Policy · last updated 9 October 2026

Privacy

This covers Reverse Vector's games, Wrong Ends and Rolling Deep, and this website: what we collect, why, how long we keep it, and what you can ask us to do with it.

Who we are

Reverse Vector is an independent games studio in the United Kingdom: Reverse Vector Ltd, a company registered in England and Wales, company number 17508824, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. It is the controller of the personal data described here under the UK GDPR and the Data Protection Act 2018. You can reach us at [email protected].

Rolling Deep

On your device

Your progress (levels, best times, medals, tea, what you've unlocked), your settings and your ghost runs are saved on your device. Uninstalling the game deletes them. It has no accounts, no ads, no analytics and no crash reporting. On Android it asks for internet access, for the leaderboards and ghosts, and vibration; from version 1.0.0 also Google Play's billing permission, for the full game's purchase.

The leaderboards and the Ghost Race

Every level has leaderboards, each world has boards for campaign scores, and you can race other players' ghosts. For these the game talks to our server, which we rent from OVH in the United Kingdom; Cloudflare carries the connection to it. It sends:

• A player key: a random code your device makes the first time, which keeps your times together. Our server stores only a scrambled form of it (a hash), which can't be turned back into the key.
• A player name. For now the game makes one up from two word lists, such as Plucky Teapot; you never type one. Other players see it on the boards and over your ghost. If the game later signs in through Google Play Games, Game Center or Steam and uses the name you have there, we'll update this policy first.
• Your platform (Android, iPhone or PC), shown as a small mark beside your name.
• Each finished run of a level you play alone: the level, the control you used (tilting, dragging, or a PC's keyboard or pad), your time, the game's version, your ball's look (the hero, finish, hat and colour), and its ghost: your ball's path through the level, which other players can race against, in your ball's look. We keep your best time on each level for each control, with its ghost; a better run replaces it.
• Your campaign scores: when a campaign game you play alone ends, the world, your score, the tea you collected, the control and the game's version. We keep your best score in each world for each control, and other players see it on that world's board.
• Your IP address, while you're connected, to answer you and to stop floods. The server holds it in its memory only, and never writes it to a log or a file.

Runs you finish offline wait on your device and go up later; any still waiting after 30 days are dropped. Online boards in Options turns this off: then nothing is posted and no boards or ghosts are fetched.

Sharing a ghost

If you share one of your runs, our server gives it a short code, and the game gives you a link to a page on this site (reversevectorgames.com/rolling-deep/ghost/ and the code). Anyone with the code or the link can see your player name, the level, your time and the board, and can race your ghost in the game. The server stores the code, which run it points to and when it was made. The code stays with your best time on that level and board, so if you beat it, the link shows the new time. It works for as long as that run is on the boards.

Phones as controllers

In a race on a PC, friends can play on their phones. The race screen shows a code, and the phone opens our controller page (reversevectorgames.com/rolling-deep/pad). The game and the page find each other through our server, which passes their connection details between them, including the devices' network addresses, and then steps aside: the phone talks to the PC directly, using Cloudflare's STUN service to find a way through. If they can't connect directly, our server passes the controls on instead. Nothing from a race is stored: a room exists only while the race screen is open. The page keeps a random ID in the phone's browser (local storage, not a cookie) so that a reload gets its seat back. The race screen connects to our server whenever it's open on a PC, whatever the Online boards setting.

Google Play and the full game

When you get the game from Google Play, Google handles the download under its own privacy policy.

Rolling Deep is free with worlds 1 and 2. From version 1.0.0, a one-time purchase unlocks worlds 3 to 9, through Google Play Billing. Google is the seller: it takes the payment under its own privacy policy, and we never see your card or other payment details. The game asks Google Play whether you own the full game and remembers the answer on your device; nothing about the purchase goes to our server. Google shares each order's details with us in its Play Console: the order ID, the date, the product, the price and the country. We use them for our accounts, and to help if you ask us about a purchase.

If we add anything else that sends data, such as cloud saves or sign-in, we'll update this policy first.

Wrong Ends

On your computer

Your settings, your player name, your match history, the replays you record and a player key file are saved on your computer only.

