This privacy policy explains how Torvmark Labs, operating under the Torvi Studio brand (we, us, our), handles information in connection with Gate Rush (the app).
This page covers Gate Rush 1.6.0 on iOS and the Android beta. iOS 1.6.0 uses Unity advertising; Android and older iOS builds use Google advertising. Google Play purchases remain disabled during beta.
Gate Rush is available on iOS. The Android edition is in beta; the Android information below describes that beta. We aim to collect as little data as possible. Gate Rush does not require a named Torvi Studio account. It uses pseudonymous technical identifiers and, where described below, automatically created Firebase accounts that do not require a name, email address or password. Apple Game Center on iOS and Google Play Games on Android handle their own platform profiles and sign-in. Google Play Games sign-in may be requested when you choose Cloud Save or leaderboards.
On this page
1. Who is responsible
For the processing for which we are responsible, the controller is Torvmark Labs, a sole proprietorship with organisation number 938 284 792, Hovsveien 27D, 1769 Halden, Norway. Torvi Studio is our brand. Contact: hello@torvistudio.com.
2. Information we and our partners handle
- Game data stored on your device: Gate Rush saves game progress, hearts, coins, power-ups, purchase and reward fulfilment records, permanent style ownership, settings and saved runs in local app storage. If you open a Creator Pack link, the URL may be stored locally while a claim is pending and removed after a successful claim. We do not receive your complete local save file. If you enable cloud saving, the eligible save data described below is copied to your personal iCloud account on iOS or Google Play Games profile on Android. If you enable gameplay Analytics, the events and parameters described below are sent to Firebase.
- Notifications: the App may ask for notification permission and send local reminders. They are scheduled on your device, including being rescheduled after an Android restart where applicable, and send no notification content or device token to us.
Website visits and language/theme preferences
When you visit our website, the web server receives your IP address, requested address and browser/request information to deliver and protect the page. Our hosting provider processes this technical information for us; the basis is our legitimate interest in operating a secure, available website. Remembering a language or theme implements your requested preference. The site stores your chosen language and theme in functional cookies shared across torvistudio.com and its subdomains, with browser-local storage as a fallback. The cookies are named torvi-lang and torvi-theme and expire one year after they are set; browser-local copies remain until cleared. These preferences contain no account or advertising identifier. You can change them on any page or clear them through your browser. They are separate from in-app Analytics and advertising consent.
3. Storage, sync and connected services
- Complete iCloud Save (iOS only): iCloud Save is optional and can be enabled or disabled separately in Gate Rush Settings. When enabled and iCloud is available, one complete eligible save is stored through Apple's iCloud Key-Value Store. It can include level progress and stars; Daily Challenge, daily reward and rewarded-ad usage state; passport number; settings, appearance and onboarding state; owned and equipped styles; coins, hearts and power-ups; pending rewards; and local identifiers recording which purchases and rewards have already been fulfilled. It does not include the board state of an unfinished run, Analytics or advertising consent, notification permission, or payment-card or bank-account details. The iCloud envelope also contains random save and device identifiers, a device category such as iPhone, iPad or Mac, revision numbers and modification timestamps so Gate Rush can identify changes. If two complete saves differ, the App shows both summaries and lets you choose which entire save to keep; it does not silently combine their balances. Turning iCloud Save off stops further synchronization but does not itself delete a copy already stored in iCloud. The data is kept in your personal iCloud account and handled by Apple under Apple's Privacy Policy. Torvi Studio cannot access it.
- Google Play Games Cloud Save (Android only): Cloud Save is optional and uses Google Play Games Saved Games with your signed-in Play Games profile. When enabled, it stores one complete eligible save. This includes level progress and stars; coins, hearts and refill timing; power-ups; Daily Challenge, daily reward and rewarded-ad usage state; your passport number; owned and equipped styles; selected settings and onboarding state; and identifiers for pending or fulfilled rewards. It also includes relevant first-launch, last-open and modification times. It does not include the board state of an unfinished run, Analytics or advertising consent, or notification permission. Saved Games metadata includes progress and the device manufacturer/model. If local and cloud saves conflict, Gate Rush shows their summaries and lets you choose which complete save to keep; it does not combine their balances. Turning Cloud Save off stops synchronization without deleting the existing cloud copy.
