Privacy Policy

Updated 30 October 2026

Rushbound — City Escape is published under the Google Play developer name CodeDrawn Digital. This policy explains local gameplay, online services and your choices. Contact support@codedrawn.tech for privacy questions or requests.

Game information on your device

Your local save includes your chosen runner name, age-range choice, preferences, records, streaks, daily rewards, coins, diamonds, inventory, outfits and unlocked areas. Optional tilt steering uses device motion locally. Public update requests do not upload this save as a player profile or leaderboard.

Local information remains until changed or removed through the game or Android app-storage controls. Clearing app storage removes the local save. Uninstalling can also remove it; Android backup and restore may preserve or restore gameplay data according to your device settings. Linking an account does not provide cloud save, purchase recovery or gameplay synchronization between devices in this release.

Optional Google accounts, when available

Account testing is optional and limited to invited players who confirm they are 18 or older and explicitly agree to the account privacy notice. The server checks new-member eligibility using the verified Google email; an invitation does not bypass the adult confirmation or privacy choice. Invitation addresses are held privately for test eligibility and are not exposed in public configuration. Players aged 16–17 can use guest gameplay. Choosing a Google account is not parental consent or permission for marketing email.

When you choose an available sign-in, Google verifies your identity and gives the service an identity token, which the account service verifies before creating a session. We receive your verified Google email address and Google account identifier. We do not receive your Google password or request access to Gmail, contacts or files.

The prepared account service stores that identifier and email, a generated Rushbound member ID, creation time, confirmation of an adult age band, privacy-notice version and acceptance time. It stores hashed Rushbound session tokens and expiry information for access and security. A Google identity token can also contain basic-profile claims; the Rushbound account database retains only the account fields listed here, not profile names, photos or Google identity tokens. Identity and consent records are encrypted in that database.

The Android implementation saves its Rushbound session encrypted using Android Keystore in a directory excluded from device backup. Browser management holds its session only in page memory. App sessions expire within seven days and browser management sessions within thirty minutes; sign-out or deletion can end them sooner. Expired session records are pruned by the service.

Account information supports membership, access/export/deletion and security. It is not a server copy of your local wallet, inventory, streak or records. Google operates its authentication service under the Google Privacy Policy.

Google identity and service information

Optional Android sign-in uses Credential Manager and Google's identity services; browser account management loads Google's sign-in service only after you choose to continue. These services operate separately from the Rushbound account database. Google explains that its services may process account/login information, IP address and device/account identifiers for authentication and security, and API-use or diagnostic information to maintain and improve services. Actual processing can depend on the device, service use, Google Account and device settings.

Rushbound does not request the advertising-ID permission. This does not mean that no other identifier or operational information can be processed by Google. Google's system-wide practices do not mean Rushbound receives your phone number, contacts or location, or that every listed Google data category is collected by this game's sign-in. See Google Play services and its data practices and Google account-management services. The exact SDK-version operational data flow has not been independently observed in a live sign-in test.

Online updates and hosting

When online, the game automatically requests public campaigns, settings and scheduled daily words over HTTPS, caching valid responses for offline use. These feed requests do not include your local runner name, age-range choice, wallet or records. Optional account actions are separate and send the identity and adult-confirmation information described above.

The public website and game-update feeds use OpenAI's ChatGPT Sites and Cloudflare infrastructure. When enabled for invited testing, the separate account service processes its account database on the operator's Hostinger VPS in Mumbai, India. This location does not apply to every Google or public-feed provider operation. Online delivery and security involve connection information such as IP address, request time, requested address and browser/device headers. The account service also uses short-lived request-security and rate-limit information. Providers may retain operational/security records separately from local saves and the account database.

Provider records follow applicable arrangements and retention criteria, including service delivery, security and legal obligations. Although the account VPS location is known, all provider processing locations, transfer arrangements and maximum log/backup retention periods have not been confirmed. We do not claim immediate deletion or memory-only processing for all connection information. Contact us so we can coordinate relevant provider requests.

See the Sites Data Processing Addendum and Cloudflare Privacy Policy. Infrastructure may process information in more than one country.

Age range and younger players

The intended audience is 16 and older. Profile keeps a coarse age range locally and does not request a date of birth. New account creation sends an adult-confirmation fact after the explicit adult account choice; it does not upload every player's local age setting. Under-18 and unknown-age profiles do not receive paid-currency prompts, new-account sign-up or optional Android reminder prompts.

There is no player chat or public player profile. Existing members can manage/delete accounts on the web regardless of age or current invitation status; that route cannot create an account. These controls do not replace additional obligations in a player's country. Contact us if you believe a younger person's account information has been collected.

Optional reminders and permissions

Adult players can explicitly enable local reminders and choose a preferred hour and schedule. Daily reminders target at most one a day through seven days away. Occasional reminders target about days one, three and seven. The more-frequent choice targets about one, two and six hours away, then daily through day seven, with at most three reminders in a rolling twenty-four hours. Quiet hours can combine or delay delivery. Returning to the game refreshes the inactivity schedule.

The device stores reminder preferences, recent activity, streak/claim dates, quiet hours and scheduling/delivery information. Android notification permission is requested where required. Battery/system scheduling may delay delivery, and an enabled schedule can be restored after restart. There is no reminder server or push-token service; reminder activity is not uploaded for targeting.

Turn reminders off in Profile or Android notification settings. Denying notifications does not prevent gameplay. Sound, music and vibration controls are local. Rushbound does not request location, camera, microphone or contacts permission.

Currency, rewards and purchases

Earned currency, exchanges, equipment and mystery-box rewards belong to the local save. Mystery boxes are earned in gameplay, free to open and can give varied rewards. There is no cash-out or player-to-player currency trading.

Prepared Google Play billing is disabled. Real-money checkout is disabled and no payment is taken or paid currency granted. Planned pack prices are previews, not evidence of prices previously charged. We will update this policy and relevant controls before enabling purchases, advertising or materially different processing.

Access, export and deletion

Use Profile controls or manage or delete your Rushbound account on the web. Verify the same Google account linked in the game. This route only looks up an existing account; it never registers one. You can download your account information or confirm permanent deletion.

Deletion removes the account and associated account records/sessions from the operational Rushbound database. It does not delete your Google account or guest progress stored only on your devices. Clear local gameplay separately through the game's reset controls or Android app-storage settings. Account deletion does not automatically delete independent provider logs or support correspondence; legitimate retention is addressed through the rights-request process.

Account records remain while you maintain the account, until deletion is requested. Separate hosting/security records, correspondence and legally required records follow necessary service, security, dispute or legal purposes. Exact provider backup/log deletion schedules are unconfirmed. We cannot retrieve a guest save from your device.

If sign-in is unavailable, you cannot access the original Google account, or you need another way to exercise a right, email support@codedrawn.tech. We may need proportionate information to verify ownership. Never send passwords, sign-in codes or identity tokens.

Depending on applicable law, you may have rights to access, correct, erase or receive a copy of information, restrict or object to processing, withdraw consent where relied upon, or complain to your data protection authority. We handle information we control and coordinate relevant provider requests, subject to applicable law and legitimate retention requirements.

Support and owner administration

If you email support, we and our email provider process your address, message and information you include to respond. We retain correspondence while needed to resolve it and for legitimate security, dispute or legal needs. Avoid payment-card details and unnecessary identity documents.

The separate owner portal requires authorized sign-in; the current hosted portal uses ChatGPT. It processes administrator identity/session and configuration changes for access control and security. Player membership does not grant owner access, and players do not need the portal to play.

We use HTTPS for the inspected online services and restrict account/owner access. We revise this policy when information practices change and update the date above.