Legal
Privacy Policy
Penalty Rush is a first-person football goalkeeper game made by an independent solo developer. It is available as a free iPhone and iPad app on the App Store, as a playable post on Reddit, and as a short playable demo on this website. This policy explains what each version collects, why, and how to remove it.
The short version. There is no Penalty Rush account, no advertising, no cross-app tracking and no App Tracking Transparency prompt. We never receive your email address, your Apple ID or your password. The browser demo on this website sends nothing to a server at all.
iPhone and iPad app
Game Center. The app asks Apple Game Center to authenticate the local player so Daily, Weekly, Monthly and All Time leaderboards and achievements work. Apple remains the canonical leaderboard provider and stores your Game Center display name and scores. We do not receive your Apple ID, email address, password or Game Center country. There is no name or country form in the app. If Game Center is unavailable, the app creates a local random guest id and a generated goalkeeper name so the game is never blocked; online leaderboards require Game Center sign-in.
Recurring rivalry projection and optional notifications. After an authenticated Game Center launch or recurring leaderboard use, Game Center creates a signed identity proof that our Cloudflare backend verifies. The raw Game Center player identifier is used only during that verification and is not stored. For up to 30 days, we store a keyed pseudonymous identifier, the public Game Center display name, and the best score and last known rank for the Daily, Weekly and Monthly periods. This short-lived projection lets a player who submits a higher score be recognized as the rival even if that player did not enable push notifications. If you choose to receive rivalry notifications, we additionally store your notification preference and an encrypted Apple Push Notification service (APNs) device token, show the rival's public name, and send at most one rivalry push in any rolling 24-hour period across all three leaderboards. Game Center remains the source of the live rank shown after the app opens. Turning notifications off removes the device token and pending pushes; the limited score projection may remain for up to 30 days so opted-in players can still detect later score crossings. Older app versions that do not send Weekly or Monthly projections cannot be observed retroactively for those periods.
On-device data. Progress and preferences are stored on your device: best score, best wave, total saves, career stars and progress, unlocked gloves, bosses beaten, achievements, language, sound and haptics settings, left-handed mode, rivalry consent, a delete-only credential for removing the current push binding, and the fallback guest id.
Gameplay telemetry. The app sends gameplay events to our Cloudflare backend: a random install identifier used by the separate telemetry pipeline, a coarse country derived from request metadata, and event data such as score, wave, saves, streak, run duration, how the run ended, achievements unlocked, bosses beaten, interface language, app version, notification funnel actions and whether a share was started. This is used for achievement rarity, crash-free health metrics and understanding which parts of the game people actually play. It is not used for advertising. We do not treat APNs acceptance as proof that a notification was delivered.
Reddit version
On Reddit the game runs inside a Reddit playable post. Reddit tells our app server which Reddit account is playing, and that username is used for the daily and all-time leaderboards of the post. Scores, aggregate achievement statistics and a random per-session identifier used to measure the funnel are stored in the storage Reddit provides to the app. A username typed by the client is never trusted; a logged-out player appears as Player. Everything you do inside Reddit is also covered by Reddit's own privacy policy and user agreement.
Browser demo on this website
The demo on the front page is the same game engine running locally in your browser. It has no account, no leaderboard and no score submission: it sends no gameplay data to any server. Progress and preferences from the demo are kept in your browser's local storage on your own device and can be removed by clearing site data for this site.
This website
Page views are measured with Cloudflare Web Analytics, which is cookieless, does not fingerprint visitors and reports only aggregate figures such as page views, referrers and countries. The site loads web fonts from Google Fonts; when a font is fetched, Google receives the request metadata, including your IP address. Press kit downloads and outgoing links to the App Store are handled by those services under their own policies.
How the data is used
- Run leaderboards and achievements on the platforms that provide them.
- Calculate how rare each achievement is.
- Restore your own progress on your own device.
- Measure game health and see which parts of the game are played or abandoned.
- Detect duplicate or invalid score submissions.
We do not sell data, do not use advertising identifiers and do not build advertising profiles.
Sharing
The Share button uses the iOS Share Sheet, Reddit's own comment flow, or your browser's share and clipboard features. We record only whether a share was started, succeeded or failed. We never post on your behalf outside the action you explicitly confirm.
Service providers
The app is distributed through Apple's App Store; Apple Game Center hosts the iPhone leaderboards and achievements, and APNs handles opted-in push notifications. The Reddit version runs on Reddit's developer platform and uses its storage. Cloudflare Workers, D1, Analytics Engine and Web Analytics host this website, the telemetry endpoints, the rivalry notification projection and the achievement rarity data.
Retention
Apple manages retention of Game Center leaderboard data, APNs delivery and Reddit manages retention of data held on its platform. The rivalry score projection and notification delivery records are kept for up to 30 days. Raw Game Center identity proof material is not retained after verification. APNs device tokens are removed when you opt out or Apple reports that a token is no longer registered. Gameplay telemetry and rarity records may be kept while the game is live so health metrics and rarity percentages keep working. Data on your device is removed when you delete the app; browser data is removed when you clear site data.
Tracking and advertising
Penalty Rush contains no advertising and no in-app purchases. It does not use advertising identifiers, does not track you across apps or websites, and does not request App Tracking Transparency permission.
Children
The App Store age rating is 12+. The game is not directed at children under 13, has no chat and no user profiles, and we do not knowingly collect personal data from children. If you believe a child's personal data reached us, write to the address below and it will be deleted.
Your choices
- Delete the app to remove all on-device progress and preferences.
- Manage or reset Game Center data through Apple's Game Center settings.
- Turn rivalry notifications off in the in-game settings and manage system permission in iPhone Settings.
- Manage Reddit account data through Reddit.
- Clear site data in your browser to reset the browser demo.
- Ask us by email to delete telemetry associated with your install; include the platform and the approximate date you played.
Changes
If this policy changes, the date at the top of the page changes with it. Material changes will also be noted in the App Store release notes.
Contact
Privacy questions: alex.polorotov@gmail.com.