What the game collects, who else receives it, and how to get rid of all of it. Written to be read, not to be survived.
Last updated 24 October 2026 · Applies to the game
Keep Rolling on Android (com.tentaculo.keeprolling) and iOS,
and to nothing else.
| What | Why |
|---|---|
| Your name | Taken from your Google or Apple account when you sign in, and shown on your own profile screen. The name on the leaderboard is the one you type there, not this one. |
| Email address | Read from your Google or Apple account when you sign in, and shown back to you on your own profile screen so you can tell which account you are using. No other player ever sees it. With Apple you can hide it behind a relay address, and Apple accounts may give us no address at all. |
| An account id | A random string that identifies your save. If you play as a guest this is all we have. |
| Your progress | Coins, upgrades, weapons and keep evolutions you own, NEW GAME+ level, best runs and scores. |
| Your public profile | Best time, best bosses, number of runs and achievements unlocked, copied from your progress so other players can see them, and your charisma: the total of the gifts other players have sent you. |
| Gifts | Each gift sent in the game: which kind, the day and time, and the account ids of the player who sent it and the player who received it. It is what your profile lists as the gifts you received, and what keeps a player to one gift of each kind per day. |
| Invites | If you invite friends: the short code the game made for you, and your account id with it. When you delete your account your id is taken off the code; the code itself stays reserved, so nobody else can ever use it. If you entered a friend's code: that code, whose account it was, when you entered it, and whether you have since beaten your first boss (that is when your friend is rewarded). That record is your friend's reward as well, so it stays when you delete your account, as an account id with no name. A friend who used your code keeps their own record of it in the same way, naming your account id. |
| What you bought | Which of the paid items your account owns. The payment itself happens inside Google Play or the App Store. |
| Device identifiers | Including the advertising identifier, used to show ads and to work out which advert brought someone to the game. |
| How the app behaves | Measured with Google Analytics for Firebase, so faults can be found and the game balanced: sessions and time played, the screens you open, game events (a run starting and ending with its time, level, bosses and coins, what ended it, the cards you pick or skip, offers shown and your answers, videos watched, coins earned and spent, purchases, achievements, NEW GAME+, signing in or out), the frame rate during a run and in-game error messages, plus app version, device model, system version, language and approximate country. Filed under a random id for this install of the app, never under your name or email. Google Analytics deletes the detailed events after at most 14 months. |
| Install attribution and measurement AppMetrica, Android only |
That the game was installed and opened, sessions, and which advert (if any) led to the install; a short list of game events (a run starting and how it ended, NEW GAME+, achievements, coins spent, gifts sent, videos watched to the end, signing in, deleting the account); the revenue from ads shown and from a Keep Rolling Premium purchase (the price and Google Play’s receipt, not your payment details); and the app version, device model, system version, language, approximate location from the IP address and the advertising identifier. Filed under AppMetrica’s random id for the install, never under your name, email or account. In the EEA and the UK it sends nothing at all until you have answered Google’s consent form, and only if you allowed storing and accessing information on your device. Not linked to your account, so deleting the account does not reach it; it is kept for as long as AppMetrica’s own policy says. |
| Crash reports | If the app crashes, Firebase Crashlytics (Google) receives a report: the stack trace (where in the code it failed), device model, system version, app version, the time, and a random Crashlytics id for this install — never your account, name or email. Used only to find and fix crashes. Google keeps crash reports for 90 days. |
| Genuine-app check Firebase App Check |
Before the game talks to its online services (your save, the leaderboard, gifts and invites), Firebase App Check (Google) confirms that the request comes from the genuine Keep Rolling app on a genuine device: on Android through Google Play Integrity, on iPhone through Apple’s App Attest (or Apple’s DeviceCheck, on a device that cannot use App Attest). What it sends is an attestation of the app and the device — that this is the app we published, installed on a device that passes Google’s or Apple’s checks — and it asks again only when its pass runs out. No name, email or account goes with it, nothing beyond what Google and Apple process to make that check under their own policies. Used only to keep fake copies of the game away from the online features. |
The game does not ask for your location, your contacts, your photos, your microphone or your camera, and it holds no permission that would let it. If you allow notifications, it shows at most one reminder a day (new daily missions, a streak about to end, a companion about to leave): they are set on your phone by the game itself, nothing about them leaves the phone, and SETTINGS turns them off.
Nothing is sold, and nothing is handed to anyone not on this list.
The game shows a banner on the menus, never during a run, and offers videos you can watch in exchange for rewards such as double coins. If you are in the European Economic Area or the United Kingdom, a consent screen appears before any ad is requested, and what you choose there decides whether ads are personalised. On iPhone the game also asks for permission to track, and ads are personalised only if you allow it. You can change your answer later from Privacy settings in Options.
You can also reset or delete the advertising identifier on your phone at any time: on Android under Settings → Privacy → Ads, on iPhone under Settings → Privacy & Security → Tracking. Doing so does not stop the ads; it stops them being tied to what you did before.
The same answer governs measurement. Until the consent screen has been answered, the app sends no measurement data and reads no advertising identifier — it starts switched off and is turned on only by your reply. Where the consent screen applies, measurement keeps an identifier on your phone only if you allowed storing information on your device; if you did not, it sends only counts with no identifier attached.
There is a Delete account option inside the game. It removes your save, your profile, your leaderboard entry, the gifts you received and the account itself. It asks for a second tap to confirm, and then it is done — there is no undo. Gifts you sent stay with the players who received them, as an account id with no name once your account is gone.
If you would rather someone else did it, write to hellotentaculo@gmail.com from the address on the account, and it will be deleted. The full details are on the delete your data page.
Deleting the app on its own does not delete anything stored against your account — only the copy on that phone.
The game is not aimed at children under 13, and we do not knowingly keep anything about them. If you believe a child has an account here, write to the address above and it will be removed.
If you are in the EEA or the UK, you can ask for a copy of what we hold, ask for it to be corrected, ask for it to be deleted, or object to how it is used. One email does any of them. We do not charge for it and we do not need a reason.
If what the game collects changes, this page changes with it, and the date at the top moves. There is no other notice — so the date is the thing to look at.