you choose for the rankingsWhen you confirm it (after the tutorial or in the profile)The country's leaderboards and the ranking of countries
A recording of a level run (brush strokes, no video or audio) and the scoreAfter a level, when onlineThe server replays it and works out the ranked score itself
Google Play Games player id, gamer tag and avatar URLAfter signing in with Google Play GamesName and avatar in the leaderboards; progress across devices
Google account id, first name, e‑mail and profile picture URLAfter signing in with GoogleAs above; the e‑mail only to show in the game which account you are signed in with
Apple id (and once the name / e‑mail you choose to share)After signing in with AppleAs above
Diagnostic data: phone model, system, graphics chip and memory; the game's frame rate and timings; errors; summaries of level attempts (map, stars, time, sand); small screenshots of the game's own screens (never other apps or system windows)While playing online, unless “Send diagnostic data” is switched off in the profile's settingsFinding and fixing bugs and slowdowns on different phones; balancing the levels
The in-game wallet: coins, items, lives and their useWhen playing onlineKeeping items and lives fair and the same on every device
A Google Play Integrity check (Android)When a score is sentGoogle confirms the game is the genuine app from Google Play (against cheating)

No location, contacts or advertising ids; no third-party analytics or advertising tools. No ads. We do not sell data.

Legal basis (GDPR)

Art. 6(1)(b) GDPR – performance of the leaderboard service you join by signing in; Art. 6(1)(f) – legitimate interest in fair rankings (recording verification, signatures). You agree to share your account data in the Google / Google Play / Apple sign-in window and can withdraw it by signing out or deleting the account. Diagnostic data and the wallet: Art. 6(1)(f) – legitimate interest in a working and fair game; the diagnostic data can be switched off at any time.

Where and how long

Stored on a server in Google Cloud (us-central1, USA); Google LLC participates in the EU‑US Data Privacy Framework. Connections are encrypted (TLS). Leaderboard data is kept while the account exists; recordings while the score is the player's best on that level. Diagnostic data is deleted after 30 days.

Recipients

Google (sign-in with Google / Google Play Games, Google Play Integrity, hosting). Apple (Apple sign-in). Nobody else.

Your rights

The game is not directed at children under 13; signing in requires a Google / Apple account under their terms.