Last updated: 3 September 2026
Round Trip has no accounts and no sign-in. We never ask for your name, your email address, or your phone number, and we cannot tell who you are. When you first open the game your device is issued a random identifier so that your puzzle progress can be saved; that identifier is the only thing linking you to the data on our server. The game shows ads through Google AdMob, and Google collects its own data when it does — that part is described in section 6.
Round Trip (the “game”) is published by Exscaria, an independent game developer based in Belgium, who is the data controller for the information described here. You can reach us at roundtripgame@gmail.com about anything in this policy.
The game has no registration, no login, and no way to link your progress to an email address, a phone number, or a social or Google account. The first time the game connects, our server generates a random player identifier and a matching secret token and sends them to your device, which stores them. The server keeps only a SHA-256 hash of that token, never the token itself.
This identifier is not a user account and is not tied to your identity. It is also not recoverable: if you uninstall the game or clear its data, the identifier is gone from your device and your progress cannot be restored or transferred to a new device.
This information stays on your phone. We cannot read it, and removing the app removes all of it.
All of the following is keyed to the random player identifier and nothing else.
| What | Why |
|---|---|
| Player identifier, the hash of your access token, the time the identifier was created, and the time it was last seen | To recognise your device on reconnect and to keep your progress attached to it |
| The time you last collected a rewarded ad | To enforce the limit of one rewarded ad every ten minutes, whichever reward you spend it on |
| Records of rewarded ads: Google's transaction identifier for the ad, what the reward was for, the session identifier, and timestamps. Kept for one week. | To deliver the reward you earned and prevent the same ad being redeemed twice |
| Short-lived reward sessions (about fifteen minutes) | So a reward is not lost if the app closes between watching the ad and receiving what it paid for |
Your puzzle progress is not on our server. Which puzzles you have solved, how many attempts you took, your streak and any hints you have revealed are held on your device only. The server judges today's puzzle when you submit it and keeps no record of the result. Uninstalling the app therefore erases all of it.
The game contains no analytics SDK and no crash-reporting SDK. Google Play itself may collect installation, crash, and performance data about apps distributed through it, under Google's own policies and independently of us.
The game shows ads supplied by Google AdMob: a banner, and optional rewarded ads that you choose to watch in exchange for a hint, access to a past day's puzzle, or early access to tomorrow's puzzle. Rewarded ads are always optional and the game is fully playable without watching any.
When an ad is requested or shown, Google — not us — receives and processes information including your device's advertising identifier, IP address, device and operating-system details, and interactions with the ad. Google uses this to select, deliver, measure, and (where permitted) personalise ads, and to detect invalid traffic. This processing is governed by Google's Privacy Policy and by how Google uses information from apps that use its services. We do not receive any of it, and we cannot see who you are through it.
When a rewarded ad completes, Google notifies our server directly so the reward can be granted without trusting the app. That notification carries Google's identifier for the ad impression and an opaque reference that we generated for that specific reward. It contains no personal information.
In the European Economic Area, the United Kingdom, and Switzerland, the game uses Google's User Messaging Platform to ask for your consent before personalised ads are shown, as required by law. Your choice is stored on your device by that SDK. Where the provider makes them available, you can reopen and change these choices at any time from Settings → Privacy options inside the game. Declining personalised ads does not stop the game working; you will still see ads, but non-personalised ones.
When your device connects, our server sees your IP address, as any internet service does. We use it in memory only, to limit how often a single connection can create new identifiers or request puzzles — a protection against automated abuse. It is discarded as those short counting windows expire and is never written into the game database or linked to your player identifier.
Our service logs record the type of request, the path, and the response status, without the IP address. Our hosting provider, Render, separately processes connection information including IP addresses to deliver and protect the service, under its own terms.
Our website carries a second daily puzzle you can play in a browser without installing anything. It is a different puzzle from the one in the app, and it works differently from everything described above: it has no account, and it sends us nothing.
Your browser fetches the day's puzzle and the game's rules from our server as two ordinary page requests, and that is the end of the conversation. Your shots, your placements, your streak and whether you solved it are worked out by your own browser and kept in that browser's local storage, on your device. Nothing is submitted, so there is no record on our server that you played, no identifier is issued to you, and none of section 4 applies. Clearing your browser's site data for our website erases all of it.
The page loads no fonts, no analytics, no advertising and no code from anyone else — every request it makes goes to our own server. It sets no cookies. As with any web request, our server and our hosting provider see your IP address in the course of answering, exactly as described in section 7.
On your device: uninstalling the game, or clearing its data from Android's app settings, permanently deletes everything listed in section 3, including the identifier and token. Once that is gone, the progress on our server can no longer be reached by anyone, including us.
On our server: open Settings → Delete my data in the game. After you confirm, the app tells our server to erase everything described in section 4 — your player identifier, your puzzle progress, and your reward records — and then clears the copy on your device. Nothing is kept, and no account remains behind, because there was never an account to begin with.
This is deliberately the only route we offer, and the reason is section 2: we have no name, email, or account to look you up by. An emailed request cannot be matched to a player, but the game itself is already holding the credential that identifies your data, so it can ask on your behalf. If the deletion fails — you are offline, or our service is down — the app will say so rather than claim a deletion that did not happen.
If you are in the EEA or the UK you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. You can exercise these by writing to roundtripgame@gmail.com.
We must be honest about a limit here: the data we hold is not linked to your name, email, or any account, so an emailed request gives us no way to tell which records are yours. Where we cannot identify you, data-protection law does not require us to collect more information about you purely in order to answer a request. This is why deletion is offered inside the game instead — the app holds the credential that identifies your data, so it can act for you without either of us having to learn who you are.
You also have the right to complain to your local data protection authority.
Round Trip is not directed to children. It is not designed for, marketed to, or intended for use by children under 16, it is not part of Google Play's Designed for Families programme, and its Play Store target audience is set to 16 and over. We do not knowingly collect data from children. If you believe a child has used the game and you would like the associated data removed, please contact us at roundtripgame@gmail.com.
All communication between the game and our server uses encrypted HTTPS and secure WebSocket connections; release builds refuse unencrypted connections. Your access token is stored on our server only as a SHA-256 hash, so the stored value cannot be used to impersonate you. Rewards are confirmed by Google directly to our server using a cryptographic signature that we verify, rather than being trusted from the app.
No system is perfectly secure, but the data at stake here is deliberately minimal: there is no personal information in it to lose.
Our server runs on Render in Frankfurt, Germany, so the puzzle progress described in section 4 stays within the European Union. Google processes advertising data on its own global infrastructure, which may include transfers outside the EEA and the UK under the safeguards described in Google's privacy policy.
If this policy changes, the new version will be published at this address and the “last updated” date at the top will change. Material changes affecting how we handle your data will be announced in the game before they take effect.
Questions, deletion requests, or privacy concerns: roundtripgame@gmail.com.