Last updated: 20 October 2026
This policy covers the Android games made by Robbert
Camps (“we”, “us”): Rummage: Puzzle Pantry
(com.robbertc5.rummage) and HexaJam
(com.robbertc5.hexajam). Each game’s Google Play listing
links here. If a game does not use one of the features below (for
example Rummage has no ads and no purchases), that section does not
apply to it.
In short
Your progress and settings are saved in the game’s own folder on your phone. In HexaJam that is your stars, coins and boosters; the save file is signed so it can’t be edited, and tied to your phone with its Android ID, which never leaves the phone and is not sent to us or anyone else. A HexaJam save moved to another phone keeps your levels and stars, but not your coins and boosters. In Rummage it is your coins, won levels, medals, album and streak, plus a small log of the puzzles you started, won or left, which the game uses itself.
Rummage’s streak reminder, if you switch it on, is an alarm on your phone that shows one notification at the time you chose; on Android 13 and later the phone first asks you to allow notifications. The reminder never leaves your phone.
If you turn on Android’s own backup, Android may copy the save to your Google account so your levels and stars survive a phone change. Google handles that backup under its own privacy policy; we cannot see it.
Only if you say yes. When you open a game it asks whether you want to share play stats (in Rummage: “Help make Rummage better?”), and it asks again each time you start it until you say yes. Until you answer, nothing is sent or saved for statistics; if you say no, nothing is collected and the game works exactly the same.
What we collect. When you say yes, the game keeps a random ID, the stats ID (not linked to your name, Google account, phone number or advertising ID), which it shows under Share play stats. With that ID it records how the game is played:
We do not store your IP address, and we do not collect your precise location, contacts or anything you type.
Why. To make the games better and keep them free to play: to find levels that are too hard or too easy, to see which games are played most and where players stop playing, to set fair coin and hint prices, to compare two versions of a feature, and to see how players in different countries play. Our legal basis is your consent (GDPR Article 6(1)(a), and Article 10/2 of the Belgian Data Protection Act for storing the ID on your phone). The data is about a random ID, not about who you are.
Who processes it. PostHog Inc. stores the statistics for us, on servers in the EU (Frankfurt, Germany), under a data processing agreement. PostHog may only use the data to provide its service to us. It uses your IP address only to look up the approximate location above and does not store it: IP address capture is switched off in our PostHog project.
How long. We keep statistics for as long as they help us improve and support the games, and delete them when they no longer do. You can ask us to delete yours at any time; see Delete your data.
Changing your mind. You can withdraw your consent at any time, as easily as you gave it: switch off Share play stats (in Rummage: tap the gear on the main screen; in HexaJam: open the pause menu). The game then stops recording, and anything not yet sent is deleted from your phone. This does not affect statistics sent before; to have those deleted too, see Delete your data. Uninstalling the game also deletes the stats ID, so nothing recorded earlier can be linked to a new install.
Only HexaJam has ads: an optional video you can watch to get 5 extra drops when you run out. Rummage has no ads and no ad software. Ads never play unless you tap to watch one.
The videos come from Google AdMob (Google Ireland Limited in the EEA and UK, Google LLC elsewhere). Google acts as an independent controller for the data its ad service collects, which includes your phone’s advertising ID, device and app information, diagnostic and performance data (such as crash logs and how fast ads load), your IP address (from which an approximate location can be derived) and how you interact with ads and the app (such as app launches and taps). Google’s ad software is built into the game, so it can collect this data while the game is open, not only while a video plays; that is why our Google Play listing shows this data as required. Google uses it to show and measure ads, for analytics, to prevent fraud and, if you consent, to personalise ads. How Google uses this data: https://policies.google.com/technologies/partner-sites.
Your choice. If you are in the EEA, the UK or Switzerland, the game shows Google’s consent form before any ad is loaded. You can accept or refuse personalised ads; if you refuse, you may still see non-personalised or limited ads. You can change your choice at any time with Privacy options in the game’s pause menu. You can also reset or delete your advertising ID in your phone’s settings (Settings > Privacy > Ads, or Settings > Google > Ads).
We do not receive your advertising ID or any of the data Google collects for ads; we only see totals, such as how many videos were watched.
In HexaJam, coin packs and other items are sold through Google Play Billing. Rummage sells nothing. Google processes the payment under its own privacy policy (https://policies.google.com/privacy). We receive only what Google sends back to the game: which product was bought, the order and purchase token, and whether it went through. The game passes its random ID to Google with the purchase, so Google can spot fraud; it is not linked to your name by us.
Only the services named above: PostHog (statistics, on our behalf) and Google (ads and payments, for their own stated purposes). We do not sell or rent your data, and we do not share it with anyone else, except where the law requires it.
Data held by Google may be processed outside the EU; Google uses the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. Our statistics stay in the EU.
Under the GDPR you can ask to see, correct or delete data about you, object to its use, or ask for it to be restricted, and withdraw your consent. For our statistics the simplest route is the Share play stats switch, and uninstalling the game; to delete statistics already sent, email us your stats ID as Delete your data explains, and we delete them within 30 days. Because we only know a random ID, we cannot find your data from your name or email; if you want us to find it, tell us how you play (game, rough dates, levels) and we will do our best. For ads, use Privacy options in the game and your phone’s ad settings; for payments, contact Google.
You can also complain to a data protection authority. In Belgium, where we are based, that is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, https://www.dataprotectionauthority.be); you can also use the authority in your own country.
Our games are not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us data, contact us and we will delete it.
Data is sent over encrypted connections (HTTPS). The game keeps only the data it needs and sends nothing at all while statistics are switched off.
When a game starts using data in a new way, we update this page before that version is released and change the date at the top.
Robbert Camps, Belgium. Email: me@robbertc5.com