Who we are
ReRave Plus is a touch rhythm game. The ReRavers team runs its online service: this website, player accounts, leaderboards, replays, friends and chat. This policy covers the game (the iOS and Android apps and the version you play in a browser) and that service. "We" and "us" mean the ReRavers team.
The short version
- You can play without an account. With one, your scores, replays, friends and awards are kept online.
- Your username, flag, level, scores and replays are public on this website and in the game. Your e-mail address, password and IP addresses never are.
- There are no ads, no purchases, no analytics and no advertising trackers. We don't sell data.
- You can delete your account and its data at any time, in the game or on this website.
What we collect and why
Your account
When you create an account in the game or on this website, we store:
- your username and e-mail address, and whether you confirmed the address;
- your password, only as a one-way hash that nobody can read back;
- the country flag you pick (or the world flag) and your newsletter choice (we don't send a newsletter at the moment);
- when you created the account and signed in, how many times, and the IP address you signed up or last signed in to the game from;
- your level, experience points, play time, coins earned from awards and unlocks;
- your avatar picture, if you upload one, and the versions of our terms you accepted.
We use this to sign you in, keep your progress, show your profile, send password-reset e-mails and protect accounts from abuse.
Scores, replays and awards
When you finish a song while signed in, the game sends the result to our server. We store:
- your best score on each chart: points, grade, combo, accuracy and timing, with the platform and device model you played on;
- each play you submit, with the same details, the game version, your IP address and its input log (the timing of your touches), which our server plays back to check that the score is real;
- replays: the recorded touches, game settings and device model of a play, which anyone can watch on this website;
- a daily summary of your progress on each platform (experience points, plays, play time, coins) with the IP address of that day's last play;
- the awards you earned and when.
We use this for leaderboards, rankings, your profile, replays and awards, and to keep cheated scores off the boards.
Friends, presence and chat
- Friends: the friend requests you send, accept or decline, and the players you block. Your friends see whether you are online and what you are doing in the game (in the menus, choosing a song, playing).
- Chat on this website: messages you post in a chat room are shown with your username to everyone in that room and are deleted after 90 days.
- Direct messages between friends are kept until a moderator deletes them or until you or your friend deletes the account.
- Moderation: a word filter masks or refuses words that aren't allowed. When a message is reported, the report keeps a copy of it for our moderators, who can hide messages and ban players from chat.
Devices and sign-in sessions
- The apps create a random device ID when they are installed. It is not a hardware or advertising identifier. On each platform, your account remembers the device ID, model and system version of the device it is linked to, so another device can't quietly take your account over.
- When you sign in to the game we create a session for it; our server keeps only a one-way hash of its token, with the platform and device ID. A session ends when you sign out, when you sign in to the game on another device, or after 90 days.
IP addresses, logs and error reports
- We use your IP address to limit how often requests can be made (sign-in attempts, messages, uploads). These counters hold a one-way hash of the address and expire within an hour. Where IP addresses are stored is listed above: your last sign-in, your submitted plays and the daily summary.
- Our web servers keep standard request logs (IP address, time, the page or API address requested, browser type) to run and secure the service, and delete them after a limited time.
- If the game reports an error, we store the error and its log with the IP address of the last device that reported it.
- We don't use analytics, crash-reporting or advertising services in the game or on this website.
Cookies and storage in your browser
This website only sets the cookies it needs to work, and no third-party cookies:
- a session cookie that keeps you signed in (until you sign out, or up to 14 days);
- a security cookie that protects forms against cross-site request forgery;
- a short-lived cookie that carries a notice such as "Settings saved" to the next page.
When you play in a browser, the game keeps your settings, your session when you are signed in, and scores or replays waiting to be uploaded in the browser's local storage. If you play without an account, the server gives the game a random anonymous session (kept in that browser tab for up to a day) to unlock the game's content; it isn't linked to you and our server doesn't store it.