- Android Cloud Save identity and Backup: current Cloud Save is associated with your Google Play Games profile. Gate Rush uses the Play Games player identifier locally to keep synchronization state associated with the correct profile. Android Backup and device transfer may retain legacy Firebase Cloud Save identity information and privacy/deletion preferences. They exclude the main local game save. For deletion of older Firebase saves, Gate Rush can identify the legacy document using a pseudonymous identifier derived from Android's app-scoped device identifier, or an older random document identifier. These legacy identifiers are not the identity used for current Play Games Cloud Save.
- Game Center (iOS only): Gate Rush uses Apple's Game Center for leaderboards. If you are signed in, Gate Rush submits your highest cleared level and longest Daily Challenge streak. Apple processes your Game Center identity, display name, scores and related data according to its policies and your settings. We do not receive your Apple Account password, and your Game Center identifier is not sent as a custom event to Firebase Analytics.
- Google Play Games (Android only): Gate Rush uses Google Play Games for Cloud Save and leaderboards. When authenticated, the App submits your highest cleared level and longest Daily Challenge streak to the leaderboards. Google processes these scores with your Play Games profile according to its policies and your profile settings. Gate Rush does not receive your Google Account password. It does not send the Play Games player identifier as a custom Firebase Analytics user ID.
Firebase account, Creator Pack and security
- Firebase accounts, Creator Pack and Android purchase verification: Firebase assigns a random user identifier, also called a UID; Gate Rush does not ask for a name, email address, password or phone number for this account. On both platforms, the account is used when needed to process Creator Pack requests. On Android, the account is also used to delete older Firebase Cloud Save records and, when purchases are enabled, to authenticate server verification of Google Play purchases; current Google Play Games Cloud Save does not depend on this Firebase account. A Cloud Function uses the UID to authenticate a Creator Pack request, prevent duplicate rewards and store a claim record in Cloud Firestore. That record contains the UID, campaign ID, campaign source, the link's creative code, server timestamp and granted reward details, including claim/reward identifiers, power-up quantities and cosmetic identifiers. These records support fulfilment, security and fraud prevention. Separate campaign events may be sent to Analytics when the analytics switch is enabled.
- Firebase security data: Firebase App Check protects production requests using Apple App Attest on iOS and Google Play Integrity on Android. Firebase, Apple and Google may process attestation material and short-lived security tokens to verify that requests come from the genuine App. Firebase Authentication may also process IP address and user-agent information for account security and abuse prevention, while Cloud Functions temporarily processes the request IP address to execute a function. See Privacy and Security in Firebase.
- Operational server logs: Firebase and Google Cloud may record request metadata and limited App-generated logs, such as a pseudonymous Firebase UID, campaign identifier, processing outcome and error details. We use these logs for operation, diagnostics, security and fraud prevention. Logs are retained according to the configured Google Cloud retention settings.
Gate Rush uses Firebase Authentication for Creator Pack requests and, on Android, deletion of legacy Firebase Cloud Save records. Google Play Billing is disabled during beta; when purchases are enabled, Android purchase verification will also use Firebase Authentication. iOS StoreKit purchases do not create a Firebase account. Current Android Cloud Save and leaderboards use Google Play Games. The App does not use Firebase Crashlytics or Firebase Cloud Messaging.
4. Purchases and subscriptions
- In-app purchases: purchases offered on iOS are processed by Apple through the App Store, while Google Play Billing is disabled during the Android beta. When Android purchases are enabled, Google will process them through Google Play Billing. We do not receive or store your payment-card or bank-account details. On iOS, StoreKit transaction identifiers and local purchase/reward fulfilment records may be included in your complete iCloud Save when enabled, to keep the chosen save complete and prevent duplicate fulfilment. Torvi Studio cannot access that personal iCloud data. When Google Play purchases are enabled on Android, the App sends the Google Play purchase token and requested product IDs to an App Check-protected Firebase Cloud Function. The function verifies the purchase directly with Google Play before the item is granted.