Playing online

When you play online, your game connects to our game server, which we rent from OVH in the United Kingdom. To run matches it receives:

• The name you choose. Other players see it in lobbies and matches. It doesn't have to be your real name, and we'd rather it wasn't.
• Your IP address, to connect you. The server's log notes the address that creates a game or sends a bug report, so we can stop floods; the log keeps 30 days.
• A player key: a code made from your computer's device ID and scrambled differently for each game, so that if you drop out you get your own seat back, and one computer can't join a game twice. Neither the server nor other players see the device ID itself.
• Your matches. For each finished online game: the names, heroes, roles and teams of everyone in it, the result and the end screen's numbers. They're kept for the server's leaderboard, which ranks players by name.
• Replays and match logs of online games, kept for 7 days so players can download and watch them, then deleted.
• Chat. Messages go to the other players in your lobby or match as you send them. The server doesn't keep them.

If you host a game or join one directly (not through our server's list), you connect to the other players' computers, which see your IP address, as with any direct connection. Matches against bots on your own stay on your computer.

Bug reports

Report a bug sends what you write, your player name, the game's version, your operating system, where you were (a match's map seed and clock) and the end of the game's log to our server, which posts it in the #bugs channel of the Wrong Ends Discord, where its members can read it. We use it only to fix the game. Ask, and we'll delete yours.

Looking for a group

A lobby's LFG button posts your player name and the lobby's name to the Discord's #looking-for-game channel.

Downloads and the Discord

Wrong Ends' downloads come from GitHub, and its players meet on Discord. Each sees your visit under its own privacy policy. Joining the Discord is optional; the game works without it.

This website

• No analytics and no tracking, and the site sets no cookies of its own. Its fonts are served from this site, not from Google.
• Two things on it run a script: Rolling Deep's controller, described above, which keeps a random ID in your browser and talks only to our game server and Cloudflare's STUN service; and the contact form, below.
• It's hosted by Cloudflare, which processes your IP address and browser details to deliver the pages and protect the site from attacks, under its own privacy policy.
• Links to GitHub and Discord take you to their sites and their policies.

The contact form

If you write to us through the form on the home page, we receive your name, your email address, what it's about and your message. The site passes them to a private channel on the Wrong Ends Discord server, which we run; only we can see that channel. That's where we read your message, and we reply by email. We use them for nothing else.

To keep automated spam out, the form uses Cloudflare Turnstile. It loads only once you start filling the form in, and it sends Cloudflare your IP address and details of your browser and connection (such as its user agent) to tell people from bots. Cloudflare does this for us, and also uses those details to improve Turnstile, under its own Turnstile privacy addendum. Once the spam check has passed, our site also counts messages by IP address, to limit how many one address can send. The address is held only in the memory of the copy of the site's code that took your message (Cloudflare runs several), never written anywhere, and gone when that copy restarts, if not sooner. Your IP address isn't passed on to Discord.

Why we're allowed to use it

Our lawful basis is legitimate interests: running online matches, the leaderboards and the ghosts (and the links to the ghosts you share), connecting phones as controllers, answering the messages you send us, keeping our servers and the contact form safe from abuse, and fixing the bugs you report. We keep as little as we can for as short a time as we can, nothing about it is sensitive, and bug reports and LFG posts only happen when you press the button. The controller's ID in your browser is strictly necessary for the controller you've asked for, so it needs no consent. We keep the order details Google shares with us because the law requires companies to keep accounting records.

Who else handles it

Where data goes outside the UK, these companies protect it with the safeguards UK law asks for, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses. We don't sell personal data, use it for advertising or share it with anyone else, unless the law requires us to.

How long we keep it

Children

Wrong Ends' online play isn't meant for children under 13, and we don't knowingly collect personal data from them. Rolling Deep is meant for players 13 and over; its leaderboards show a made-up name, never one a player types, and they can be turned off in Options. If you think a child has sent us something, tell us and we'll delete it.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to have it in a form you can take elsewhere. Most of what we hold is tied to a player name, so tell us the names you play under (in Rolling Deep, the name the leaderboards show for you). We'll answer within a month, and may need to ask something to check the data is yours.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We'd like the chance to put it right first.

Changes

When this policy changes, the date at the top changes too, and for anything big we'll say so on the Discord and on this site.

Contact

Questions, requests and complaints: [email protected].