Ruisselo Privacy Policy
In short. You can play without an account or any form. The connected account is optional, pseudonymous and has no email. We sell no information. You can delete your account in the game.
1. Who is responsible
Ruisselo is a game by Studio Brightloon (“we”). Person in charge of the protection of personal information: the founder of Studio Brightloon, contact@brightloon.com, Sherbrooke, Quebec, Canada. This policy covers every version of the game (mobile, web, Steam), its server and the brightloon.com and ruisselo.com websites.
2. What we process
Without an account, your game stays on your device. With the optional connected account, used for online saves, the daily puzzle, friends and leaderboards, the server keeps:
- a random identifier and a hash of your session token (never the token itself);
- your profile: generated or chosen name, avatar and frame chosen from our images, country if you choose one, language, visibility and friend code;
- your progress and a copy of your game (levels, stars, petals, garden, settings);
- your daily puzzle and challenge results, your friends, reactions, blocks and reports;
- if you create a recovery kit, a hash of its key only;
- on mobile, once purchases are offered, the record of your purchases and entitlements.
Technical data. Our host receives your IP address to route requests. Our server keeps only a hash of it, for two days, to block abuse. The game also sends grouped totals (for example the number of levels completed per day) that contain no player identifier.
What we do not ask for: real name, email, phone number, date of birth, photo, contacts or precise location. There are no written messages between players. If you write to us, we receive your email address and message.
3. Why
| Why | Ground |
|---|---|
| Run the game, saves, the daily puzzle, friends and leaderboards | Necessary for the service you request |
| Fair leaderboards, security and moderation | Legitimate interest in protecting the game and its players |
| Improve the game from totals without identifiers | Legitimate interest |
| Non-personalized advertising (mobile) | Funding the free version |
| Personalized advertising (mobile) | Your consent, which you can withdraw at any time |
| Deliver your purchases (mobile) | Necessary for the purchase |
| Answer your requests | Your request |
Automated decisions. An implausible time is removed from public leaderboards until it is checked, and a name reported by three different players within 30 days is replaced by the generated name for 30 days. Write to us to have a person review the decision.
4. What other players see
Your name, avatar, country if chosen and results are visible according to your setting: Friends by default, Public (country and world leaderboards) or Private. A challenge you share shows your name and time to whoever opens it.
5. Ads and purchases (mobile only)
The mobile version shows Google AdMob ads. Google’s SDK collects on your device the IP address, device and advertising identifiers, ad interactions and diagnostics, under its own rules. Ads are personalized only if you agree in Google’s consent form; on iOS, the advertising identifier is used only with your permission (App Tracking Transparency). You can review this choice in Settings › Ad choices. Any purchase removes ads.
Purchases go through the App Store or Google Play, which handle payment: we receive no banking details. A purchase validation provider verifies transactions for us. The web and Steam versions have no ads or purchases; the Steam edition uses your Steam account (Valve) for achievements and Steam Cloud, without sending us your Steam identifier.
6. Providers and transfers outside Québec
We share your information only with our providers and when the law requires it:
- our cloud host (United States, global network): game server, database and websites;
- Google (United States): AdMob advertising and consent form, on mobile;
- our purchase validation provider (United States): purchase verification, on mobile;
- Apple, Google and Valve: downloads, payments, achievements and Steam Cloud, under their own policies.
Before these transfers outside Québec, we carried out a privacy impact assessment. They are governed by our providers’ data processing agreements and by Google’s data protection terms.
7. Retention
| Information | Kept |
|---|---|
| Account, profile, progress, save, recovery hash, purchase record | Until the account is deleted |
| Friends and blocks | Until removed or the account is deleted |
| Daily puzzle starts | 7 days |
| Daily puzzle results | 400 days |
| Challenges, challenge results and reactions | 90 days |
| Reports | 180 days after handling, at most 365 days |
| Moderation log | 365 days, made anonymous if the account is deleted |
| IP address hash | 2 days |
| Totals without identifiers | 25 months |
| Database backups | 30 days |
| Emails received | 24 months after our last reply |
8. Your rights
You can access your information, have it corrected (most of it can be changed in the game), have it deleted (Profile › Delete my account, see Delete my data), withdraw your consent to personalized ads and complain to the Commission d’accès à l’information du Québec or the authority of your country. Write to the person in charge (section 1); we answer within 30 days. Since the account has no email or password, a request made without a session or recovery kit does not let us know whose account it is. Never send your token or recovery key: we will not ask for them.
9. Security
Encrypted connections (HTTPS), tokens and keys stored only as hashes, IP addresses never stored in clear, administration access limited to us. If an incident presents a risk of serious harm, we will notify the Commission d’accès à l’information and the people concerned.
10. Children
Ruisselo is a game for teenagers and adults; it is not aimed at children and must not be used by anyone under 13. In Québec, a person under 14 needs the consent of a parent or guardian. If a child has sent us information, write to us and we will delete the account.
11. Storage on your device
The game stores your game, settings and session on your device. The websites use no advertising cookies or tracking tools. Clearing local data does not delete the connected account.
12. Changes
We will update the date above with each change, and tell you in the game about any important change before it applies.
If this version and the French version differ, the French version prevails.