Privacy Policy

Who operates RPS Royale

RPS Royale is operated by Hamed Ansarian, based in Austria. You can reach us at info@rpsroyale.fun with privacy questions, requests, or security reports.

Information we collect

Guest accounts: a display name you choose and an opaque session identifier for the current browser session.
Verified accounts: an account email where you supply one, your chosen display name, account type, and authentication identity metadata from the email/password or OAuth sign-in method you use.
Gameplay data: game statistics, your virtual-point balance, room participation, and wager records tied to your account or guest session.
Technical data: an opaque session token, browser sessionStorage used to keep you connected to a room, and authentication cookies used only to correlate an OAuth sign-in attempt.
Aggregate usage counters: we count, per day, how many rooms are created and started, how many players join, and how often invite and share buttons are used, along with a coarse traffic source category (for example "search" or "invite link"). These counts are not linked to you, your device, your IP address, or your session, and we do not use cookies for them.

How and where information is stored

RPS Royale runs on Cloudflare. Account and gameplay records are stored in Cloudflare D1 (a SQL database), short-lived session and lookup data is stored in Cloudflare KV, and live room state is held in Cloudflare Durable Objects for the duration of a game. Cloudflare Workers also produce operational logs used to run and secure the service.

Signed-in session tokens (Cloudflare KV): kept for up to 30 days, or until you sign out.
Room join codes (Cloudflare KV): kept for up to 24 hours.
Matchmaking and connection tickets (Cloudflare KV): kept for 60 seconds, used once to establish a game connection.
Live and just-finished room state (Cloudflare Durable Objects): kept for the duration of a game plus up to 5 minutes after it ends, then discarded.
Account, statistics, and match-history records (Cloudflare D1): kept while your account exists. You may request deletion at any time (see "Your rights and choices" below).
Operational Worker logs: kept only for the limited period needed to operate and secure the service, consistent with Cloudflare's platform defaults, and are not used for advertising or profiling.
Aggregate usage counters contain no personal identifiers and are kept indefinitely.

Why we process this information

To operate account access and guest sessions.
To run games: matchmaking, room membership, choices, scoring, and virtual-point wagers.
To prevent abuse and secure the service.
To provide support when you contact us.
To comply with legal obligations where applicable.

Virtual points

Virtual points are in-game, non-redeemable points used for gameplay wagers within RPS Royale. They have no monetary value and cannot be purchased, redeemed, transferred, or withdrawn for cash or any other consideration.

Advertising and cookies

RPS Royale may display advertising provided by Google AdSense. Advertising is intended to appear only on public content pages — the How to play guide and the Rock-Paper-Scissors tournament and strategy guides — and never on gameplay, room, lobby, result, sign-in, or legal screens.

To connect this site to our AdSense account, our home page and our public guide, reference, and help pages load Google's advertising script from Google's servers when the page opens, even where no advertising is shown on that page. Game rooms, error pages, and our About, Contact, and legal pages do not include the script themselves. If you first open a page that includes it and then continue to another page, such as a game room, in the same browser tab, the script that already loaded stays active until the tab is closed or reloaded. Like any request to a third party, this reveals your IP address and browser details, such as your user agent, to Google. It does not depend on your advertising choice. Google's own disclosures describe how it handles that information.

Where the law requires your consent to advertising cookies and similar technologies, for example in the European Economic Area, the United Kingdom, and Switzerland, we use Google's Funding Choices consent management platform, which follows the IAB Transparency and Consent Framework. Google's consent tool governs whether ads and advertising cookies are used where consent is required. RPS Royale's own code requests an ad only after that platform reports that you have consented, or that consent is not required for your location, in which case advertising may load without a prompt. Google may then use cookies and similar technologies to serve and measure ads; see Google's own disclosures at https://policies.google.com/technologies/partner-sites for how Google uses information from sites that use its services.

You can review or withdraw your advertising choice at any time with the "Privacy & ad settings" control in the site footer. Withdrawing consent hides the ad and stops further ad requests from the page, and declining never affects your ability to play. The choice is stored by the consent platform in your browser. No preference kept by RPS Royale itself can switch advertising on: if the consent platform is not in use or cannot be reached, no advertising is requested until it can be.

If you use an ad blocker, Google's Funding Choices service may show you a message asking you to allow ads on this site. That message is provided and configured through Google's service; RPS Royale does not detect ad blockers itself, and playing the game never depends on it.

Outside of advertising, RPS Royale does not use third-party analytics or tracking cookies. The technical identifiers described above (session tokens, sessionStorage, OAuth correlation cookies) are used only to operate the game and are not used for advertising or cross-site tracking.

We share information only with the infrastructure and service providers needed to run RPS Royale: Cloudflare (hosting, storage, and security), the email or OAuth identity provider you choose to sign in with, and Google (AdSense and Funding Choices, as described above). We do not sell your information.

Your rights and choices

You may request access to, correction of, or deletion of your account information at any time by contacting info@rpsroyale.fun. We will respond to verified requests within a reasonable time and confirm once a deletion request has been completed. If you are located in the European Economic Area, you also have the rights available to you under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority.

Children's privacy

RPS Royale is a simple, general-audience game and does not collect birthdates or otherwise verify age. We do not knowingly direct advertising or data collection specifically at children, and we do not request more information from a player than is described above regardless of age. If you are a parent or guardian and believe your child has provided us with information beyond what this policy describes, contact us and we will address it.

Changes to this policy

If this policy changes, we will update the effective date above and describe what changed in the list below. Continued use of RPS Royale after a change takes effect means you accept the updated policy.

2026-09-19: initial published version.
2026-09-19: clarified that Google's advertising script is loaded on every page of the site, that Google's consent tool governs advertising cookies where consent is required, and that RPS Royale's own ad requests still wait for consent.
2026-09-23: added an aggregate usage counters disclosure describing per-day counts of rooms created and started, players joining, and invite/share button use, plus a coarse traffic source category; these counts are never linked to a device, session, or IP address and are kept indefinitely.
2026-10-01: clarified that advertising also appears on the Rock-Paper-Scissors tournament and strategy guide pages, alongside the How to play guide.
2026-10-02: Google's advertising script now loads only on the home page and on public guide, reference, and help pages, not on game rooms, error pages, or the About, Contact, and legal pages.