Privacy Policy
Last updated: May 17, 2026
This Privacy Policy describes how RC Digital LLC ("we", "us", or "our") collects, uses, and shares information when you use Dumpling Drop (the "App"). By using the App, you agree to this Policy.
1. Information we collect
When you use the App we collect the following:
a. Anonymous account identifier
When you first open the App we generate an anonymous user ID via Supabase Authentication. This ID is not tied to your name, email, phone, or any personal contact information unless you later choose to link an identity (e.g., Sign in with Apple). The ID is stored on your device and on our servers.
b. User-provided profile data
- Username (required to use friend features) — a 3–20 character identifier you choose. Public to other users so they can find your showcase.
- Display name (optional) — freeform text shown on your showcase.
c. Game state
- Your in-game inventory of dumplings and virtual currency balance.
- Trade history with other users (sender, recipient, items exchanged, status, timestamps).
- Reports you submit and blocks you create (reporter/blocker identity is retained so we can act on the report).
d. Diagnostics
We use Apple's MetricKit to receive crash, hang, and performance reports. These are aggregated and sent by Apple after the fact and do not contain personal information.
e. Information we do NOT collect
- We do not collect your name, email, phone number, address, contacts, photos, location, or biometric data.
- We do not use third-party analytics SDKs at this time.
- We do not use third-party advertising SDKs at this time. (When we add rewarded ads in a future version, we will update this Policy and obtain consent where required.)
2. How we use information
- Operate the App: store your inventory, sync your profile, and process trades between users.
- Prevent abuse: enforce username/display-name moderation, rate-limit trades, process reports and blocks.
- Improve reliability: investigate crashes and hangs reported via MetricKit.
We do not sell your information. We do not share it with advertisers.
3. Where information is stored
Your data is stored on Supabase (powered by AWS). Authentication tokens are stored in the iOS Keychain on your device in a way that prevents them from being included in iCloud backups or transferred to other devices.
4. Data retention and deletion
- Inventory + profile: retained as long as your account exists.
- Anonymous accounts: if your anonymous account is inactive for 30 days (no successful sign-in), we automatically delete it.
- Trades: retained after settlement so the other party's history remains intact.
- Reports: retained for moderation purposes; not exposed to users.
You can delete your account at any time from Settings → Delete Account in the App. This:
- Cancels any pending trades you are part of.
- Deletes your player row (username, display name, inventory).
- Deletes your authentication record (revokes all sessions).
Deletion is immediate and permanent. We cannot recover deleted accounts.
5. Your rights
Depending on where you live (e.g., EU, UK, California), you may have the right to:
- Access the personal data we hold about you.
- Correct or delete that data.
- Object to or restrict certain processing.
- Receive a portable copy of your data.
To exercise these rights, contact us at support@dumplingdrop.app. We will respond within 30 days. The in-app account-deletion feature satisfies the right-to-erasure for most users without contacting us.
6. Children
The App is not directed to children under 13 (or 16 where required by local law). We do not knowingly collect data from children. If you believe a child has created an account, please contact support@dumplingdrop.app and we will delete it.
7. Changes
We may update this Policy as the App evolves. We will post the new Policy at the same URL with an updated "Last updated" date. Continued use of the App after a change constitutes acceptance.