Privacy Policy

Last updated 29 September 2026

RUSHERS is a racing game, not a data business. It keeps the least it needs to run online races and rankings: an anonymous account, the name you race under, and your results. There is no tracking and no third-party analytics or advertising code in the app, and there are no ads today.

Contents

1. Who we are
2. What we collect
3. What we don't collect
4. How we use it
5. What other players see
6. Who else handles it
7. How long we keep it
8. Deleting your account
9. Your rights
10. Children
11. International users
12. Security
13. Changes to this policy
14. Contact

1. Who we are

RUSHERS (the game, on iOS and its web version) is made and run by Forge and Lantern LLC, a Colorado limited liability company. In this policy "we", "us" and "our" mean Forge and Lantern LLC. We decide how the data described here is used (in European terms, we are the data controller). You can reach us at support@forge-lantern.com.

2. What we collect

Some builds of the game run entirely on your device and send nothing. When the game has its online features switched on, it creates an anonymous account in the background the first time you open it. That account is what the items below belong to.

Account and sign-in

• A random account ID that our server creates. It is not your Apple ID, your device's hardware or advertising identifier, or anything else that identifies you outside the game.
• A random device ID and a secret code that the app makes on first launch and keeps on your device to sign you in. Our server stores the device ID and only a one-way hash of the secret, never the secret itself.
• Your Game Center player ID, if you use Game Center (the iOS app only): the ID Apple gives your Game Center player for our games, checked with Apple's signature, so your account can be found again if you reinstall the game. We do not receive your Apple ID or email. If you choose to add your Game Center friends, the app sends the Game Center player IDs of your Game Center friends once; we use them only to find which of them have also linked Game Center to the game, add those players to your Friends list, and do not store the other IDs. Your scores and achievements are sent to Apple's Game Center by the app, under Apple's privacy policy. Deleting your account deletes this link.
• When your account was created and when it last signed in.
• Which days you used the game online: one line per day with the date only (no time, place or activity), so we can count how many players come back after 1, 7 and 30 days. Kept for 90 days.

Your profile

• Your display name. A friendly generated name (like "Swift Otter") is picked for you. If you choose your own, it is checked by an automatic filter, and we record when you last changed it and whether moderation has ever replaced it.
• Your Rusher's look (the cosmetic items you have equipped) and the items you have unlocked, with where each came from (for example a Rusher Pass tier, a rank or an achievement) and when.

Gameplay

• Race results: where you placed, your finish time or how you did not finish, and your rating before and after each rated race.
• Maze Rating, rank, season and Rusher Pass progress, your daily and weekly challenges, your day streak, achievements, and lifetime stats such as races run, finishes, wins, distance, Runners passed and bumped, slingshots, time in Flow, wrong turns and path efficiency.
• Race history: a summary of your most recent races.
• Weekly Maze progress: for each Weekly Maze you enter, the spot where you left off, which parts of the maze you have explored and the path you walked, your time inside it, how many times you escaped and your best escape time. A new Weekly Maze opens every Monday, so this is kept per week's maze (last week's best times stay on the boards for a while). Only our game server records it, never your device.
• Daily Maze results: for your first Daily Maze race of each day (your counted run), your escape time or that you did not finish, and whether you kept going, took a detour or hit a dead end at each fork (the squares on the share card). They make the day's board, where other players see your display name, look and time. Only our game server records them, never your device. Kept for 90 days. When your counted run's race starts, the game server also notes which race it is and when it started, so a second race that day is practice even if the first one's result is still on its way; that note is deleted after 2 days.
• If you played before your first sign-in, the progress saved on your device is uploaded once, when your account is first created, so you keep it. The server checks it and does not accept a rating from the device.

Safety features

• Reports. When you report another player's name we store your account ID, their account ID, the reason you picked, the name as it was, when you reported it and what happened to the report.
• Blocks. When you block a player we store your account ID, their account ID and when you blocked them. Blocks are private: the other player is not told.
• Friends. Your account gets a random friend code, which you can share. When you add a friend's code we store your account ID, their account ID, how they were added and when. Adding someone puts them on your Friends board; they are not asked or told, and the board shows only what the public boards already show (display name, look, rating, records, the day's Daily Maze time and the Weekly Maze best time). A block, either way round, keeps you off each other's Friends lists.
• Parties. When you start or join a party we store your account ID, which party you are in, its random party code, who leads it, the mode the leader picked, when you joined, when your app last checked in and whether you were on a menu or racing. When you invite a friend to your party we store your account ID, theirs, the party and when; an invite expires after 10 minutes. You leave a party when you choose, when the leader removes you or when your app has not checked in for about a minute, and everything about a party is deleted when it ends or when either account is deleted. A block, either way round, keeps you out of each other's parties. A party changes nothing in the race: no teams, no shared rating, no extra rewards.
• Suspensions. If your account is suspended for breaking the Terms (for example cheating), we store your account ID, the reason, who made the decision, when, and when the suspension ends. A suspended account can still play offline and delete itself.
• Moderation and support log. When we act on an account by hand (replace a name, handle a report, suspend or restore an account, give back or remove an item, or correct a Gumballs balance), we record what was done, to which account ID, why, who did it and when.

