Last updated: July 29, 2026
1. Scope and Contact
This Privacy Policy explains how Rebit collects, uses, stores, and shares information when you use the Rebit website, web application, or mobile applications, including Rebit Play for iPhone and iPad (the Service).
Questions or privacy requests can be sent to [email protected]. You can also visit Rebit Support.
2. Information We Collect
Depending on the features you use, we may collect the following categories of information:
- Account and identity information: name, username, email address, account ID, profile image, password hash, email-verification status, and authentication-provider identifiers. Apple may provide a private relay email address if you choose Hide My Email.
- Game and user content: games and other files you choose to upload, game metadata, save files, save states, screenshots, profile backgrounds, avatars, comments, support messages, achievements, and other content you create or store through the Service.
- Social, safety, and public-profile information: profile details, follows and followers, public game pages, comments, reactions, multiplayer-room activity, blocked-account relationships, content reports, report reasons and details, an evidence snapshot of reported content, moderation decisions, and the privacy choices that determine what other users can see.
- Purchases and entitlements: the Rebit account associated with a purchase, store and product identifiers, subscription or transaction identifiers, purchase and renewal status, expiration date, entitlement status, and restore history. Apple, Google, and RevenueCat process payment credentials; Rebit does not receive your full card or bank-account number.
- Usage and gameplay information: searches, library and product interactions, game sessions, play time, settings, feature usage, multiplayer and remote-play activity, and update status.
- Device, network, and security information: IP address, browser and app version, device and operating-system information, language, time zone, request timestamps, authentication and security logs, and network or connection diagnostics.
- Crash and performance information: crashes, errors, stack traces, performance information, app state, and diagnostic context. Production diagnostics sent to Sentry may be linked to your internal Rebit user ID. Rebit configures the native app not to send your email, username, advertising identifier, or default PII to Sentry.
- Optional integrations: identifiers and data needed for services you choose to connect, such as RetroAchievements or a user-configured game-library service.
We receive this information from you, your device or browser, other users who interact with you, and service providers such as Apple, Google, WorkOS, RevenueCat, and connected integrations.
3. How We Use Information
We use information to:
- create, authenticate, secure, and support accounts;
- provide game-library, save, social, multiplayer, remote-play, and synchronization features;
- process, restore, and enforce subscription entitlements and server-side plan limits;
- display content according to your public-profile and privacy settings;
- provide customer support and communicate service, security, or policy updates;
- diagnose crashes, prevent abuse, protect the Service, and maintain reliability;
- screen public text for restricted phrases, process user reports, enforce blocks, and let authorized moderators investigate and remove harmful content;
- understand feature usage and improve the Service; and
- comply with legal obligations and enforce our Terms.
4. Public Content and Your Choices
Information you make public, including a public profile, public game activity, screenshots, comments, and social interactions, can be viewed and copied by other people. Use the privacy controls in Rebit settings to limit public library and profile information. You can report a profile, comment, or screenshot and can block or unblock another account. A block hides the accounts' content from each other, removes follows between them, and prevents new social interactions. Reports are available only to authorized moderators. Removing content or making a profile private does not remove copies another person previously saved outside Rebit.
5. Service Providers and Sharing
We disclose information only as needed to operate the Service, complete actions you request, or meet legal and safety obligations. Providers may include:
- Cloudflare and Bunny for application delivery, networking, storage, and content delivery;
- WorkOS, Sign in with Apple, and Google for authentication;
- Apple App Store, Google Play, and RevenueCat for purchases, subscription status, entitlements, and billing-webhook processing;
- Sentry for crash, error, and performance diagnostics;
- Google Analytics for analytics on the public marketing website;
- RetroAchievements and game-metadata or user-configured integration providers when you use those features; and
- professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a business transfer.
We do not sell personal information. The native Rebit Play app is not configured for advertising attribution or cross-app advertising tracking and does not request Apple's App Tracking Transparency permission. The public website may use analytics cookies as described below.
6. Cookies and Local Device Storage
The website and applications use cookies, local storage, and similar device storage for authentication, security, preferences, OAuth login attempts, app-update state, and core Service functionality. The public marketing website also uses Google Analytics, which may set analytics cookies. Browser controls can limit cookies, but blocking required storage may prevent sign-in or other features from working.
7. Retention and Account Deletion
We generally retain account information and content while your account is active or as needed to provide the Service. Gameplay and operational telemetry uses limited retention where configured; certain network telemetry is scheduled for deletion after approximately 14 to 30 days.
You can initiate account deletion in Rebit settings. Rebit provides a seven-day grace period during which you can cancel the request. After that period, Rebit permanently deletes the account and associated games, saves, media, profile, and related records.
Deleting a Rebit account does not cancel an App Store or Google Play subscription. Store subscriptions must be canceled separately in the applicable store account settings.
Content reports retain a snapshot of the reported material so moderators can investigate even if the original is later edited or deleted. When an account is permanently deleted, reports involving that account are stripped of matching user references, free-text details and notes, and the evidence snapshot. Rebit may retain only the de-identified report identifier, target type and internal identifier, reason category, review status or action, and timestamps as reasonably needed for user safety and audit integrity. Block relationships remain until you unblock the account or either account is deleted.
Limited records may remain for a reasonable period in rotating logs, security records, backups, or where retention is required for fraud prevention, dispute handling, safety enforcement, tax, accounting, or other legal obligations. Independent providers, including app stores, RevenueCat, Sentry, and authentication providers, retain information under their own policies.
8. Data Security
We use administrative, technical, and organizational safeguards intended to protect information. These include access controls, encrypted network transport, password hashing, and encryption at rest for sensitive stored data. No storage or transmission system can be guaranteed completely secure.
9. Your Rights and Controls
Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of your personal information, or to object to certain processing. Rebit settings provide controls for profile information, privacy, downloads, and account deletion. You can manage store subscriptions through Apple or Google and manage provider authorization through the applicable identity-provider account. Contact [email protected] for help with a request.
10. International Processing
Rebit and its providers may process information in countries other than your own. Privacy and data-protection laws may differ in those locations. Where required, we use appropriate mechanisms for international transfers.
11. Children's Privacy
The Service is not directed to children who are below the minimum age required to consent to online services in their location. If you believe a child provided personal information without appropriate permission, contact us so we can investigate and delete it where required.
12. Changes to This Policy
We may update this policy as the Service or legal requirements change. We will post the revised policy here with a new “Last updated” date and provide additional notice when required.
13. Contact Us
Email [email protected] or visit https://rebit.cc/support.