This page is maintained by Jarrell Liner, trading as Liner Ventures ("we", "us"), to explain how Folder Rush ("the app") handles information. Jarrell Liner is the data controller for the personal data described below. By playing Folder Rush or creating an account, you agree to the practices described here.
Information we collect
- Account info — when you sign in with email, Google, or Apple, we store your email address, a username you choose, and a unique account ID.
- Gameplay data — level progress, coins, XP, streaks, achievements, purchased cosmetics, and settings, so we can sync them across your devices.
- Duel & social data — duel results and referral links you create or accept.
- Support messages — anything you send through Contact Us or bug reports.
- Device & usage — anonymous page views, approximate location (country/city derived from IP), device type, and in-app events used to improve the game.
- Purchase data — when you buy a coin pack, we store the transaction reference, the pack purchased, the coin amount granted, and its status (granted or refunded). Card and billing details are collected and processed by Paddle, not by us.
How we use it
- Run the game, sync your progress, and match you with duel opponents.
- Maintain leaderboards, streaks, quests, and anti-cheat integrity.
- Fulfil coin pack purchases, credit or reverse coins, and keep a purchase record for support and accounting.
- Send you occasional in-app announcements (e.g. new levels, streak reminders) if you opt in to notifications.
- Diagnose bugs and improve performance.
We do not sell your personal information.
Legal basis for processing
- Contract — creating and running your account, syncing progress, duels, and fulfilling coin pack purchases.
- Legitimate interests — security, anti-cheat, fraud prevention, aggregate analytics, and improving the game.
- Consent — push notifications and any optional marketing messages; you can withdraw consent at any time.
- Legal obligation — retaining transaction records and responding to lawful requests.
Third-party services & data sharing
Folder Rush shares data with the following categories of recipients:
- Paddle.com (Merchant of Record) — processes all purchases on our behalf, including payment details, billing address, email, tax/VAT determination, invoicing, subscription management, refunds, and chargebacks. Paddle acts as the seller of record for your order and handles customer service for payments. See the Paddle Privacy Notice.
- Lovable Cloud (Supabase) — authentication, database, and realtime multiplayer.
- Google / Apple Sign-In — optional identity providers.
- Google Gemini (via Lovable AI Gateway) — automated triage of bug reports you submit.
- Cloudflare — hosting and CDN; provides the country/city geolocation used in aggregate analytics.
- Professional advisers and authorities — legal or accounting advisers, and authorities where required by law.
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, row-level access controls on our database, and restricted administrative access.
Cookies & local storage
We use your browser's local storage to keep you signed in and to remember gameplay preferences (theme, sound, tutorial state). We do not use third-party advertising cookies. In-app "ad" placements are house branding for partner brands and do not track you.
Children
Folder Rush is designed for a general audience aged 13+. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
Your choices
- Play as a guest without an account — no personal data is stored on our servers.
- Sign out at any time from Settings.
- Request account deletion or a copy of your data by emailing us at the address below.
- Disable push notifications from your device settings.
Data retention
We keep account and gameplay data for as long as your account is active. When you request deletion, we remove your personal data within 30 days, except purchase records we must retain for tax and accounting purposes (typically up to 7 years). Aggregate, non-identifying analytics may be retained and data no longer needed is deleted or anonymised.
Changes
If we make material changes to this policy, we'll update the date above and, when appropriate, notify you in the app.