Privacy policy
Mobulding · Updated: September 22, 20261. Who processes your data?
Mobulding is responsible for the data processing required by Rugby Rogues on the Web, Android and iOS. For questions or to exercise your rights, contact theo.paramelle@mobulding.com. This policy covers the game and its account service; payment and distribution services also apply their own policies.
2. Playing as a guest
You can play without creating an account. Your progress and preferences are stored on your device or in your browser. Your guest game is separate from your account game. Clearing site or app data removes this save. Connections to the site and technical services may produce security logs, including your IP address and browser characteristics.
3. Accounts and synced saves
If you create an account, Firebase Authentication manages your email address, account identifier, sign-in information and email verification. Firebase Authentication processes your password; it is not stored in plain text in the game database. If you use Google sign-in where offered, Google provides the information needed to authenticate you. The game stores your Firebase identifier, progress, team, collection, credits, purchases, actions needed to validate games and match history. This data lets you access your game on several devices, receive purchases and prevent balance inconsistencies. The legal basis is performance of the service you request. On iOS, Sign in with Apple lets you share your name and email or hide your email with Apple’s private relay. We do not use this sign-in to track your interactions for advertising.
4. Apple and Stripe purchases
Credit purchases offered through Stripe are processed by Stripe Checkout. We provide the pack references, amount, currency, Firebase identifier and an order reference to associate the payment with the correct account. Stripe collects information needed for payment, which may include billing details and your payment method. The game does not receive your full card number or security code. It stores transaction references and status, and the number of credits granted. Processing fulfils your purchase and handles support requests; processing required for accounting meets applicable legal obligations. Deleting your account is not a refund request. For an ongoing payment or refund request, contact theo.paramelle@mobulding.com with your payment reference. On iOS, credit packs are consumable in-app purchases processed by Apple. A pseudonymous account identifier links the transaction to your wallet. The server verifies the Apple-signed transaction before granting credits. Amounts, currencies, transaction references and status are kept in your history. Apple handles payment details. Sign back into the same Rugby Rogues account to access delivered credits. Request Apple refunds at reportaproblem.apple.com.
5. Security and device storage
Firebase App Check and, on the Web, reCAPTCHA Enterprise help limit automated use and fraudulent requests. They may process information about your device, browser, network and app integrity. Our legitimate interest is protecting the service and credit wallets. Session data and local saves enable sign-in and resuming games. On the website only, Google Analytics 4 measures visits and interactions after you agree. It uses cookies and processes browsing and device information. Declining leaves the game accessible and prevents the tag from loading. Your choice is saved for 180 days and can be changed or withdrawn using the website’s “Cookies” button. Analytics cookies are configured to last 180 days. Google Signals and advertising personalisation are disabled. Native apps include no audience analytics or advertising SDK. It does not request access to your contacts, microphone or precise location.
6. Recipients and location
Data is accessible to authorised Mobulding personnel and providers needed to operate the game: Google Firebase/Google Cloud for authentication, hosting, database and security; Stripe for payments. We do not sell your data. The Firestore database and game functions are configured in europe-west1, Belgium. This does not mean that all processing by Firebase Authentication, security, hosting or Stripe takes place exclusively within the European Union. Where their services involve international transfers, providers offer safeguards such as standard contractual clauses, under their data processing terms. Apple also provides sign-in and in-app purchases on iOS.
7. Retention periods
Your account, progress and wallet are retained while your account exists. Synced match history is limited to the last 100 results. Technical sync receipts are retained for the life of the account to prevent transaction replay. When you request deletion, account data is erased from the active database; a technical marker containing the account identifier is retained for 30 days to prevent delayed requests from recreating it, then removed by a daily job. Guest saves and copies on other devices remain there until cleared locally. Technical logs follow the retention periods of the services used; they are not backups of your game. Payment records needed for accounting, fraud prevention or disputes may be retained separately for periods required or permitted by applicable law — including ten years for accounting documents subject to French law. Stripe also applies its own retention obligations. After account deletion, a minimal Apple transaction marker (transaction reference, product and delivery date, without email or Firebase user ID) is retained to prevent the same purchase from granting credits again.
8. Deleting your account
In Rugby Rogues, open My account, then Delete my account. After confirmation and identity verification, your sign-in account, synced progress, credit wallet, unlocks, history and associated technical receipts are deleted. Deleted credits and progress cannot be recovered. The account save on the device you use is also erased; your separate guest game is retained. If a technical error interrupts the operation after it starts, the account is blocked and a daily job resumes deletion. You can also request deletion from the account deletion web page or by emailing theo.paramelle@mobulding.com, even without the app. Proportionate identity verification may be required. Never email your password.
9. Your rights
Under applicable law, you may request access to, correction or erasure of your data, restriction of processing and portability of data you have provided. You may object to processing based on our legitimate interest for reasons related to your particular situation. Email theo.paramelle@mobulding.com with your request and the relevant account address. We normally respond within one month; a justified extension may apply to complex requests. You may complain to the CNIL (www.cnil.fr) or your country's data protection authority.
10. Changes to this policy
We will update this policy if features or processing change. The update date appears at the top of the page. Any new use requiring consent will be subject to a separate request.