Privacy Policy

Developer and data controller: Konstantin Golovko, operating the Reality is not enough brand in Romania · Android package: com.realityisnotenough.rinearena · Privacy contact: contact@rine.online

This Policy explains how personal data is handled in the Game. It does not replace the in-game AR safety notice, permission prompts, store disclosures, or Terms of Use.

Privacy at a glance

• Audience — General-audience service for users aged 13 or older, or the higher minimum age required by local law.
• Core data — Account details, player identifiers, progress, match information, device and network data, purchase entitlements, support messages, and limited age-eligibility information.
• AR camera — Used to recognize image targets or surfaces and place game content in the real world. We do not intentionally record or store ordinary camera video through our own backend.
• No ads or chat — The Game does not currently show third-party advertising and does not provide text or voice chat.
• No sale of data — We do not sell personal data or share it for cross-context behavioural advertising.
• Deletion — Users can request deletion of their account and associated personal data by contacting contact@rine.online.

1. Who we are and what this Policy covers

This Privacy Policy explains how Konstantin Golovko, an independent developer operating the Reality is not enough brand in Romania (“RINE”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal data in connection with the mobile game Reality is not enough, also referred to as RINE Arena (the “Game” or “Service”).

This Policy applies to the Android application distributed through Google Play, including package com.realityisnotenough.rinearena, and to an iOS or iPadOS version distributed through the Apple App Store where available. It also applies to account-management pages, support requests, and communications that directly relate to the Game.

This Policy does not govern independent third-party websites or services that you choose to access outside the Game. Those services apply their own privacy terms.

2. General-audience model and minimum age

The Game is designed for a general audience and is not directed to children under 13. A low content rating, such as PEGI 3, describes the type of content in the Game; it does not change the minimum age for creating a player account or using online services.

You must be at least 13 years old to create or use a RINE player account. If the law where you live requires a higher age to agree to online services or relevant data processing on your own, that higher age applies. We do not operate a child-account or parental-consent registration programme for users below the applicable minimum age.

Users who do not meet the applicable minimum age may not create an account or use account-based online functions such as cloud save, online multiplayer, and purchases. Any functionality that remains available to such users must be local or offline and must not require personal data beyond what is strictly necessary for device operation.

A parent or guardian who believes that an underage user has provided personal data may contact us at contact@rine.online. When we verify that an account belongs to a user below the applicable minimum age, we will restrict or close the account and delete associated personal data, subject to limited legal or security retention requirements.

3. Age eligibility and app-store age signals

In jurisdictions where an app store provides legally required age or parental-approval signals, the Game may receive an age category, age-verification status, supervision status, parental-approval status, or a limited installation identifier. On Android, this may occur through the Google Play Age Signals API.

We use app-store age signals only to apply age restrictions, determine whether account or purchase access is permitted, comply with age-assurance laws, respond to approval changes, and apply safety-related settings. We do not use age-signal information for advertising, marketing, user profiling, unrelated personalization, or analytics.

We do not receive the identity document, payment-card information, facial image, or other underlying material that an app store may use to verify a person's age. Where an age signal is available and legally applicable, we generally rely on that signal rather than asking for the same information again.

Where app-store signals are unavailable or do not provide a usable result, the Game may request a neutral age declaration or age range to determine eligibility. We seek to avoid retaining a full date of birth. We may retain a minimal eligibility result, such as whether the user meets the minimum age, only for as long as needed to enforce the age rule and comply with law.

For supervised users aged 13 to 17 in a jurisdiction that requires app-store parental approval, features or purchases may remain unavailable while approval is pending or after approval is denied or revoked. Raw age-signal data is not retained after verification unless a limited identifier must temporarily be retained to process an approval-revocation workflow.

