Rebus Master
Rebus Master
Last updated: July 26, 2026 Effective: May 6, 2026
Rebus Master ("REBUS", "we", "us") is a 2D mobile word puzzle game published by Favo Games. This Privacy Policy explains what data we collect, why we collect it, and how you can control it.
| Category | Data | Source | Purpose | Retention |
|---|---|---|---|---|
| Account | Anonymous user ID, optional email, display name, and profile photo (when you sign in with Google/Apple/Facebook) | Firebase Auth | Save your progress across devices | Until account deletion |
| Game progress | Level completions, coin balance, cosmetic equips, team membership, achievement unlocks | Firestore | Sync your game state | Until account deletion |
| Purchases | Purchase receipt, transaction ID (no card details) | RevenueCat | Process in-app purchases, fraud prevention | 7 years (tax law) |
| Analytics | Screen views, button clicks, level results, ad impressions, crash logs, device model, OS version | Firebase Analytics, PostHog, Crashlytics, Performance | Understand how players use the app, fix bugs | 26 months (Firebase default) |
| Advertising | Advertising ID (with your consent), SKAdNetwork attribution (iOS) | AdMob, Meta, ad networks via SKAdNetwork | Show ads (only with consent), measure ad performance | 90 days |
| Push | Firebase Cloud Messaging token | FCM | Send notifications you've opted in to | Until you opt out |
| User content | Team name and description you write, and messages you send in team chat | Firestore | Run team features, moderate content and keep players safe | Until account deletion |
| Profile visits | Which player profiles you open, and who opens yours (display name, avatar, level, time) | Firestore | Show a public view count and a private "recent visitors" list | 180 days, or until account deletion |
We do not collect: contacts, photos from your device, precise/GPS location, microphone audio, or sensitive personal info. We derive and store only an approximate country (a 2-letter code) from your IP address — never your street-level or GPS location — to show region-appropriate content and meet regional legal requirements.
Public profile. To power leaderboards, teams, and friend search, your display name, avatar, approximate country, and gameplay stats are visible to other players. We also publish a coarse activity signal: the hour in which you last played, rounded down to the hour — never an exact timestamp — so other players may see an "Active today" or "Active this week" note next to your name. Nothing negative is ever shown: if you have not played recently, no note appears at all. You can switch this off at any time in Settings → Privacy & Data → Show my activity; while it is off, no activity signal is published for you. Cached leaderboard snapshots may take up to 30 minutes to reflect the change. Your email address and anonymous user ID are never shown publicly.
Profile visits. When you open another player's profile, we record the visit. Two different things happen, with two different levels of visibility: the total number of views on that profile goes up and is public — anyone can see it — while your display name, avatar, level and the time of your visit are added to a "recent visitors" list that only that player can see. The list of who visited a profile is never public and is never shared with anyone else; you see the same list for your own profile. Repeat visits from the same player are counted at most once every 6 hours. Visitor entries are deleted after 180 days, and when a player deletes their account their entries are removed from everyone else's lists as part of the same deletion process described below (a 30-day grace period, then permanent removal). If you would rather look at profiles without leaving a trace, turn on Settings → Privacy & Data → Browse privately; while it is on, your visits are not recorded at all — no name in anyone's list and no increase to their counter.
Team content and moderation. If you create a team, the team name and description you write are public in the team browser. Team chat messages are visible to your teammates and are stored on our servers. Message content is read server-side by our own moderation function so we can filter abuse and act on player reports; it is not sent to any third party. Teammates can report messages, and reports are retained for safety review.
We use the following SDKs. Each may collect data per their own privacy policies. Your anonymous user ID is shared with RevenueCat, PostHog, and (after you consent) advertising SDKs so your records can be linked across these services — we never share your email address or name with advertisers:
Through the Privacy Center (Settings → Privacy):
California residents can exercise the "Do Not Sell or Share My Personal Information" right in-app at Settings → Privacy → Do Not Sell or Share. When you opt out, we stop sharing your data for cross-context behavioral (personalized) advertising and disable behavioral analytics. You will still see ads, but they will not be personalized. We do not sell your personal information for money. We also honor Access and Deletion requests (see above) for California residents, and we will not discriminate against you for exercising these rights.
REBUS is rated for ages 13+. We do not knowingly collect data from children under 13. If you are a parent and believe your child has provided personal data, contact us at the email below — we will delete it promptly.
Your data is processed by third-party SDKs in the United States and the European Union. We rely on Standard Contractual Clauses (GDPR Art. 46) for international transfers.
We will update this policy when we change SDKs, add new data types, or as required by law. The "Last updated" date at the top reflects the most recent version.
For privacy questions or data requests:
Publisher: Favo Games App: Rebus Master Bundle ID: com.favogames.rebus Platforms: iOS (App Store), Android (Google Play)