- Google Play purchase-verification data: when this verification is used, the server stores a limited purchase ledger to prevent duplicate fulfilment containing a one-way SHA-256 hash of the purchase token, the pseudonymous Firebase UID, app package name, product ID, Google Play order ID where provided, purchase and consumption state, and server timestamp. The raw purchase token is sent to Google for verification but is not stored in this ledger. This purchase ledger remains after Firebase account deletion to verify purchases and prevent reuse. It still contains the pseudonymous UID; deleting the account does not anonymise the ledger.
5. Analytics, advertising and consent
- Analytics (Google Analytics for Firebase): if you enable the gameplay Analytics switch, we use Firebase Analytics to understand gameplay and improve levels, guidance and reliability. We observe progress through the early levels, including levels 1, 5 and 10; when a level attempt starts, receives its first valid action, becomes stuck and ends; whether it was completed or ended by an observed action such as retrying or returning to the menu; and the result, including stars for normal levels. We also measure active play time, power-up use, counts of gameplay and lounge actions, and whether a guidance step was shown, skipped or successfully used, including whether an applicable action used tapping or dragging. Attempt context includes the level, normal or Daily Challenge mode, how it was opened, replay status, and a broad label indicating a new, existing or unknown installation history. We do not record the coordinates of your touches or a recording of your gameplay.
- Analytics identifiers and device data: each measured attempt has a new random identifier so that its events can be matched. Firebase also uses a pseudonymous app-instance identifier that can relate events from the same installation; this is not fully anonymous data. Gate Rush does not set a Firebase account UID or platform player ID as an Analytics user ID. Firebase may additionally collect app opens, sessions and engagement, app version, device model, operating system, language and approximate geography derived from the IP address. Platform identifiers can include Apple's identifier for vendor and, on Android, an advertising identifier where available and permitted. Gate Rush does not send names, email addresses, user-entered text or precise GPS coordinates to Analytics. See Firebase Analytics data collection.
- Other Analytics events: existing events may describe Daily Challenge results, power-up type, completed rewarded ads and displayed interstitial ads. Creator campaign events can include campaign ID, source, creative code and claim outcome. A process that stops unexpectedly may have no observed level-ending event; a missing ending is not recorded as a confirmed player cancellation.
- Advertising on Android and older iOS builds (Google AdMob): these editions use optional rewarded ads, which you choose to watch in exchange for a reward (such as extra hearts or coins), and occasional interstitial ads at natural breaks between levels. To serve, secure and measure them, Google and its ad partners may collect and process device and usage information, such as an app/device or advertising identifier where available and permitted, IP address, approximate location, ad requests, impressions and interactions, and diagnostic data. See how Google uses information.
- Advertising on iOS 1.6.0 (Unity): the new integration uses Unity LevelPlay as its advertising platform, with Unity Ads as the only enabled ad source, and Unity Ad Quality to monitor ad quality and the advertising experience. Rewarded and interstitial ads remain available. Unity services may process IP address, device information, ad requests, impressions, clicks and other ad activity, and performance or diagnostic information for delivery, measurement, quality control, security and fraud prevention. Identifiers and further data use depend on permissions and provider settings. Non-personalized ads still involve technical data processing; choosing them is not a choice to disable every identifier, network request or data use. Ad Quality can process ad-related measurements even when optional Firebase Analytics is off. See Unity's game-player and app-user privacy policy.
Gameplay Analytics is disabled by default. You can use Gate Rush without enabling it. The analytics switch is available in the first-launch choices and in Settings, separately from Cloud Save and advertising choices. Turning it off stops further Analytics collection and discards the current in-memory attempt measurement. Turning it on during a level does not reconstruct earlier actions; level-attempt measurement starts with a subsequent attempt. Switching Analytics off does not by itself delete data already received by Google.
On iOS 1.6.0, Firebase consent for advertising storage, advertising user data and advertising personalization is explicitly denied. Our Analytics property is no longer linked to Google Ads. These settings are separate from Unity advertising choices and do not disable Firebase Authentication, App Check or Cloud Functions used for Creator Pack and other app functionality.
Advertising choices on iOS 1.6.0
Before Unity advertising starts, choose Allow personalization or Use non-personalized ads. Both choices allow ads and the same rewards, subject to ad availability and the normal reward conditions. You can change the choice in Settings → Privacy options. Earlier Google/UMP choices are not reused as permission for Unity; the app asks for a fresh choice. Reading this policy does not make that choice for you.
