Privacy Policy
Reflex Arena is built to need as little about you as possible. There is no sign-up with email or password, no ads, and no third-party analytics or tracking SDKs in the app or on this website.
Your account
When you first go online, the app creates an anonymous guest account on our server. It is identified by a random ID. We never ask for your email, phone number, real name, contacts, location or photos.
What we store
| Data | Why |
|---|---|
| Display name (3–16 letters, digits or _; random if you don't choose one) and your chosen theme/skin | Shown to other players on leaderboards and in battles. You can change it any time. |
| Rank points, belt and placement progress | Ranked matchmaking and belt promotions. |
| Game runs: score, timing stats and the input log (tap times and which bubble was tapped) | Our server replays every run to verify the score and keep leaderboards fair. Runs that look automated are excluded from boards and ranking. |
| Battle history: opponent, result, rating change | Battle history, challenges and rating. |
| Sign-in tokens | Keep you signed in. Refresh tokens are stored only as a cryptographic hash and expire after 60 days. |
IP addresses and logs
Your IP address is used in memory to rate-limit requests (for example, limiting how many guest accounts can be created per hour). It is not stored in our database. Our application logs record only the request method, path and status code. The web server in front of the game API keeps standard access logs (which include IP address and user agent) for up to 14 days for security and troubleshooting, then deletes them. This website itself does not keep access logs.
On your device
The app stores your sign-in tokens and settings (such as sound and selected skin) locally on your device. If you share a result, it goes through your phone's standard share sheet to the app you pick; we don't see what you share or with whom.
What we don't do
- No advertising and no ad identifiers.
- No third-party analytics, crash-reporting or tracking services.
- We don't sell or rent data, and we don't share it with third parties.
- This website uses no cookies and loads no third-party resources (fonts are self-hosted).
Where data lives
All game data is stored on our own server, operated by us, not on third-party cloud or analytics platforms. Nightly database backups are kept on the same server for 14 days.
Deleting your account
You can delete your account at any time from the app's settings. This immediately and permanently deletes your account, your game runs and your sign-in tokens. Past battles stay in your opponents' history but are no longer linked to you. Copies in backups are overwritten within 14 days. Because accounts are anonymous, uninstalling the app without deleting first means we can't link the account to you anymore; contact us with your display name if you need help.
Children
Reflex Arena doesn't ask for age or any personal details. Please don't put personal information (like a real full name) in your display name. If you believe a child's personal information ended up in a display name, contact us and we'll remove it.
Your rights
You can access, correct (change your display name) or delete your data in the app. For any other privacy request or question, email us at CONTACT_EMAIL.
Changes
If this policy changes, we'll update the date above and, for significant changes, tell you in the app.