Purchases, Gumballs and gifts

Everything you can buy in RUSHERS is cosmetic: it changes how your Rusher looks, never how it races.

• Purchases. When you buy something in the iPhone app, Apple takes the payment, and we never see your payment details. We store your account ID, which product you bought, the store's transaction number, when you bought it, when a subscription period ends, whether it was a test (sandbox) purchase, and whether it was refunded.
• Your Gumballs balance. We keep a list of every time Gumballs are added or spent (a purchase, a Rusher Pass reward, the Rusher Club's daily amount, a refund, or what you spent them on). Your balance is worked out from that list on our server; the app never decides it.
• Rusher Pass premium and Rusher Club. We record which season or period your premium Rusher Pass or Rusher Club membership covers, and whether it was refunded, so the right rewards are open to you.
• Gifts. When you buy an item for a friend we store your account ID, theirs, the item, the price and when. Your friend sees your display name with the gift. If you delete your account, the sender is removed from the gift and your friend keeps the item.

Ads (not switched on)

RUSHERS shows no ads today. If we ever switch ads on, they will show only between races, never to Rusher Club members, and the game will first ask for your year of birth once, with no answer filled in for you. Only an age range (under 13, 13 to 15, or 16 and over) is kept, on your device only; the year itself is never stored or sent to us. Players under 13 would see only contextual ads (ads not based on who you are), and the game would not ask them for permission to track. Before any advertising company's code is added to the app, this policy will be updated.

Usage statistics (analytics)

To see whether races are fun and working, the app sends a small number of events: app opened (with your device's language setting), race started, finished or not finished (with placement, number of players, time and maze type), results viewed, and "play again" pressed; and, once each, a few first steps (first opened, tutorial started and finished, first and third race, first Daily Maze, whether the game asked about reminders and your answer). Each batch carries a random code that changes every time you open the app, the platform (iOS or web) and the app version. It carries no account ID, device ID or IP address, so we cannot connect it to you. We collect it ourselves; no analytics company is involved.

Crash and error reports (diagnostics)

When something goes wrong in the app or on our servers, an error report is sent to our own server: where in the code it happened, the error message and the first few lines of its technical trace, the app version, the platform (iOS or web), which screen the app was on (for example the home screen or a race) and whether the device is a phone, tablet or computer. Numbers, codes and web addresses that could identify anyone are removed from the message before it is stored. Reports of the same error are counted together, per day. An error report carries no account ID, device ID or IP address and is never linked to your account. Error reports are deleted after 14 days. We collect them ourselves; no crash-reporting company is involved.

Technical data

• IP address. Like every internet service, our server sees the IP address your connection comes from. We use it for a moment to stop abuse (for example, too many new accounts from one place). We don't store the address: we store a keyed one-way code made from it, with a counter that is deleted within about a day.
• Game Center check. When you link Game Center, we keep a one-way code made from Apple's signature for an hour, so the same signature cannot be used twice.
• Server logs. Our hosting provider (see section 6) keeps short-lived technical logs of requests to our servers, which can include IP addresses and a rough network location derived from them, for security and troubleshooting. We don't log what you send us.

If you email us

We receive your email address and whatever you write, and use them only to answer you.

On your device

The game saves your settings, your progress, the sign-in code above and a copy of your block list on your device (in the app's local storage). This stays on the device. Deleting the app removes it; deleting your account removes it too.

Reminders (iPhone app, only if you turn them on): the game schedules local notifications on your device, at most 3 a week, when a new Daily Maze is ready and when a streak is about to end. They are planned on the device from the hours you usually play, which it remembers there. No push token is created and nothing about your reminders is sent to us. Turn them off in Settings → Reminders or in the iPhone's settings.

