HOLD · REVORN TECHNOLOGIES LLC

Privacy policy.

Last updated: September 27, 2026

This policy describes how REVORN TECHNOLOGIES LLC (“REVORN”, “we”) handles information in HOLD on iOS, Android, and this website. Features and data processing depend on the version you use.

Playing and local storage

HOLD stores your personal best, recent score, number of runs, play time, sound and haptic preferences, selected country, and a randomly generated installation identifier on your device. A local activity history retains up to 200 gameplay events. The local history stays on your device. If you enable Usage analytics in Settings > Privacy, future selected events are also sent to Revorn; existing local history is not uploaded. We do not record your finger movements.

Country selection is manual. HOLD does not request contacts, camera, or microphone access. The optional Nearby feature requests location permission only when you enable it. Advertising providers may infer a general location from your IP address.

Connection IP and optional competition

Competition profiles and analytics registrations from older app versions retain the connection IP address for security, abuse investigation and, when Usage analytics is enabled, approximate geographic analysis for up to seven days, with daily cleanup. A forwarded client IP is used only when supplied by a configured trusted proxy. These IPs are not public and are not included in leaderboard or Nearby responses.

Nearby is off by default. Enabling it requests high-accuracy location once to find players within about 100 metres. HOLD receives your latitude, longitude and reported accuracy; the server rounds coordinates to about a metre. Only your nickname and optional username are shown to other players, never coordinates or exact distances. Visibility expires after 15 minutes. Stop being visible removes stored location immediately; expired locations are removed by daily cleanup, up to about 24 hours after expiry. There is no background tracking. Device location may be inaccurate or spoofed.

Firebase accounts let you use the same competition profile on web, iOS and Android. Optional username discovery lets others find your exact @username and send invitations. There is no email or contact search. Older versions may still use separate device-local guest profiles that expire after 30 days. Challenges have two participants and one attempt each. Invitations expire after 24 hours and challenges are removed seven days after expiration; account deletion removes associated challenges. Scores are client-reported with timing checks, not independently verified gameplay. Sharing an invite happens only when you choose it.

Basic usage analytics

Starting with build 13, basic usage analytics is enabled by default from the first opening, including guest play, with no account required. An existing explicit opt-out is respected. Revorn stores random installation and session identifiers, app openings, first observed installations, gameplay and ad events, opening Settings, Compete, Shop and Account, platform and app version in PostgreSQL. These are pseudonymous records. Basic-mode records do not store email, device model, OS version or advertising ID. A reported public connection IP may be stored on the installation record for up to seven days plus daily cleanup. The source distinguishes a direct connection, trusted proxy or unverified forwarded header; unverified values can be spoofed and are not used for access control. Private proxy addresses are not treated as player IPs. This is the last upload connection, not a historical location of offline events. IP addresses are not used as unique player identifiers. When Usage analytics is on and you explicitly enable Nearby and grant device location access, a separate nearby_enabled event stores coordinates rounded to 0.1 degrees for aggregate usage maps, retained up to 30 days. No background location is collected for analytics. Disabling Nearby removes its precise visibility location; to delete the separate approximate analytics event, turn Usage analytics off. Hosting infrastructure necessarily receives your connection IP to serve the request. Older app versions only send analytics after opt-in and may include device/OS information and approximate geography under the previous disclosures.

First openings measure apps actually opened, not downloads that were never launched. Existing installations first observed after an update are counted separately from first openings. Clearing local storage or reinstalling may create a new identifier. Offline events retry for up to six days. Records expire after 30 days and are removed by daily cleanup, so reports are a rolling measurement rather than a lifetime download total.

You can turn Usage analytics off in Settings > Privacy. This stops new uploads, clears unsent events and requests deletion of this installation’s uploaded analytics. Offline deletion retries on reconnect; simply uninstalling does not send a deletion request. Basic analytics is not linked to your login account. AppsFlyer and Android Advertising ID measurement remain separate opt-ins. Contact support for access or deletion assistance.

Optional Android Advertising ID analytics

A separate Advertising ID analytics setting is off by default. If you enable it, HOLD sends your Android advertising ID and daily gameplay/ad event counts to Revorn for usage analysis. These records are kept separately from account, email, installation, session, IP and location records, for up to 30 days plus daily cleanup. We do not read the ID before opt-in or use a fallback identifier when Android limits tracking or removes the ID. On detecting a reset or deletion, we request deletion of the old records before recording any new ID. Turning this setting or Usage analytics off requests deletion; offline requests retry on reconnect. Uninstalling does not send a deletion request. No extra ads are introduced. Network infrastructure still processes connection IPs to serve requests, but we do not store them in these analytics tables.

Optional AppsFlyer measurement

On Android and iOS, a separate AppsFlyer measurement setting is off by default, including for existing users who enabled other analytics. When enabled, AppsFlyer measures installs, sessions, gameplay milestones, completed sharing and confirmed removal-of-ads purchase events. We assign an independent random installation ID as the Customer User ID; it is not your Firebase account, email or Revorn advertising-analytics ID. The SDK also processes app/device information, its own identifiers, connection IP and available install attribution information. These are pseudonymous data. This integration disables advertising identifier collection (including Android advertising ID and Apple IDFA), Android App Set ID, IMEI/Android ID fallback and Apple Search Ads collection. It does not send passwords, email or precise location, and partner postbacks are disabled. Attribution coverage is limited by these settings and by starting only after opt-in.

