Privacy Policy
Goliath Rogue — Goliath Studios · Last updated 14 August 2026
Goliath Rogue is a single-player game. There is no account, no login, and no sign-up. This policy describes the small amount of data the game sends when its online leaderboard is used, the advertising shown in the Google Play version, and the larger amount the game deliberately does not collect.
The short version. If you put a name on the leaderboard, the game sends that name, your run scores, and a random ID generated on your device. If you do not set a name, none of that is ever uploaded.
The Google Play version also shows ads, supplied by Google AdMob, which uses your device's advertising ID. No other version of the game does. Where the law requires it, you are asked first, and you can say no.
What the game sends
Only when the online leaderboard is active, and only after you have chosen a name for it, the game sends:
- A random player ID — 16 random bytes generated on your device the first time it is needed, stored in your local save. It is not derived from your device, your phone number, your Google account, or an advertising identifier, and it identifies nothing outside this game's leaderboard.
- The name you choose for the leaderboard. You pick it; it is not taken from your device or your Google account. Please do not use your real name — a nickname is the point.
- Run scores — the floor reached, kills, character level, run duration, the floor the run started from, and whether you survived.
- The platform and version of the build you are playing, so scores from different platforms can be told apart.
This is sent over HTTPS to a leaderboard service operated by Goliath Studios on Cloudflare Workers. It is used for one thing: showing the leaderboard and the number of players recently online.
Advertising — Google Play version only
The version of Goliath Rogue distributed on Google Play is free and supported by advertising. It shows occasional full-screen ads at natural breaks in play — after a run ends, or on returning to town — never during a fight and never when you are about to start a floor.
Ads are supplied by Google AdMob. To select and measure them, Google's advertising SDK accesses your device's advertising ID (a resettable identifier Android provides for this purpose) together with technical information such as your device type, coarse region and language, and sends it to Google. That data is collected and shared with Google, and Google processes it as an independent controller under its own policies:
Because this uses the advertising ID, the Google Play build declares the com.google.android.gms.permission.AD_ID permission. Goliath Studios does not receive, store or see the advertising ID itself — it never reaches our leaderboard service, and it is never joined to your leaderboard name or player ID.
Your choice about ads. If you are in the European Economic Area, the United Kingdom or Switzerland, the game asks for your consent before any ad is requested, using Google's User Messaging Platform. You may refuse. If you do, you will see non-personalised ads instead — chosen from context rather than from a profile. Refusing does not restrict any part of the game. You can also reset or clear your advertising ID at any time in Android Settings → Privacy → Ads.
No other version shows ads. The itch.io downloads and the browser version contain no advertising code and never touch an advertising ID.
What the game does not send
- The crash log stays on your device. The game keeps a local diagnostic log that can include technical details about your hardware. It is never uploaded, automatically or otherwise.
- No contacts, photos, location, microphone or camera. The game requests none of these permissions. It requests internet access, for the leaderboard and — on Google Play only — the advertising ID permission described above. Nothing else.
- No analytics SDK, and no tracking beyond the ads. There is no analytics, attribution, crash-reporting or telemetry SDK in any version. Outside the Google Play build's advertising, nothing about your play is shared with any third party.
- Your leaderboard identity is never linked to advertising. The random player ID and the name you choose are used for the leaderboard and nothing else.
Seven counters, and nothing that points at you
The browser versions send a handful of anonymous counters to our own server — the same one that runs the leaderboard — so we can see where the game loses people. There are seven of them in total: the start screen was shown, it opened without our host's code loading, it was clicked, a floor was reached, a first run ended, the town was reached, floor 5 was reached.
Each one is a number, not an event about you. No player ID, no name, no session, no address and no device details are sent with them, and nothing is stored per player: the server keeps one running total per day, and a counter going up by one cannot be traced back to whose play moved it. Each is sent at most once per session. Nothing is shared with a third party, and the downloadable and Steam versions send none of it.
We added this because a bug that made the town unreachable after your first run was live for two weeks before a player told us. Counting how many people get back to town would have shown it the same day.
Playing without sending anything
The leaderboard prompt offers "Just looking". Choosing it means you can read the leaderboard forever and never write to it — no name, no scores, no ID are uploaded. Your runs are still recorded locally on your own device. The whole game is playable this way.
Data stored on your device
Your progress, settings, local score history and the diagnostic log are stored in the app's private storage. Uninstalling the game deletes all of it, and it is not backed up to your Google account.
Retention and deletion
Leaderboard entries are kept until they are removed. To have your leaderboard entry deleted, email goliathstudiossp@gmail.com with the name you used on the board and we will remove it. Because the game has no accounts, that name is the only way we can find your row — if you have not set one, there is nothing of yours stored to delete.
Advertising data is a separate matter, because we never hold it. It sits with Google, and it is governed by their retention policies and your Google account controls — see My Ad Center, or reset the identifier entirely in Android Settings → Privacy → Ads. Emailing us cannot delete it, and we would rather say so than imply otherwise.
Children
Goliath Rogue is not directed at children under 13 and we do not knowingly collect information from them. Ad requests are not tagged as child-directed, and the game is rated accordingly on the stores that carry it.
Changes
This policy is updated before a version that changes what is collected is released, not after. The date at the top is when it last changed. The advertising described above was added in the first Google Play release; every earlier version, and every version outside Google Play, contains none of it.
Contact
Goliath Studios — goliathstudiossp@gmail.com