3. What we don't collect

• No real name, email address or phone number (unless you email us), no contacts, photos, microphone or camera.
• No location from your device: precise or approximate.
• No advertising identifier, no tracking across other apps or websites, and no ads today.
• No third-party advertising, analytics, attribution or social SDKs in the app.
• No in-game chat or messages.
• No payment information: Apple handles payments, and we only learn what was bought, when, and whether it was refunded.

We don't sell or rent personal information, and we don't share it for advertising.

4. How we use it

We don't use your data for automated decisions that have legal or similarly significant effects on you. The Maze Rating is calculated automatically from race placements; it affects only your rank in the game.

5. What other players see

Other players can see your display name, your Rusher's look and title, your rank and rating, and the stats shown on the leaderboards (for example races run, finishes, wins, time played or your best Weekly Maze escape time). Their app also receives your random account ID with leaderboard rows so it can tell players apart; it is not linked to who you are. A player who blocks you sees a neutral label instead of your name.

6. Who else handles it

• Cloudflare, Inc. hosts our servers and database (Cloudflare Workers and D1) and the pages you are reading. It processes the data above on our behalf, under its data processing terms, and does not use it for its own purposes.
• RevenueCat, Inc. checks App Store purchases for us and tells our server what was bought or refunded. The iPhone app includes RevenueCat's purchases library: when you open the Shop, buy something or restore purchases, it sends RevenueCat your random account ID and the App Store transactions for it, with technical details such as the app and iOS version and your App Store country. It does not use your advertising identifier and is not used for tracking or advertising. RevenueCat processes this on our behalf.
• Apple distributes the app through the App Store and takes payment for purchases. What Apple collects about your App Store use is covered by Apple's own privacy policy, not this one.

We may disclose information if the law requires it, or to protect the safety of players or the integrity of the game. If the game is ever transferred to someone else, this policy (or one at least as protective) will continue to apply to your data, and we will tell you in the app.

7. How long we keep it

We don't currently delete accounts for inactivity. If that changes, this policy will say so before it happens.

8. Deleting your account

In the app: open Settings → Account → Delete account and hold the button to confirm. This deletes, straight away and permanently: your account, sign-in details (including the Game Center link), display name, look, unlocks and where they came from, rating, progress, streak and challenges, stats, race history, Weekly Maze progress, Daily Maze results, the days you played, your purchase records, your Gumballs and their history, your premium and Club periods, gifts you received (gifts you sent stay with your friends, without your name), reports about your name, any suspension and the moderation log about your account, your block list and your entry on other players' block lists, your friend code, your friends list and your entry on other players' friends lists. The game then forgets the account on your device too, and starts you fresh.

What stays, without anything that identifies you: race results that other players' ratings were calculated from, reports you filed (with your ID removed), and usage statistics, which never had your ID in the first place.

By email: if you can't use the app, write to support@forge-lantern.com. Because accounts are anonymous, we will need enough detail to find yours (for example your display name and roughly when you last played), and we may ask questions to make sure the account is really yours before deleting it. If you have deleted the app, the sign-in code that tied the account to you is gone as well, and nobody can sign in to that account again.

9. Your rights

Depending on where you live (for example in the European Economic Area, the United Kingdom, or US states such as California), you may have the right to access the personal data we hold about you, get a copy of it, have it corrected or deleted, object to or restrict how we use it, and complain to your data protection authority. Many of these you can do yourself in the app (change your name, unblock players, delete your account). For anything else, email support@forge-lantern.com. We will answer within one month, and we won't treat you differently for using your rights. We don't sell or share personal information for cross-context advertising.

10. Children

RUSHERS is not directed at children under 13, and we don't knowingly collect personal information from children under 13. The game doesn't ask for any contact details, asks for a birth year only if ads are ever switched on (and then keeps only an age range, on the device), gives everyone a generated name by default, filters chosen names, and has no chat. If you are a parent or guardian and believe your child has an account, you can delete it in the app (Settings → Account → Delete account) or email us and we will delete it.

11. International users

We and our hosting provider may process your data in the United States and in other countries where Cloudflare operates, which may have different data protection rules from yours. Where the law requires it, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses in Cloudflare's data processing terms.

12. Security

All traffic between the app and our servers is encrypted (HTTPS). Sign-in secrets are stored only as one-way hashes, IP addresses are not stored, and only the developer can access the database. No system is perfectly secure, but we keep what we hold small so there is less to protect.

13. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is significant (for example, new kinds of data or a new purpose), we will also tell you in the app before it takes effect.

14. Contact

Questions, requests or complaints about privacy: support@forge-lantern.com (Forge and Lantern LLC).