Turning the switch off stops future AppsFlyer measurement. It does not automatically delete records already held by AppsFlyer, and Revorn’s 30-day telemetry retention does not apply to AppsFlyer. Contact our support team with the Measurement ID shown in Settings > Privacy for access or deletion requests; uninstalling alone does not submit a request. Provider retention and processing are described in AppsFlyer’s services privacy policy. The website does not initialize this native SDK.

Advertising in the mobile apps

The mobile apps integrate Google AdMob to serve ads. Google and its advertising partners may process IP addresses, approximate location, device or app identifiers, device information, ad interactions, and diagnostic data to deliver and measure ads, maintain their services, and prevent fraud. Non-personalized ads can still involve data processing and device storage. HOLD currently requests non-personalized ads and does not request iOS tracking permission.

Where applicable, a consent message lets you choose how your information is used. When available, you can revisit these choices in Settings > Privacy → Ad privacy choices. See Google’s privacy policy and how Google uses information from partner apps. This browser version does not load the native AdMob SDK.

Optional purchases

When purchases are available, Apple or Google processes payment and RevenueCat validates purchases and restores access. Purchase processing can include an anonymous app user identifier, transaction history, receipts or purchase tokens, entitlement status, and technical information. We do not receive your full payment-card details. See RevenueCat’s privacy policy. A version that says purchases are unavailable cannot complete this purchase.

Optional Firebase accounts and rankings

Connected versions use Firebase Authentication for email/password sign-in, verification and password reset, and supported Google, Apple or Facebook sign-in. If you choose a social provider, that provider handles authentication and shares the identity information you authorize with Firebase. Native Facebook sign-in uses Limited Login on iOS; automatic Facebook app-event logging and advertising identifier collection are disabled. Passwords are handled by Firebase, not the HOLD API. Revorn stores your account identifier, verified email when available, chosen nickname, optional username, selected country, personal best and online run scores in its PostgreSQL service. Signing in is optional; offline play remains available. See Firebase privacy information.

Public rankings and username discovery are separate opt-ins. Ranking responses contain nickname, country and score, never email or authentication identifiers. Disabling publication hides your entries without deleting private records. Your account screen supports export and deletion after confirming your identity with your password or sign-in provider. Completed runs remain until account deletion; abandoned runs and rate-limit counters are removed after one day by scheduled cleanup. Deletion removes runs/challenges, clears the profile and deletes the Firebase account. A restricted deletion marker remains for seven days; failed provider deletions are retried. Backups and provider records may have separate retention periods. Store purchases remain managed by your app store.

Friend invitations

If you use referral rewards, Revorn stores your invitation code, the account relationship between inviter and invited player, and the claim, reward and ad-free expiration times. This verifies eligibility and prevents duplicate rewards. Your invitation link contains a random code, not your email. We do not access your contacts or send invitations automatically. Referral relationships are removed when either account is deleted; an already earned benefit on the remaining account may continue until expiration.

Support and this website

If you contact REVORN, we process the contact information and details you provide to answer your request. Please do not send passwords or full payment-card information. Website hosting services may process IP addresses, browser information and access logs to deliver and secure the site. This game website does not include a separate web analytics or marketing-tracking script.

Purposes, sharing and retention

We use information to operate the game, remember preferences, provide requested services, validate purchases, respond to support, prevent fraud and meet legal obligations. Where required, optional advertising processing relies on your consent; other processing may be necessary to provide a requested service, protect the service, or comply with law. Information is shared with the providers described above as needed for these purposes, or when legally required.

Local data remains until you clear the app or browser storage; uninstalling may remove it, subject to your device’s backup settings. Account data is retained while your account remains active, subject to deletion and any necessary legal or security retention. Support and transaction records are retained as needed to handle requests, restore purchases, prevent fraud or comply with legal requirements. Providers may retain records under their own policies. We do not promise that deleting the app deletes data held by those providers.

Your choices and requests

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal information, object to or restrict certain processing, withdraw consent, or complain to a privacy authority. To make a request, use our support page and identify HOLD and the relevant platform. We may need information to verify your request. Removing local data does not cancel a store purchase.

Children and international processing

We do not knowingly collect personal information from children below the applicable age of consent without required authorization. If you believe a child has provided personal information, contact us so we can investigate. REVORN and its providers may process information outside your country, including in the United States, under applicable data-protection requirements.

Changes and contact

We may update this policy as HOLD changes. The date above identifies the latest revision. For privacy questions, contact REVORN TECHNOLOGIES LLC through HOLD support.

Google Firebase Analytics on mobile

Build 13 adds Firebase Analytics to Android and iOS under the Usage analytics setting. Google receives app usage events using its own installation identifier and SDK-provided device, OS and approximate geographic information. We do not send account IDs, email, custom IP parameters or Nearby coordinates to Firebase Analytics. Advertising ID collection and advertising personalization are disabled for this integration. Turning Usage analytics off stops future Firebase collection and resets local Firebase analytics data; it does not delete previously uploaded Google records. Contact support for data requests. Web usage currently goes to the Revorn API only.