4. Personal data we collect or process

• Account and authentication — Email address where email login is used; username or display name; player/account ID; session or authentication token; account status; creation date. Passwords are handled by authentication systems and are not intended to be visible to us in plain text.
• Gameplay and cloud save — Progress, characters, cosmetics, unlocked content, settings, preferences, scores, statistics, match history, win/loss results, and cloud-save records.
• Multiplayer and network — Matchmaking data; room or session identifiers; gameplay synchronization events; connection status; latency; IP address; network and security logs.
• Device and technical — Device model; operating-system and app version; language and region; installation or service identifiers; crash, diagnostic, performance, and error information.
• AR and camera — Camera permission status; image-target, marker, surface, or environmental tracking information needed to position game content; AR-related diagnostics.
• Purchases — Product ID; purchase or transaction token; transaction status; entitlement status; refund or cancellation status. We do not receive your full card or bank-account details.
• Age eligibility — Age category or eligibility result; verification, supervision, or approval status; limited installation identifier where required for approval changes.
• Support and communications — Email address; name, username, or player ID you provide; message content; screenshots, files, and technical information you choose to send.

5. Information we do not intentionally collect

• Precise GPS location or continuous location history.
• Contacts or address-book data.
• Microphone recordings or voice communications.
• Photos or videos from your photo library, unless you voluntarily attach them to a support request.
• Facial-recognition templates, biometric identifiers, or government identification documents.
• Health or medical information.
• Full payment-card or bank-account details.
• Text-chat or voice-chat content, because the Game currently does not provide in-game chat.
• Advertising identifiers for behavioural advertising, because the Game currently does not show third-party advertising.

6. Camera, augmented reality, and physical safety

The Game requests camera access because camera input is required for augmented reality. The camera may be used to recognize printed cards, image targets, markers, surfaces, or other visual anchors and to align virtual objects with the physical environment.

During ordinary AR gameplay, we do not intentionally record, save, or transmit camera photos or continuous video through our own backend. The camera feed is used while the relevant AR feature is active. AR technology providers may process limited technical information as described in Section 11. The Game does not use the camera for facial recognition, biometric identification, hidden recording, or identity verification.

You can deny or later withdraw camera permission through your device settings. Without camera permission, AR features will not function, although other non-AR functions may remain available where supported.

AR safety notice — PLAY SAFELY: Use augmented reality only in a clear, stable, and safe area. Remain aware of people, children, pets, furniture, glass, stairs, traffic, roads, water, uneven ground, and other hazards around you. Do not play while driving, cycling, running, crossing a road, or moving through a hazardous or restricted area. Hold the device securely. Stop playing immediately if you feel dizzy, disoriented, nauseated, fatigued, or otherwise uncomfortable. Players aged 13 to 17 should use AR with appropriate adult awareness or supervision when circumstances require it. You are responsible for choosing a safe play area and for following local rules, signs, and instructions.

7. Online multiplayer and information visible to other players

Online matches require gameplay and connection information to be transmitted between your device, multiplayer services, and the devices or sessions of other players. This can include room identifiers, gameplay inputs, timing, character selection, match events, scores, and results.

Other players may see your username or display name, selected character or cosmetic, match actions, score, and match result. They do not receive your email address, password, full IP address, payment details, or support communications from us.

The Game does not currently include text chat, voice chat, direct messaging, image sharing, or public user-generated content. If any such feature is introduced, this Policy and the relevant store disclosures will be updated before or when the feature becomes available.

8. In-app purchases

The Game may offer fixed digital items such as character skins, cosmetics, or other clearly identified content. The Game does not currently offer loot boxes, paid random rewards, or real-money gambling.

Payments are processed by Google Play or Apple. We do not directly collect or store your full payment-card or bank-account details. We may receive product identifiers, transaction or purchase tokens, status information, and entitlement records so that we can verify a purchase, deliver the item, restore eligible purchases, process a refund or revocation, prevent fraud, and comply with accounting or legal obligations.

The app store's own terms, billing rules, and privacy policy also apply to the payment transaction. Refunds and billing disputes are generally handled through the store through which the purchase was made.

