Restock Privacy Policy

1. Data controller

The controller responsible for processing your personal data is Domènec Garrofé (a natural person), an independent developer operating under the RantGames brand, based in Spain.

• Contact and to exercise your rights: dgarrofe@rantlabs.com

This policy applies to the mobile game Restock ("the Game"), available on Google Play and the App Store.

2. Quick summary

• The Game is free. There are no ads, no in-app purchases, and we do no advertising tracking or profiling.
• We only collect data if you choose to take part in the global ranking and match telemetry. You can decline and keep playing normally.
• Data is stored on Supabase servers in the European Union (region eu-west-1, Ireland).
• We do not sell or share your data with third parties.
• You can ask us to delete your data at any time by writing to dgarrofe@rantlabs.com.

3. What data we collect and why

We only process data if you accept the dialog shown the first time you open the Game. That data is:

Data	What it is	Purpose
Nickname	A handle you choose. It is public: it appears next to your scores in the Game's global ranking.	To identify you in the global leaderboard.
Installation identifier	A random code (UUID) the app generates on your device the first time it runs. It is not your phone's identifier or a hardware ID, and it cannot identify you as a person outside the Game.	To link your scores to your installation and prevent duplicate ranking entries.
Match telemetry	Gameplay statistics: round reached, highest combo, credits earned, provider used, and similar progress data. Optional.	To build the ranking, understand how the Game is played, and balance its difficulty.

We do not collect your real name, your email (unless you write to us), your location, your contacts, or any payment data.

Nickname filter

To keep the ranking suitable for all audiences, the nickname you choose is run through an automatic offensive-language filter in five languages (Spanish, English, German, French, and Portuguese). If the filter detects a disallowed term, you will be asked to pick another one. This filtering is performed on the nickname text itself and involves no additional processing.

4. Legal basis (GDPR)

The legal basis for all processing described here is your consent (Article 6(1)(a) GDPR), which you give explicitly through the dialog shown on first launch of the Game.

• Consent is freely given and optional: if you decline, the Game works the same, you simply do not take part in the global ranking and no telemetry is sent.
• You can withdraw your consent at any time by asking us to delete your data (see section 7). Withdrawal does not affect the lawfulness of processing carried out beforehand.

5. Who we share data with

• We do not sell, rent, or transfer your data to third parties for commercial or advertising purposes.
• We use a single infrastructure provider, Supabase, which acts as a data processor and hosts the database and server-side functions. Data is stored in the European Union (Ireland, region eu-west-1).
• Your nickname and associated scores are publicly visible inside the Game to other players, since that is the purpose of the ranking.
• We may disclose data to public authorities where required by a legal obligation.

6. How long we keep data

We keep your nickname, installation identifier, and associated telemetry for as long as the global ranking is active, or until you request deletion. If you stop playing, you can ask us to delete your data at any time.

7. Your rights

You have the right to access your data, rectify it, erase it ("right to be forgotten"), restrict or object to its processing, and to data portability.

To exercise any of these rights, write to dgarrofe@rantlabs.com and tell us your nickname. There is a server-side function (delete_my_data) that permanently removes your nickname and all telemetry linked to your installation identifier; we run it manually when we receive your request and confirm once it is done.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), or with the supervisory authority in your country of residence.

8. Children

The Game carries a 12+ age rating, because the ranking displays user-generated content (the nicknames). It is not directed at children under that age and we do not knowingly collect data from children under 12. If you are a parent or guardian and believe a child in your care has provided us with data, contact us and we will delete it.

9. Security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored on Supabase infrastructure, which applies access-level and database-level security measures.

10. Changes to this policy

If we change this policy, we will update the "last updated" date and, if the changes are significant, we will indicate this in the Game or on this page.

11. Contact

Any privacy questions: dgarrofe@rantlabs.com