Rushmark is a game made by Beyond Bounds Digital, a company registered in South Africa (“Beyond Bounds”, “we”, “us”). This policy explains what information the game collects, why, who can see it, how long we keep it, and how to have it deleted. It covers the Rushmark game on Android and on Steam, and the handling of deletion requests sent to us. It does not cover the rest of the beyondbounds.co.za website.
In short
- Rushmark never asks for an email address, phone number or password. On Android you sign in with Google Play Games; on Steam, Valve identifies you. Either way, all we receive is a player ID and a display name — and on Steam, the Steam IDs on your Steam friends list, for the FRIENDS leaderboard filter.
- What we keep is what a leaderboard game needs: your times, scores, replays, achievements, play statistics and saved game data.
- To see where the game is too hard, it also counts how your runs end in each part of each course and how far you get through the tutorial. Every copy of the game also reports a random install ID and how sign-in went, even if you never sign in. Both go only to our own server, and neither is shown to other players.
- Times, chosen display names and replays are visible to other players. That is what a leaderboard is.
- We do not collect your location, contacts, photos, camera or microphone. There are no ads, no advertising ID and no third-party analytics or tracking SDKs in the game.
- On Google Play the optional full-game purchase is processed by Google. We never see your payment details.
- You can delete everything we hold about you at any time — from inside the game on Android, or see Deleting your data below.
1. Who is responsible for your data
Beyond Bounds Digital is the “responsible party” under South Africa’s Protection of Personal Information Act (POPIA) and the “controller” under the EU and UK GDPR where those apply. Our privacy contact, and our Information Officer under POPIA, can be reached at info@beyondbounds.co.za.
2. What we collect, and why
2.1 Identity
Android version. The game signs you in with Google Play Games. When it does, our server receives your Play Games player ID and your Play Games display name from Google — and nothing else: not your email address, your Google account name, your contacts or your photo. The player ID is a number Google assigns to your Play Games profile; it identifies you to us and lets your times and saves follow you across devices and reinstalls. Our server then issues the game a private access token for that player. Your Play Games display name is what other players see on leaderboards; you change it in your Google account, not in the game, and Google reviews it. We may still remove a leaderboard entry that was not achieved legitimately.
If you decline to sign in, the game runs offline: local personal bests and no leaderboards. The only thing it sends our server is the install record described in section 2.6, which is not linked to any account. Your play statistics (section 2.2) stay on the device, and are sent only if you sign in later. You can sign in later from Settings.
Steam version. When the game starts, it asks Steam for a one-time sign-in ticket and sends it to our server, which checks it with Valve and learns your Steam ID. Our server then issues the game a private access token for that player, valid for up to a week. Your Steam persona name comes from Valve too: our server fetches it from Steam, at most once a day, and it is the name other players see; you change it on Steam, not in the game. When it checks the ticket, Valve also tells us whether your account has been banned from Rushmark’s leaderboards, and whether you are playing a copy lent to you through Steam Family Sharing — in which case we record the Steam ID of the account that lent it. We do not receive your email address, password or payment information from Steam.
Steam friends. So that the FRIENDS filter can show which of your Steam friends have played, the game sends our server the Steam IDs on your Steam friends list — IDs only, no names — each time it signs in, replacing the list it sent before. The list can include people who have never played Rushmark. It is used only to pick out which of your friends have leaderboard entries, it is never shown to anyone, and it is deleted with your player record.
2.2 Gameplay records
- Leaderboard entries — your finish times, scores, Survival section counts, season and event standings, together with the course they were set on and your resulting rank.
- Ghost replays — when you set a new personal best on a timed course, the game uploads a recording of that run: the positions, actions and timings of your character. It is not video and contains no audio. Other players can download replays to race against or watch them, and yours is replaced each time you beat your own time.
- Achievements and play statistics — which achievements you have unlocked, and counters such as attempts per course, total sections cleared and total time played. Statistics are also added into world totals that every player can see; those totals do not identify you.
- How your runs end — how many runs you start on each course, marathon and Survival; for each of their sections, how many runs ended there in a death (and its cause, such as a fall or spikes), a restart or a quit; and on which attempt you first finished each course. In the tutorial: which rooms you entered, finished, died in or left, whether you skipped or completed it, and whether you went on to Course 1 or back to the menu. These counters are sent to our server on both versions, Steam included. We use them only to find which parts of the game are too hard and whether a change helps, as totals across players. They are not shown to other players and are not part of the public world totals.
- Runs held for review (Steam) — a time whose replay fails our automatic checks, for example for movement no player could make, is not published. It is held with its replay until we review it, and then either published as your entry or deleted.
2.3 Saved game data
So that your progress follows you across devices, the game saves and syncs: personal bests and splits, your own ghost recordings, best scores, play statistics, unlocked skins and trails, season and event progress, the rivals you have chosen, your music and playlist settings, and your control and display settings. On Android these are stored on our server; on Steam they are stored in Steam Cloud. Only you can read your saved game data.
