REDØUBT Privacy Policy

Last updated: 13 October 2026. Publisher: Hayterwave Media LLC.

This policy says what REDØUBT handles, why, and what you can do about it. It covers the Android app, the browser game at play.hayterwave.com and the pages at hayterwave.com/redoubt.

Short version: you can play the whole game with no account. Your progress stays on your device. If you use cloud saves, you pick a username and a PIN. Online play without an account still sends a random player id, your display name, your scores and your base layout. We never ask for your name, email address or phone number. Ads come from Google.

1. Kept on your device

Your base, unlocks, currencies, cosmetic choices, settings and purchase entitlements are saved on your device. We do not receive a copy unless you turn on cloud saves. In the pause menu, Reset Progress removes the save on this device. It does not delete an online account. If you use NFC cards, the card serial is saved on your device with the rest of your progress. Uninstalling the app removes the local save from the device. If Android backup is on for your Google account, it may restore the save when you reinstall.

2. Optional online account

Cloud saves are optional and need an account: a username you choose and a numeric PIN. Leaderboards, clans and raids work online without an account. When you play online, the game gives your device a random player id and sends it to our server with your display name, your scores and your base layout. When you use these features, our server stores:

your username, a hash of your PIN, and your saved game state;
leaderboard scores, rank and progress numbers;
your base layout, so other players can raid it, and the records of raids you attack or defend;
clan membership and the messages you send in clan or global chat;
reports you file about chat messages, and reports filed about you, with the reported message text quoted in the report;
a referral code, if another player invited you.

The app keeps a sign-in token on your device, not your PIN. The server stores a hash of your PIN and a hash of each token. Signing in on a sixth device ends your oldest session.

Global chat keeps only the newest 100 messages, and each clan chat keeps only the newest 60. Chat is visible to other players, so do not post personal information in it. You accept chat rules before your first message. A word filter screens chat. You can report a message and block a player.

The server runs on Cloudflare (Workers and D1). Cloudflare processes this data for us and keeps standard server logs, which include IP addresses, for security and abuse prevention.

3. Ads

The game shows ads. In the Android app they come from Google AdMob, as interstitial ads and as optional rewarded ads. In the browser they come from Google AdSense. Rewarded ads appear only when you choose to watch one.

Where the law requires it, the app asks for your consent before it requests ads. If the consent check fails, ads are not started for that session.

Through AdMob, Google may receive your device advertising identifier, approximate location derived from your IP address, ad interaction data, and diagnostic information such as launch time and crashes. In the browser, Google uses cookies. Your choices:

Opt out of personalised ads in Google Ads Settings.
Reset or limit your advertising ID in Android under Settings, Privacy, Ads.
Opt out of third party vendor cookies at aboutads.info/choices.
Buy Remove Ads to stop interstitial ads. Rewarded ads stay available because you choose them.

4. Purchases

In the browser game only, optional Bitcoin payments over Lightning go through our server, which creates the invoice and checks whether it was paid. The Android app does not offer them.

In the Android app, purchases are handled by Google Play. RevenueCat validates and restores what you own, using an anonymous app user id. It receives no email address and no name from us. We never see your card details. The app grants items from what RevenueCat reports, and our own server holds them only as part of a cloud save if you use one.

5. What we do not collect

We do not collect your real name, email address, phone number, contacts, photos, precise location, microphone or camera data. We do not sell personal information. We run no analytics or crash reporting of our own beyond what Google ads provide.

6. Children

REDØUBT is for people aged 13 and over. It is not directed to children and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us data, write to us and we will remove it.

7. Deleting your data

In the app, open the account panel and choose Delete Account. This removes your username, hashed PIN, cloud save and sign-in sessions, and every online record tied to your player id: your leaderboard entry, base layout, chat lines, clan membership, reports about you and referral links. Raid records stay for the other player, with your name and id replaced by an anonymous one. If you never made an account, write to us with your friend code and we will remove these records.

If you cannot open the app, use the account and data deletion page. Depending on where you live, you may also have the right to access, correct or export your data. Write to us and we will answer.

8. Changes

If this policy changes, the date above changes, and material changes appear here before they take effect.

9. Contact

Questions or data requests: support@hayterwave.com.

Prefer to talk first? The Discord is open, but data requests go to the address above.