What the apps keep on your device
The iOS and Android apps keep on your device: your settings (volumes, timing offsets, language, favourite songs), the random device ID, your session and profile, award progress, scores and replays waiting to be uploaded, the songs you downloaded, and the keys that let you play downloaded songs offline for up to 30 days. When the app asks for those keys it sends the device ID, which we use only to limit requests and don't store. Deleting the app removes all of this; deleting your account in the app removes that account's data from the device.
Support messages
When you use the support form to write to us, we store your e-mail address, the name and username you give, the topic, your message and, if you are signed in, your account. We use them only to answer you, and our team may receive a copy by e-mail.
Data from the earlier servers
ReRave Plus was online before this service. If you had an account on the earlier ReRave Plus servers, it was copied here with its game data (scores, awards, friends and records of purchases made back then) so you can keep playing with it. Profiles from the earlier ReRave games (the 2011 mobile game and the 2012-2015 arcade network) appear on the classic pages with their usernames, levels and scores; their e-mail addresses are never shown. A classic profile is linked to your account when its e-mail address matches your confirmed one, or when you claim it with its old password.
Ads and purchases
Ads and purchases are switched off: the game shows no ads and there is nothing to buy. The iOS and Android apps include Google's Mobile Ads library for an optional reward feature we may add later, but it is never started, so it collects nothing and no advertising identifier is requested.
Before we switch ads or purchases on, we will update this policy to say what they collect and how to say no, and announce the change in the game or on this website.
What other players see
- Everyone, on this website and in the game: your username, flag, avatar, level, experience points, global rank, best scores, verified plays, replays, awards and linked classic profiles.
- Your friends: your friends list and what you are doing in the game.
- Chat messages: everyone in the room. Direct messages: you and your friend.
- Never shown: your e-mail address, password, IP addresses, device details and support messages.
How long we keep data
- Your account and game data: until you delete your account.
- Replays: 90 days, except replays of your personal bests and replays you shared, which stay until you delete your account.
- Chat room messages: 90 days. Direct messages: until a moderator deletes them or either account is deleted.
- Game sessions: 90 days at most; the website's session cookie: 14 days at most.
- Support messages: 365 days.
- Request-limit counters: up to an hour. Server logs and error reports: only as long as we need them to run the service and fix problems.
Deleting your account
You can delete your account at any time:
- In the game: tap your name in the bar at the bottom of the menus, choose Delete Account, confirm, and enter your password.
- On this website: open Delete account in Settings.
- If you can't sign in: send the support form from the account's e-mail address.
Deleted at once and for good: your account (username, e-mail address, password, flag, avatar, IP addresses), sessions and device links, best scores and submitted plays, replays, awards, friends, chat and direct messages and reports about them, support messages you sent while signed in, your linked classic profiles and records of past purchases.
Kept without anything that identifies you: totals such as how often each song was played, and best scores on arcade cabinets, which lose their link to you. If your account came from the earlier servers, we keep only its old ID number so it is never copied back.
The earlier servers, while they still run, keep their own copy of accounts created there. Contact us to have that copy removed as well.
Your choices and rights
- In Settings you can change your flag, avatar, newsletter choice, password and e-mail address.
- Use the support form to ask us for a copy of your data or to correct it.
- Depending on where you live (for example in the European Union, the United Kingdom or California), you may have further rights: to access, correct, delete or take a copy of your data, and to object to or restrict how we use it. Contact us to use them; you can also complain to your data protection authority.
Children
ReRave Plus is not directed at children under 13, and we don't knowingly collect data from them. If your country requires a parent's permission for online services at your age, ask a parent before creating an account. If you think a child under 13 has an account, tell us and we will delete it.
Security
Passwords and session tokens are stored only as one-way hashes, connections to the service use HTTPS, and request limits slow down password guessing and spam. No system is perfectly secure; if you think your account was misused, change your password and contact us.
Changes to this policy
We will post changes on this page and update the date at the top. Before a change that matters (such as switching on ads or purchases) takes effect, we will announce it in the game or on this website.
Contact
Questions about this policy or your data: the support page has a contact form, and we answer by e-mail.