2.4 Purchases (Google Play only)
Rushmark on Google Play is free to download, with a single one-time purchase that unlocks the full game. The purchase itself is handled entirely by Google Play Billing: Google collects your payment details under Google’s own privacy policy, and we never receive them.
To confirm the purchase, the game sends our server the purchase token Google issues. Our server verifies that token with Google and records that your player is entitled to the full game. We keep the purchase token and Google’s order reference so that the unlock can be restored if you reinstall, and revoked if Google refunds the purchase — our server checks Google’s list of refunded (“voided”) purchases every fifteen minutes for that purpose. The game also keeps a copy of your entitlement on the device so the full game works offline.
2.5 Technical data
When the game contacts our server, the server sees your IP address and the time and content of each request, as any internet service does. IP addresses are used only to limit abusive traffic and to diagnose problems; they are not linked to your player record and are not used to work out where you are. Server logs are kept for at most 30 days.
2.6 Install record
The first time it starts, each copy of the game makes a random ID, the install ID, and keeps it in the game’s own storage on the device. It is not a hardware identifier and not your advertising ID, and it is never linked to your player record: it owns no times, names or saves. Whenever the game starts, and when sign-in succeeds or fails, it sends our server the install ID with:
- which version of the game it is (Android or Steam), its version number, and the operating system it is running on;
- how sign-in went: signed in, declined, failed (with a short technical reason, such as an error number) or not available on the device;
- how many times the game has been started on this install;
- whether the tutorial has been skipped, and whether it has been completed.
Our server keeps one record per install ID: those details, when it first and last heard from that install, and whether it has ever signed in. Your IP address is not stored in it. We use these records to count installs and how sign-in goes for them, including for players who never sign in, who would otherwise be invisible to us. The game sends this whether or not you sign in. Reinstalling the game, or clearing its data, starts a new install ID. A record is deleted once its install has not been heard from for 180 days.
2.7 What we do not collect
The game does not collect your email address, phone number, real name (unless you type one as your display name), location, contacts, photos, files, camera, microphone, advertising ID or device hardware identifiers (the install ID in section 2.6 is made up by the game, not read from the device). It contains no advertising, no third-party analytics and no crash-reporting or tracking SDKs: the counters in section 2.2 and the install record in section 2.6 are collected by the game’s own code and go only to our server. The Android app requests only internet access and the Google Play Billing capability.
Google Play and Steam may show us aggregated, anonymous install and crash statistics that those platforms generate under their own privacy policies.
3. What other players can see
- Visible to anyone: your display name (or Steam persona name), your times, scores and ranks on each leaderboard, and your ghost replays. Leaderboards can be read without an account on either version, so they are public in the ordinary sense. On Steam, your entries also appear on Rushmark’s leaderboards on Steam’s own community pages.
- Visible only to you: your saved game data, your play statistics as linked to you, your purchase status, your IP address, your Play Games player ID, and your Steam friends list.
- Rivals. Choosing another player as a rival is private to you; that player is not told.
4. Who we share data with
- Google (Google LLC and its affiliates) — provides the sign-in and your Play Games player ID and display name, processes the full-game purchase through Google Play Billing, and answers our server’s requests to verify both. On Android the game also runs on Google Play services on your device. Google’s privacy policy.
- Valve (Valve Corporation) — on Steam, Valve identifies you to our server and supplies your persona name, as section 2.1 describes. Our server copies each of your leaderboard entries — your Steam ID, the leaderboard and your time or score — onto Rushmark’s leaderboards on Steam, and removes it there when it is removed here. Your Steam achievements, statistics and Steam Cloud saves are stored by Valve on its Steamworks services, not by us. All of this is under the Steam Privacy Policy. Maintenance tools we run by hand on GitHub-hosted infrastructure can read Rushmark’s leaderboards on Steam; their run logs can contain Steam IDs and times and are retained by GitHub for a limited period.
- Our hosting provider — the servers for both versions run on a hosted machine in South Africa. The provider supplies the machine and does not access the data on it.
We do not sell personal information, share it for advertising, or give it to data brokers. We would disclose it only where the law requires us to.
5. Where your data is stored
Data from both versions is stored on our server in South Africa. On Steam, copies of your leaderboard entries, and your achievements, statistics and Cloud saves, are also stored by Valve; on Android, purchase data is stored by Google — each on their own infrastructure, which may be outside your country. If you play from the European Economic Area or the United Kingdom, using the game involves transferring your data to South Africa and to those providers; Google and Valve each publish the safeguards they rely on for such transfers, and we rely on the same.
6. How long we keep it
- Your player record, gameplay records and saved game data — until you delete them or ask us to. We do not currently delete inactive players automatically, so that your times remain on the leaderboard for as long as they stand. Uninstalling the game does not delete them: sign in again on any device and they are back, or delete them as described in section 7.
- Ghost replays — only your best run on each course is kept; a replay is deleted the moment you beat it.
- Your Steam friends list — replaced each time the game signs in, and deleted with your player record.
- Runs held for review (Steam) — until reviewed, and then published as your entry or deleted.
- Purchase verification records — for as long as your player record exists, so that the unlock can be restored and refunds honoured. Google keeps its own record of the transaction.
- Install records — until the install has not been heard from for 180 days, then deleted. An install record is not linked to your player record, so it is not part of deleting your data in section 7.
- Server logs — at most 30 days.
- Backups — we take backups of the server; data you delete may persist in a backup for up to 30 days before the backup itself is discarded.
7. Deleting your data
You can delete everything we hold about you at any time, and you do not need the game installed to do it:
- In the game (Android version): Settings → DELETE ACCOUNT, pressed twice to confirm.
- On the web: beyondbounds.co.za/rushmark/delete-account
- By email: info@beyondbounds.co.za
Deleting removes your player record, every leaderboard entry and replay, your achievements and statistics, your saved game data, and your purchase verification record — on the server and, when done from inside the game, the copies on that device too (your control and display settings, and the install ID, stay). Deletion is immediate and permanent; nothing linked to you is retained apart from backups (see section 6) and short-lived server logs. Install records (section 2.6) are not linked to you, so they are not part of this: each is deleted once its copy of the game has not been started for 180 days. It does not touch your Google Play Games profile, which is Google’s: signing in again afterwards starts a fresh, empty player record. Nor does it cancel a purchase you have made with Google — the game can normally re-verify your original Google purchase and restore the unlock.
For the Steam version there is no in-game deletion. Email us from an address you can reply from, with your Steam profile URL or Steam ID. We will delete your player record from our server — every leaderboard entry and replay, any run held for review, your season standings, your play statistics, your Steam friends list and your sign-in sessions — remove your entries from Rushmark’s leaderboards on Steam, and reset your Steam achievements and statistics for the game. Your Steam Cloud saves for Rushmark can be deleted by you on Steam’s own Cloud storage page. Deletion does not touch your Steam account, which is Valve’s: if you play again afterwards, a fresh, empty player record is created. If you are on another player’s Steam friends list, your Steam ID stays in their list on our server until it next changes; it is never shown, and with your entries gone there is nothing of yours for it to find.
8. Children
Rushmark is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has created a leaderboard entry or a display name, contact us at info@beyondbounds.co.za and we will delete it.
9. Security
All traffic between the game and our server is encrypted (HTTPS). Your player record can only be changed with the private access token held by your copy of the game. The server accepts connections only through its encrypted front door, limits abusive traffic, and is backed up. Access to the data is limited to the people who run the game. No system is perfectly secure; if a security incident affects your data we will tell you and the relevant authority as the law requires.
10. Your rights
Under POPIA — and under the GDPR if you are in the EEA or the UK — you have the right to ask what personal information we hold about you, to have it corrected or deleted, to object to or restrict its processing, to receive a copy of it in a portable form, and to withdraw any consent you have given. Email info@beyondbounds.co.za; we will answer within 30 days and usually much sooner, and we may ask you to confirm which player record is yours.
You also have the right to complain to a supervisory authority: in South Africa, the Information Regulator; in the EEA or UK, your local data protection authority.
The game does not make automated decisions about you that have legal or similarly significant effects. Leaderboards rank players automatically, but that is only sorting the times you set.
11. Legal bases (EEA and UK)
| What we do | Why we are allowed to |
|---|---|
| Identify you through Google Play Games or Steam, and keep leaderboards, replays, saves and statistics | Necessary to provide the game you asked for (contract) |
| Verify and restore your Google Play purchase, and revoke it on refund | Necessary to provide the purchase (contract) and our legitimate interest in preventing fraud |
| Rate-limit traffic, keep server logs, check leaderboards and replays for illegitimate entries, hold suspect runs for review, and record the lending account of a Family Sharing copy | Our legitimate interest in keeping the service secure and the leaderboards fair |
| Keep your Steam friends list for the FRIENDS filter | Necessary to provide the filter you use (contract); for the friends on the list, our legitimate interest in showing you which of them play, using their Steam IDs alone |
| Count how runs end in each section and in the tutorial, and keep install records | Our legitimate interest in finding where the game is too hard and whether sign-in works; the counters are used only as totals across players, and install records are not linked to anyone’s account |
| Keep backups | Our legitimate interest in not losing everyone’s data |
| Show your display name | Necessary to provide a leaderboard; the name is the one you chose for your Google or Steam profile |
12. Changes to this policy
When this policy changes we will update the date at the top. If a change materially affects what we collect or how it is used, we will also say so in the game or on its store page before it takes effect.
13. Contact
Beyond Bounds Digital info@beyondbounds.co.za