Política de privacidade
Última atualização: 23 de setembro de 2026
1. Who runs Revolving?
Revolving.com is operated by PH TECH HUB INC., 12 E 49th Street, New York, NY 10017, USA. We are responsible for the personal information described here. Contact us at ask@revolving.com for privacy questions or requests.
2. What we use and why
- Game data: your chosen or randomly generated username, random browser identifier, saved board, scores, settings, collection progress and demo balances are stored locally when game saving is enabled. This helps you continue playing. The browser identifier is not a hardware identifier and is not linked to your IP address.
- Connection information: our hosting providers receive information needed to deliver and protect the site, such as IP address, requested URL, time, browser and technical errors. Hosting and security systems may process logs.
- Contact messages: if you contact us, we use your name if provided, email address, message and topic to reply and resolve the request. Do not send passwords, payment details or sensitive personal information. The contact form sends messages through AWS to our business mailbox. Short-lived hashed IP counters limit abuse.
3. Features that are not live
Paid points, subscriptions and advertising rewards are currently demos, not real transactions or third-party advertising. Current automatically generated usernames do not involve an IP location lookup. Display advertising remains disabled. Google Ads campaign measurement and Google Analytics are described below. We will update these notices and obtain any required choices before activating new data uses.
Optional Google sign-in and profile
You can connect Google to retain your player identity across devices. Google and our AWS authentication service process the sign-in. We use the verified account identifier and, when available, profile photo to connect your player. Your email is not displayed in your Revolving profile, menu or rankings. Google’s own account chooser may show your email to you. Your profile photo appears in your profile and menu. An optional country flag is public beside your username and scores. A country suggestion uses your device time zone; you can change it or choose no flag. We do not obtain your city or precise location through this feature.
Online leaderboard
When you play with the online service connected, your username and best scores are sent to our AWS leaderboard and displayed publicly on the game and homepage. The service stores a random player ID and a hash of your player access token; the browser holds the token. Enable game saving to retain that identity between visits. Clearing browser data can lose access. Case-insensitive username reservations remain unavailable after renaming. Contact us for a privacy request; a name-only reservation may remain to prevent impersonation. Short-lived hashed registration counters help limit abuse. Ranked scores are checked by replaying signed game sessions on our server. Offline and practice runs do not enter verified rankings. Demonstration bots are clearly labeled and are not stored as real players or counted as activity.
4. Service providers and disclosures
Amazon Web Services hosts and delivers the site. GoDaddy manages the domain and its redirect. The games use system fonts and first-party visual assets. Our business email service processes correspondence when you contact us. Providers may process data to operate and protect their services. We may also disclose information where legally required, to protect rights and security, or during a business reorganization subject to applicable privacy safeguards. We do not publish contact messages.
Optional visit statistics
Google Analytics and Google Ads measure visits, page views and campaign attribution using one Google tag. The tag loads on public pages with regional Consent Mode defaults: storage and advertising consent are denied until acceptance in the EU/EEA, United Kingdom and Switzerland, and granted by default elsewhere. A saved choice overrides these defaults. When consent is denied, Google may receive cookieless measurement pings. Where storage is permitted, Google uses browser identifiers. Google receives the full page URL, including campaign parameters such as gclid and utm_*, and the referring page. We do not add usernames, email addresses or contact form content to analytics events. Google signals remain disabled. Our CDN provides a country code to determine whether to show the cookie notice; the site does not request precise location. Rejecting or withdrawing updates all four consent signals and removes our Google measurement cookies; cookieless measurement can continue. This does not erase data already received by Google. Kids game pages use Analytics for visits and game start/end statistics only. They do not configure the Google Ads tag: ad storage, advertising user data and ad personalization remain denied, with no remarketing or ad banners. Authentication callbacks do not load the tag. You can manage your choices in Cookie preferences and still play. See Google’s Privacy Policy for its processing.
5. Legal grounds where relevant
Where European or UK data protection law applies, we rely on providing the service you request for core gameplay, legitimate interests for proportionate security and responding to inquiries, legal obligations where applicable, and consent for optional storage or uses that require it. You can withdraw consent without affecting earlier lawful processing.
6. Retention
Saved game information remains in your browser until you clear it, the browser removes it, or it is replaced by play. Choosing session-only play stops further persistent game saving; it does not erase earlier saves. We retain correspondence for handling your request and necessary follow-up, then delete or de-identify it unless legal, security or dispute reasons require longer retention. Hosting logs and provider backups follow their configured lifecycles; there is no single retention period for all systems. Contact us for information about records relating to you.
7. Your choices and rights
Usar Preferências de cookies to manage future game saving, or your browser’s site-data settings to erase local records. Clearing local data can permanently remove scores, usernames and collections. We cannot recover local-only saves. Depending on your location and applicable law, you may request access, correction, deletion, portability, restriction, or object to certain processing. You may also appeal a denied request where available or complain to your local data protection regulator. Contact ask@revolving.com or use Delete account in your account menu. Deletion is a request handled by our team, not an instant browser reset. We verify identity proportionately. Under the GDPR we normally respond within one month; if a permitted extension is necessary, we explain it within that first month. We do not penalize you for exercising privacy rights.
8. International processing and security
We operate in the United States and providers may process information in other countries. Applicable cross-border safeguards must be in place for transfers subject to European or UK law. We use HTTPS and access controls, but no online service is completely secure. Do not use a sensitive or identifying username.
9. Children
Revolving is intended for people aged 13 and older, not children under 13. Do not use the service or send us personal information if you are under 13. A parent or guardian can contact us about a child’s data. If we learn that information was collected from a child in circumstances requiring parental permission without that permission, we will take appropriate steps to remove it or meet applicable requirements. The availability of a game is not a representation that it is suitable for every age.
Advertising choices
Advertising delivery is currently disabled pending approval and consent integration. Before ads are enabled in games, a Google-certified consent platform will collect the applicable choices. Refusing advertising consent will not prevent normal play. Optional rewarded ads will clearly explain the reward before you choose to watch. Closing or skipping an ad does not grant a reward. No advertising is planned on the homepage. Advertising preferences will remain accessible from Cookie preferences.
10. Updates
We will revise this page when our practices change and provide additional notice when required. The date above identifies this version.
Services currently used
Amazon Web Services hosts the site and stores player profiles, signed game sessions and verified scores. GitHub stores the website source and supports deployment. Google Analytics measures visits under the regional Consent Mode defaults and your saved choice. Game fonts do not require requests to a third-party font service. Optional Google sign-in links a Google account to a player profile. Google Ads uses the same consent settings for campaign measurement. Display ad delivery and Apple sign-in remain inactive.
For abuse prevention, we process short-lived hashed IP and device identifiers. Signed game sessions expire after six hours; verification receipts expire after seven days. Published scores and reserved usernames remain until handled under our retention and deletion policy. Daily and weekly ranking periods use UTC.