9. How we use data and our legal bases

• Provide the Game, accounts, cloud save, and multiplayer — Account, gameplay, cloud-save, multiplayer, device, and network data. Legal basis: performance of a contract.
• Operate AR features — Camera permission, image-target or surface tracking, AR diagnostics. Legal basis: performance of a contract; device permission and consent where required by law.
• Process purchases and entitlements — Product, transaction, token, refund, and entitlement information. Legal basis: performance of a contract; legal obligations; legitimate interests in fraud prevention.
• Verify age eligibility and approvals — Age category, eligibility result, verification, supervision, or approval status. Legal basis: legal obligation where applicable; legitimate interests in enforcing age rules and protecting users.
• Security, abuse prevention, and troubleshooting — IP address, authentication events, device and app information, errors, diagnostics, and logs. Legal basis: legitimate interests in security, service integrity, and reliability.
• Customer support — Contact information, message content, attachments, account and technical details. Legal basis: performance of a contract; legitimate interests in responding to users and resolving issues.
• Legal, tax, and compliance records — Purchase records, requests, consent or eligibility records where required. Legal basis: legal obligation; establishment, exercise, or defence of legal claims.

Where we rely on legitimate interests, we consider the necessity of the processing and balance those interests against the user's rights and reasonable expectations. Where processing is based on consent, you may withdraw consent for future processing, although withdrawal does not make earlier lawful processing unlawful.

10. Permissions

• Camera — Required for AR scanning and placement. You can withdraw permission in device settings, but AR features will stop working.
• Internet and network access — Required for account authentication, cloud save, online multiplayer, purchase verification, updates, security, and support-related functions.
• Notifications — Optional. Require platform permission. You can turn them off in device settings. Notifications will not be used to pressure users into excessive play or purchases.

The production build should request only permissions required for active features. If a new permission or materially different use is introduced, the relevant disclosures will be updated.

11. Service providers and data sharing

We use service providers to operate the Game. They process data under their own legal obligations and, where they act as processors for us, under contractual or equivalent safeguards.

• Unity Technologies — Player authentication, Cloud Save, Cloud Code, and related operational services. May process player/account IDs, authentication data, gameplay and cloud-save data, device and technical information.
• Photon / Exit Games — Online multiplayer networking, rooms, session synchronization. May process session and room IDs, gameplay events, IP and network information, connection diagnostics.
• Vuforia / PTC — Image-target recognition and augmented-reality functionality. May process AR target or tracking data and limited technical telemetry.
• Google — Google Play distribution, billing, platform services, and Play Age Signals where applicable. May process store account and purchase data; purchase status and limited age signals provided to the Game.
• Apple — App Store distribution, In-App Purchase, and platform services where the iOS version is available. May process store account and purchase data; transaction and entitlement status provided to the Game.
• Twilio SendGrid and email providers — Transactional or support email. May process email address, message delivery data, and limited technical logs.
• Website, hosting, and infrastructure providers — Hosting rine.online, service infrastructure, backups, and security. May process connection data, website requests, account or support information.

We may also disclose data when required by law, to protect users or the Game, to investigate fraud or abuse, to professional advisers bound by confidentiality, or in connection with a business transaction, subject to appropriate safeguards.

We do not sell personal data. We do not share personal data with third-party advertising networks for behavioural advertising, and we do not use Play Age Signals for advertising, marketing, profiling, or analytics.

12. International transfers

We are based in Romania. Some service providers may process data in the European Economic Area, the United States, or other countries. Where required, international transfers are supported by an adequacy decision, Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum or equivalent mechanism, or another lawful safeguard.

13. Data retention

• Account profile and authentication records — While the account is active. After deletion, removed from active systems within 30 days unless a limited record must be retained for security, fraud prevention, or law.
• Cloud save, progress, cosmetics, and gameplay profile — While the account is active. Scheduled for deletion with the account; residual backup copies are normally overwritten within 90 days.
• Match history and multiplayer operational logs — For the account lifetime where shown to the player; short-term technical or security logs generally up to 90 days.
• Crash, error, and diagnostic information — Generally up to 180 days, unless a longer period is necessary to investigate a persistent technical or security issue.
• Age signals and eligibility information — Raw age-signal information is used for verification and not retained afterward. A minimal eligibility or approval state is kept only as long as necessary.
• Purchase and entitlement records — For as long as needed to provide entitlements, handle refunds or fraud, and satisfy applicable tax, accounting, and legal requirements.
• Support communications — Generally up to 24 months after the request is resolved, or longer where necessary for an ongoing dispute, security matter, or legal obligation.
• Backups — Deleted data may remain in secured, access-restricted backups until the normal backup cycle overwrites it, generally within 90 days.

