Rabbit Royale

English Français Español Italiano Português (Brasil) Tiếng Việt 简体中文 日本語

Privacy Policy

Last updated: November 7, 2026

Rabbit Royale is a free-to-play game. We collect as little as we can: no password, no phone number, no real name. We show only optional rewarded video ads, which you choose to watch, and sell no data. We measure how the Game is played and collect crash reports, with Google Firebase, to make it better — and if you are in Europe, we only measure with your permission.

This policy covers Rabbit Royale in the Google Play and App Store apps and on rabbit-royale.com (together, “the Game”). The Game is published by GRAVITY 5, a French simplified joint-stock company (SAS) registered in Créteil under number 931 799 860, 6 bis Rue Jean Mermoz, 94450 Limeil-Brévannes, France (“we”, “us”), which is responsible for your data.

1. What we collect

Your account

Your game

Game progress and state: carrots and score, energy, items, your burrow layout, quests, seasons and rankings, and your interactions with other players (raids, traps, fences and other in-game actions).

Purchases

The Game sells Gold, its in-game currency, in packs: through Google Play in the Android app, through Apple in the iOS app, and through Stripe on the website. The store or Stripe handles the payment; we receive the pack bought, its price and currency, the date and a purchase ID, to deliver your Gold and to take it back if the payment is refunded or disputed. We never see your card or bank details.

Technical data

Like any server, ours sees your IP address and device or browser details when you connect. They may appear in short-lived server logs used for security and debugging; we do not store them in your account or use them to track you.

Website visits (rabbit-royale.com)

The pages of this website (not the Game itself) count visits with Umami, a privacy-friendly analytics tool that we host ourselves in the European Union (Hetzner, Germany). It sets no cookie, builds no profile and does not store your IP address: it only records the page viewed, the referring site, and your browser, device type and country, in aggregate.

How you play (analytics)

We use Google Analytics for Firebase to understand how the Game is played: which screens you open and for how long, where you tap (the position on the screen and the button touched), how far you get in the tutorial, your games, raids and defences, and when you pause or leave. These events are linked to your player ID, not to your name or email.

Firebase also collects, on its own, your device model, operating system, app version, language, screen size, a random app-instance ID and your approximate location (country and region, worked out by Google from your IP address — we never see a precise location). On Android it uses your device’s advertising ID; on the web it sets Google Analytics cookies (_ga, _ga_*). We do not use any of this to target ads. Rewarded ads are described in the next part.

In the European Union, the EEA, the UK and Switzerland, the Game asks for your consent the first time you open it, and nothing is measured unless you accept (refusing is as easy as accepting). Elsewhere, measurement is on by default. Everywhere, you can change your choice at any time in the Game’s settings.

Crash reports

When the Game crashes or hits an error, a report is sent so we can fix it: what went wrong and where in the code, the screen you were on, your level, the app version, your device model and operating system, and your player ID. This goes through Firebase Crashlytics in the apps and through Google Analytics on the web. Crash reports are sent whatever your analytics choice, because we need them to keep the Game working (our legitimate interest).

Push notifications

If you allow notifications — the Game asks after your first real game, never before — we store a device token from Google Firebase Cloud Messaging, with your language and your time zone offset, so we can write in your language and never at night. We use them to tell you that your burrow is being raided or was raided, that your garden or your energy is full, or, once or twice, that you have not played for a while. At most a few per day. You can turn them off at any time in your device settings; the token is deleted when you sign out, when it stops working, or with your account.

Rewarded ads (optional)

The Game can offer an optional rewarded video ad: it is shown only when you choose one, to get a Défi life, and never otherwise. We show no other kind of ad. The videos are served by Google AdMob in the mobile apps (Android and iOS), and by Google H5 Games Ads on the web, once enabled. To serve and measure the ad, Google may use your device’s advertising ID and device data, under its own policy: how Google uses data in ads. On iOS, Apple’s tracking prompt (App Tracking Transparency) asks first; if you decline, the ads you see are non-personalised.

In the EEA and the UK, a Google-certified consent form asks for your choice before any ad is requested, and you can change it at any time in the Game’s privacy dialog, under “Ad choices”. We still sell no data.

2. What stays on your device

The Game keeps a few things in the app’s local files or your browser storage: your session (so you stay signed in), your language, sound settings, your analytics and notification choices, and a few “already seen” flags for the tutorial. In a browser, our server also sets one cookie of its own, rr_session, which keeps you signed in for up to 30 days, and — only if measurement is on — the Google Analytics cookies described above. We do not use any of these for advertising or cross-site tracking. A guest account exists only through the session stored on your device: if you uninstall the app or clear its data, a guest account cannot be recovered. Save your burrow with Google or your email to keep it.

3. Why we use it

We do not sell your data or use it to build advertising profiles of our own. When you choose to watch a rewarded ad, Google serves it as described above. Our legal bases are the performance of our agreement with you (running the Game, letting you sign in, sending the notifications you allowed), your consent for analytics in the EU, EEA, UK and Switzerland and for ad personalisation and ad-related device data in the EEA and UK (you can withdraw it at any time in the settings and in “Ad choices”), and our legitimate interest in measuring and improving the Game elsewhere, fixing crashes and keeping it secure.

4. What other players see

Rabbit Royale is multiplayer. Other players can see your rabbit name, avatar, score, burrow level and whether you are online, on the leaderboard and on the islands. Your burrow can be visited and raided. Other players never see your email address.

5. Who else processes data

6. How long we keep it

7. Your rights

You can ask us for a copy of your data, to correct it, or to delete it. You can delete your account yourself from the Game, or by email: see Delete your account. You can withdraw your analytics consent at any time in the Game’s settings, change your ad consent in the privacy dialog under “Ad choices”, and turn notifications off in your device settings. You also have the right to object, to restrict processing, to data portability, and to lodge a complaint with a data protection authority — in France, the CNIL.

8. Children

The Game is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, contact us and we will delete it.

9. Security

Connections to the Game are encrypted (HTTPS), sessions are signed, and we store no passwords. No system is perfectly secure, but we keep what we hold to the minimum.

10. Changes

If this policy changes, we will update it here and change the date at the top. For significant changes, we will let you know in the Game.

11. Contact

Questions or requests: support@gravity5.pro, or by post to GRAVITY 5, 6 bis Rue Jean Mermoz, 94450 Limeil-Brévannes, France.