The new integration does not request new Apple App Tracking Transparency (ATT) permission. Personalization is enabled only when both your app choice and your existing iOS tracking permission allow it. If either does not allow personalization, ads are requested without personalization. Refusing iOS tracking permission does not automatically stop general ads. The in-app choice does not grant ATT permission; iOS tracking permission is controlled separately in Apple's Settings.
Advertising choices on Android and older iOS builds
These editions use Google's User Messaging Platform (UMP) where required. Where available, Settings → Privacy options reopens the Google advertising choices. Older iOS builds may also request Apple's ATT permission before Google Mobile Ads can access the advertising identifier and use data for tracking across other companies' apps and websites. Declining ATT prevents access to IDFA and tracking that requires this permission. UMP choices separately determine whether personalized, non-personalized or limited ads may be served; sometimes no ad is available.
Firebase account and server-side Creator Pack fulfilment records are used by Gate Rush to deliver rewards and protect the service. Current Google Play Games Cloud Save is separate from Firebase Analytics. The Creator Pack Firebase account and server-side campaign fulfilment data are not used by Torvi Studio for advertising or cross-app tracking. Campaign events sent to Analytics with your permission are separate and follow the Analytics practices described above.
6. Data sharing
We do not sell your personal data. On iOS 1.6.0, Unity processes advertising and ad-quality information through LevelPlay, Unity Ads and Ad Quality. Unity may share information with its group companies, service providers and other recipients described in its policy; Unity Ads as the only enabled ad source does not mean Unity has no other recipients. On Android and older iOS builds, Google and its authorized advertising partners process advertising information through AdMob. Google also processes Android Cloud Save and leaderboards through Google Play Games, Android purchases when enabled through Google Play Billing and the Google Play Developer API, Firebase account, Creator Pack and purchase-verification data through Firebase, and optional Analytics data through Google Analytics for Firebase. Apple processes App Attest, Game Center, iCloud Save and App Store purchases on iOS.
Legal basis (EEA/UK users)
Where consent is required, we rely on your consent for Firebase Analytics, access to or storage of analytics and advertising identifiers, personalized advertising and cross-app tracking. We rely on performance of our agreement with you to provide requested cloud saves and leaderboards, deliver the Creator Pack, process requested purchases and provide other requested game functionality. We rely on our legitimate interests in securing the service, maintaining purchase integrity, preventing duplicate or fraudulent claims, providing support and improving the App where consent is not required. Advertising requests follow the applicable Unity choice on iOS 1.6.0 or Google's consent flow on Android and older iOS builds, together with applicable law. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
Unity's policy describes its own processing as a controller, including consent for personalized ads and cookies or similar technologies where required, and legitimate interests for contextual advertising, operation and security where permitted. Choosing non-personalized ads does not waive consent requirements that still apply to storage, access or other processing. Provider grounds do not replace our obligations or your separate app and iOS choices.
For the providers' own processing and international-transfer safeguards, see Unity's player privacy policy, Apple's privacy policy, Google's privacy policy and Firebase's privacy and security information. Depending on the provider and service, information may be processed outside the EEA/UK, including in the United States. The applicable policies describe safeguards such as adequacy decisions or standard contractual clauses where relevant. We do not promise a particular data-centre location. Contact us for information about transfers involving data Torvi Studio holds.
7. Retention and deletion
Firebase accounts, Creator Pack claim records and any legacy Android Firebase Cloud Save records are retained while needed for their functions or until removed through an applicable deletion process, subject to legal, security and fraud-prevention requirements. Current Android Play Games cloud saves and leaderboard records are associated with the player's platform profile and are separate from deletion of the Firebase account. Google Play purchase-verification records are handled as described above. App Check tokens and attestation data are handled according to the platform providers' policies.
User-level and event-level Analytics data is retained according to the configured Google Analytics property retention and Google's rules; aggregated reports may be retained longer. Turning Analytics off stops future collection but is not a server-data deletion request. See Google Analytics data retention. Local game data remains until you reset it or delete the App. Personal iCloud copies and Google Play Games records may survive uninstalling the App. Android Backup may also preserve the legacy identity and privacy/deletion preferences described above.