14. Account deletion and data deletion

You can request deletion of your RINE account and associated personal data by contacting contact@rine.online. Include the username, player ID, or email address associated with the account so that we can locate it. Do not send your password.

We may ask for reasonable information to verify that you control the account. Deleting the app from your device does not, by itself, delete your online account or cloud data.

Account deletion normally removes or de-identifies the account profile, cloud save, game progress, match history linked to the account, and other account-based data from active systems within 30 days. Deletion permanently removes access to account-based progress, unlocked content, multiplayer profile, and cloud save. Purchases may not be refundable merely because the account is deleted.

We may retain limited information when required for tax, accounting, fraud prevention, security, dispute resolution, or legal compliance. Residual copies may remain in secured backups until overwritten through the ordinary backup cycle, generally within 90 days.

15. Your privacy rights

EEA and United Kingdom — Depending on the circumstances, you may have the right to request access to personal data, correction, deletion, restriction, portability, or objection to processing. You may also withdraw consent where processing relies on consent and lodge a complaint with a supervisory authority.

Other jurisdictions — Depending on where you live, local law may provide additional rights, including access, correction, deletion, portability, appeal, or the right to opt out of certain sale, sharing, profiling, or targeted advertising. We do not sell personal data or use it for cross-context behavioural advertising.

How to exercise rights — Contact contact@rine.online and provide enough information to identify the account or data concerned. We may verify your identity and authority before acting. We will respond within the timeframe required by applicable law. You will not be discriminated against for exercising a privacy right.

16. Children and underage users

The Game is not directed to children under 13 and does not knowingly offer them player accounts or online services. We do not knowingly collect personal data from a user below the applicable minimum age, except limited information strictly necessary to determine age eligibility, comply with law, or prevent an underage account from being created.

Where app-store age-assurance rules apply, we rely in good faith on the age category and approval information provided by the store and use it only for legally permitted age, compliance, and safety purposes. A content rating does not represent consent to data processing and does not override this section.

Parents or guardians can report a suspected underage account to contact@rine.online. After appropriate verification, we will restrict or close the account and delete associated data, subject to the limited exceptions described in this Policy.

17. Security and incident response

We use reasonable technical and organizational measures designed to protect data against unauthorized access, loss, misuse, alteration, or disclosure. Depending on the system, measures may include encrypted transmission, access controls, authentication safeguards, separation of environments, restricted administrative access, logging, backups, provider security controls, and review of software dependencies.

No transmission or storage method is completely secure. If a personal-data incident occurs, we will investigate it, limit harm, preserve appropriate records, and notify supervisory authorities or affected users when required by law.

Please report suspected security issues to contact@rine.online. Do not publicly disclose account credentials, access tokens, or other users' personal data.

18. Automated decisions and profiling

The Game may automatically allow, restrict, or delay access to age-restricted features based on an app-store age category, parental-approval status, or a neutral age declaration. This is used to enforce minimum-age and legal requirements only — not to evaluate creditworthiness, employment, insurance, or similar matters.

We do not use age signals for behavioural profiling, advertising, marketing, or unrelated analytics. If you believe an eligibility result is incorrect, contact support. Where the result comes from an app store, you may also need to update or resolve the status through that store.

19. External links and third-party policies

The Game or website may link to app stores, provider websites, social pages, or other external services. Once you leave a RINE-controlled service, the third party's terms and privacy policy apply. We are not responsible for independent third-party practices.

Provider privacy information is available from the relevant provider, including Unity, Photon/Exit Games, PTC/Vuforia, Google, Apple, and Twilio. Their policies may change independently of this Policy.

20. Changes to this Policy

We may update this Policy to reflect changes in the Game, service providers, technology, legal requirements, or business operations. The updated version will show a new “Last updated” date and will be published in the Game or on rine.online.

For material changes, we will provide additional notice when required, such as an in-app message, store notice, email, or renewed approval workflow. We will not treat continued use as a substitute for consent where applicable law requires consent to a new processing activity.

21. Contact and complaints

Data controller: Konstantin Golovko, independent developer operating the Reality is not enough brand in Romania.

Privacy, account deletion, support, and security contact: contact@rine.online

Website: https://rine.online

If you are in the EEA, you may lodge a complaint with the data-protection authority where you live or work. In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP).