Privacy Policy

Last updated: 2 September 2026

1. Who we are

Relic Rush (the "Game") at relicrush.com is operated by Fun Based Games Ltd. ("we", "us"), which is the data controller for the personal data described in this policy. This policy explains what we collect when you play, why, who we share it with, and the choices and rights you have. It applies to the website, the installable web app, and all game modes.

2. What we collect

Account data (online play only)

Creating an account asks for a username (3–20 letters, numbers or underscores) and a password. We store the username, a one-way bcrypt hash of your password (we cannot read the password itself), the date the account was created, and moderation flags (for example whether the account is banned or is a moderator). We do not collect an email address, phone number, real name, date of birth, or payment information. Guests who play single-player or local modes do not create any account record at all.

Chat messages

When you write in the lobby or in a game room's chat we store the message text, your username, the room or channel it was sent in, and the time. Messages are shown to the other players in that lobby or room and are kept in our database so that we can investigate reports and enforce the Community Guidelines.

Gameplay data

In online matches your moves, spells, dice rolls and other game actions are sent through our server to the other players in your room. The moves themselves are held in the server's memory for the duration of the match and are never written to a database — we do not keep a replay or a move-by-move history of your games.

Two things about a finished game are written down, and they are described in the next two sections: your result if you are signed in (for the leaderboards), and anonymous statistics about the game itself (to help us improve it).

Leaderboard records (signed-in players only)

When you finish an online or single-player game while signed in, we store one record of it: the mode, whether you won, how many relics and mana you held, how many turns it lasted, how long it took, how many players were in it, and the date. Online losses also record the username of the player who beat you, which is what the Undefeated Token on the leaderboard is built from. These records are stored under your username so that the leaderboards and your own achievements can be shown.

If you play as a guest, nothing is recorded here. Local hot-seat games are never recorded either. Delete your account and these records are unlinked from it.

Anonymous game statistics

To understand how the Game actually plays — whether turns drag, whether some cards are never used, whether games are being abandoned and where — we record a small summary of each finished or abandoned game. It contains only facts about the game: the mode, how it ended, the number of players, which seat in the turn order the reporting player held, the relic target, the number of turns, how long the game and a typical turn took, how many cards were played and which ones, relics collected, and guardians defeated.

These records contain no username, no account reference, no IP address and no identifier of any kind — not even a random one that could be used to link two games to the same person. They cannot be traced back to you, which also means we cannot pick yours out to show or delete them individually. They are collected whether or not you are signed in, because they are not about you.

We also count how often certain links and buttons are used — for example how many people click through to the physical board game — as a plain tally with no identifier attached.

Technical data and server logs

Like almost every web service, our hosting provider automatically records standard request information when your browser connects: your IP address, browser type and version, the pages and resources requested, timestamps, and error details. Our game server also writes operational logs (for example when a room is created or a match starts) that include usernames and room codes. We use these logs to keep the service running, to debug problems, and to detect abuse. They are not used to profile you.

Data stored in your browser

The Game keeps a few settings in your browser's local storage so they survive a reload. This data stays on your device; it is not sent to us unless it is needed to make a request work (the login token).

The Game also registers a service worker that caches game files (code, images, music you have played) in your browser so the Game loads faster and can start offline. This cache contains no personal data. You can remove all of the above at any time from your browser's site-data or "clear browsing data" settings.

What we do not collect

We do not use cookies. We do not use third-party analytics or advertising trackers, social-media pixels, or fingerprinting — the statistics described above are our own, stay on our own servers, and are anonymous. We do not collect your precise location, contacts, or anything from other apps or sites, and we do not buy data about you from anyone.

3. How and why we use your data

We do not use your data for automated decision-making that has legal or similarly significant effects on you, and we do not use it for marketing.

4. Who we share data with

• Other players. In online play your username, your in-game actions, and your chat messages are visible to the other people in your lobby or room. Please do not put personal information in your username or in chat.
• Service providers. The Game runs on Google Cloud (Google LLC), which hosts our server, database, and logs on our behalf under Google's data-processing terms. Google processes this data only to provide the hosting service to us.
• Legal reasons. We may disclose data if we believe in good faith that it is required by law, a court order, or a government request, or to protect the rights, safety, or property of Fun Based Games, our players, or the public.
• Business changes. If Fun Based Games is involved in a merger, acquisition, or sale of assets, your data may be transferred to the successor, who will remain bound by this policy.

We do not sell your personal data and we never have. We do not share it with advertisers or data brokers.

5. International transfers

Our servers are hosted by Google Cloud in the United States. If you play from the European Economic Area, the United Kingdom, Switzerland, or another country with data-transfer rules, your data is transferred to and stored in the US. Google Cloud is certified under the EU–US Data Privacy Framework and offers Standard Contractual Clauses for transfers, which we rely on for these transfers.

6. How long we keep data

• Account data: for as long as your account exists. Ask us to delete your account and we will remove it within 30 days.
• Chat messages: kept for moderation purposes. When an account is deleted, its messages are unlinked from the account. The username shown on past messages may remain in chat history; tell us if you want it removed as well.
• Gameplay data: the moves themselves are held in server memory only during a match, then discarded.
• Leaderboard records: kept while your account exists, so that the boards stay meaningful over time. Deleting your account unlinks them from you.
• Anonymous game statistics: kept indefinitely. They contain no identifiers, so there is nothing in them to expire — and their value is in comparing this year to last.
• Server and hosting logs: typically kept for 30 days by our hosting provider, and longer only if needed to investigate a specific security incident or abuse report.
• Data in your browser: stays until it expires or you clear it.

7. Security

We protect your data with measures appropriate to the small amount we hold: passwords are stored only as bcrypt hashes; all traffic to the Game is encrypted with HTTPS/WSS; login uses short-lived signed tokens; database credentials and signing secrets are kept out of the code; and access to the database and moderation tools is limited to people who need it. No system is perfectly secure, so please choose a password you do not use anywhere else, and contact us if you suspect a problem.

8. Your rights and choices

Depending on where you live (for example under the EU/UK GDPR, Israel's Protection of Privacy Law, or US state privacy laws such as the CCPA), you may have the right to:

• Access the personal data we hold about you and receive a copy;
• Correct inaccurate data (you can change your username by asking us);
• Delete your account and personal data;
• Object to, or ask us to restrict, processing based on our legitimate interests;
• Port your data to another service in a machine-readable format;
• Complain to your local data protection authority (in the EU, your national supervisory authority; in the UK, the ICO; in Israel, the Privacy Protection Authority).

To exercise any of these, email contact@funbasedgames.com. Because accounts have no email address attached, we will need to verify that you own the account — for example by asking you to log in and post a code we give you in chat. We will respond within 30 days. We will not discriminate against you for exercising your rights. Because we never sell data or use it for targeted advertising, there is nothing to opt out of in that respect.

You can also delete everything the Game keeps on your device at any time by clearing site data for relicrush.com in your browser.

9. Children

Accounts, online play and chat are for players aged 13 and over. We do not knowingly collect personal data from children under 13, and we do not require any data at all from guests playing offline modes. If you are a parent or guardian and believe a child under 13 has created an account, contact us and we will delete it. Where the law in your country sets a higher age for consenting to data processing (for example 16 in some EU countries), that higher age applies.

10. Cookies

Relic Rush does not set cookies, first- or third-party. The only persistent data is the local storage and service-worker cache described in section 2, which is used strictly to make the Game work and remember your settings, not to track you across sites. Because of this, the Game shows no cookie banner.

11. Changes to this policy

We will update this policy if our practices change — for instance if we add features that collect new data, such as match histories or email-based account recovery. The date at the top shows the current version, and we will announce material changes in the Game before they apply.

12. Contact

Fun Based Games Ltd.
Email: contact@funbasedgames.com