Advertising and ad-quality data follow Unity's retention rules on iOS 1.6.0, or Google's and its partners' rules for Android and older iOS builds. Unity describes retention according to the purpose and applicable legal requirements; we do not promise a fixed Unity deletion period. Changing advertising choices, disabling Firebase Analytics, deleting a Creator Pack account or uninstalling Gate Rush does not automatically erase data already processed by advertising providers. Use the privacy controls and request channels in the relevant provider's policy for access or deletion requests.
Delete your Firebase account and online data
On both iOS and Android, Settings → Delete anonymous account and online data removes the Firebase account and associated online Creator Pack records. On Android, the process also deletes associated legacy Firebase Cloud Save documents. It does not delete local progress, already granted rewards, personal iCloud data, Google Play Games saves, Game Center or Play Games leaderboard records, purchase records held by the stores, Google Play purchase-verification records retained as described above, or previously processed Analytics and advertising data. It does not switch off current Google Play Games Cloud Save. Interrupted Firebase deletion can be retried; the App records completed steps locally.
To prevent repeated Creator Pack rewards, the App retains a local deletion marker in the iOS Keychain or Android's backup-eligible private app storage. This marker is not sent to Torvi Studio or Firebase. Creator Pack cannot be claimed again on that device. Uninstalling the App alone does not necessarily delete online records. Google provides separate controls for deleting Play Games data; these are separate from Gate Rush's Firebase-account deletion option.
If you cannot access the App, submit a request through our dedicated Gate Rush account deletion page. The Firebase accounts have pseudonymous identifiers rather than a name or email address, so we may need verification information to identify the correct records. This request process does not itself manage your Apple or Google platform account.
Support messages
If you email Torvi Studio, we receive your email address, message and any attachments you choose to send. They are used to answer the request, investigate the problem and handle applicable purchase or legal claims, with our email service provider processing delivery and storage. Do not send passwords, payment-card details or unnecessary personal information. Correspondence is kept while needed to resolve the case and any related complaint or legal obligation, then deleted or anonymised. Contact us to request access or deletion.
Android purchases after deletion: Google Play Billing is disabled during the Android beta, so purchases are not currently available there. When purchases are enabled, a later Google Play purchase may create a new pseudonymous Firebase account for verification. The deletion update is available from Android 1.4.2 (21) and handles that new account. For help with an existing account, request deletion by email with your current account deletion code. This is separate from the one-time Creator Pack restriction. iOS StoreKit purchases do not create a Firebase account. When Google Play purchases are enabled, an unresolved purchase can postpone deletion until verification and delivery are resolved. If the connection fails, reconnect and retry deletion. Already granted coins, powerups, cosmetics and local progress are kept; Google Play Games saves and store purchases are not removed or refunded.
8. Your rights and choices
To enable or disable Firebase gameplay Analytics, use its separate switch in Settings. On iOS 1.6.0 it is called Game analytics; the advertising-choice screen is not its control. Settings → Privacy options lets you change the Unity choice on iOS 1.6.0 and revisit Google choices where available in Android or older iOS builds. Apple's tracking permission is managed separately in iOS Settings → Privacy & Security → Tracking. Selecting non-personalized ads does not remove ads or reduce the offered rewards, and changing the choice does not undo earlier lawful processing. Platform notification permissions and Game Center or Google Play Games profile choices remain separate.
For Unity's own processing, the privacy icon in an ad, when available, and the request/contact channels in Unity's player privacy policy provide additional controls. Google has its own controls for the editions using AdMob. Firebase-account deletion in Gate Rush is not a request to delete the advertising providers' records.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of personal data, and to data portability or to complain to a data protection authority. Email us to make a request. Because Firebase accounts and legacy Firebase Cloud Save identifiers are pseudonymous and have no name or email address, we may need information from you to determine whether a record can be linked to your installation.
9. Children
The App is intended for a general audience and is not directed at children. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
11. Contact
Provider: Torvmark Labs, a sole proprietorship with organisation number 938 284 792, Hovsveien 27D, 1769 Halden, Norway. Torvi Studio is our brand. For support, privacy or legal questions, email hello@torvistudio.com.