Privacy Policy

This Privacy Policy explains how Reverb accesses, uses, protects, and shares the data needed to provide its online features.

1. Data Controller and Contact

Reverb is a video game developed and published by Jotabelike. For questions about privacy, data access, correction, or deletion, contact jotabelike@gmail.com.

2. Data We Process

• Account data: username, email address, account creation date, and a cryptographic representation of the password. Reverb does not store passwords as readable text.
• Profile and gameplay data: selected cosmetics, virtual currency, completed levels, wins, accuracy, rewards, ratings, downloads, and reports.
• User-provided content: created levels, names, descriptions, difficulty, and other data included when publishing or synchronizing a level.
• Technical and security data: IP address, session identifiers, access dates, and request information needed to limit abuse, investigate incidents, and maintain the service.
• Local data: settings, controls, unpublished levels, and custom music files may remain on the device. Custom music selected in the editor is not uploaded with shared levels.

3. How We Use Data

• Create and authenticate accounts and maintain secure sessions.
• Synchronize levels, profiles, progress, rewards, and cosmetics.
• Provide community features such as profiles, levels, leaderboards, and ratings.
• Prevent fraud, abuse, spam, unauthorized access, and reward manipulation.
• Moderate reported content and maintain service stability.

4. Public Information

Your username, equipped profile items, visible statistics, and published levels may be seen by other players. When a level receives an official rating, its name, author, difficulty, and reward may be posted in Reverb community channels on Discord. Email addresses and passwords are never made public.

5. Service Providers and Disclosure

Reverb uses Cloudflare Workers and Cloudflare D1 to host its API and database. Cloudflare processes technical data as an infrastructure provider. Discord may receive public level information for community announcements. We may also disclose information when necessary to comply with a legal obligation, protect users, or investigate abuse.

We do not sell personal data or share it for targeted advertising.

6. Security

Communication with the server uses HTTPS. Passwords are protected using individually salted hashes, session tokens are stored securely, and request limits and audit logs are used. No system is infallible, but we maintain reasonable safeguards to reduce unauthorized access, alteration, or disclosure.

7. Data Retention and Deletion

Account data is retained while the account remains active. Sessions expire no later than 7 days after creation and may also expire after 24 hours of inactivity. Security audit logs are retained for up to 90 days. Community levels remain available until their author deletes them, they are removed through moderation, or the account is deleted.

You may request permanent deletion of your account and its associated data. Verified requests are normally processed within 30 days. Some residual copies may remain temporarily in isolated backups until their technical retention cycle expires, or may be retained when required for legal or security reasons.

8. Children

Reverb's online account features are not directed to children under 13. If a parent or guardian believes that a child provided data without appropriate authorization, they may contact us to request its deletion.

9. Your Choices

You may close your sessions, delete published levels, and request access to, correction of, or deletion of your account data. To exercise these choices, visit the account deletion page or use the contact email address.

10. Changes

We may update this policy when Reverb's features or legal requirements change. The date shown at the top will indicate the most recent revision.