Sabotage — Privacy Policy
Last updated 13 October 2026
The short version. Sabotage does not ask for your name or a password, and it never asks for your email — the only way an email address reaches us is if you choose to attach Sign in with Apple or Google Sign-In, and then only to identify your account. It creates an anonymous account so your progress and your place on the leaderboard belong to you rather than to the phone. It contains no analytics or crash-reporting software. It does include Meta's app-events SDK, which tells Meta that the game was installed and opened, so we can tell whether our own ads on Facebook and Instagram work (see below). Advertising inside the game is opt-in only — you watch an ad because you chose to, and there are no interstitials. The microphone is used only during co-op voice chat, is never recorded, and is never stored.
Sabotage is published by Raveneal Associates. This policy explains what the game collects, why, who it goes to, and how to have it deleted. It applies to the iOS and Android versions of the game.
Who we are
Raveneal Associates. For anything in this policy, including a request to delete your data, write to privacy@ravenealassociates.com.
What the game collects
An account identifier
The first time you open Sabotage it creates an anonymous account in the background. No sign-in screen, nothing to fill in. This is a random identifier that lets the game keep your progress, your salvage and your leaderboard entry on our server rather than in a file on your phone, so the numbers players compete on cannot be edited locally.
Later, and only if you choose to, you can attach Sign in with Apple or Google Sign-In to that same account so your progress survives a reinstall or a new phone. We receive the account identifier those services give us. We do not receive, and never ask for, your password.
Both sign-ins also give us an email address: the address of the Google account you choose, or the one Apple shares when you sign in with Apple — which, if you pick “Hide My Email”, is a private relay address Apple makes for us rather than your own. It is stored with your account for exactly one purpose: identifying your account, so that signing in with Apple on one device and Google on another, with the same address, reaches the same progress. It is never shown to other players, never used to contact you or for marketing, and never shared with anyone.
The game has no email-and-password login, so there is nothing to forget and no password of yours for us to hold.
Your handle and your scores
If you choose a handle for the leaderboard, that handle is public, alongside the score and wave you reached and a small set of run statistics — things like your best kill streak, deepest boss, accuracy and salvage earned. That is the whole point of a leaderboard, and none of it is personal unless you make your handle personal. Choose accordingly.
Purchases
In-app purchases are handled entirely by Apple and Google. We are told that a purchase completed so we can unlock what you bought. We never see your card details, billing address or any payment information.
Advertising
Sabotage shows opt-in rewarded ads only — you press a button to watch one in exchange for something in the game. There are no banners and no interstitials, and nothing is shown unless you ask for it. These are served by Google AdMob, which may use your device's advertising identifier to choose and measure ads. You can limit or reset that identifier in your device settings at any time, and where the law requires it you will be asked for consent before personalised ads are used.
Measuring our own ads (Meta)
We advertise Sabotage on Facebook and Instagram. To know whether those ads lead to people actually playing, the game includes Meta's app-events SDK (Facebook SDK). It sends Meta a small set of app events: that the game was installed, each time it is opened, and in-app purchases (what was bought and its price) — together with basic device information (device model, operating system and app version, language, time zone) and the IP address of the request.
- On Android these events carry your device's advertising ID, which Meta uses to match an install to an ad. You can reset or delete that ID in your phone's settings (Settings → Google → Ads, or Settings → Privacy → Ads) at any time.
- On iPhone the game never asks for permission to track you, so Meta does not receive your device's advertising identifier. Installs are measured through Apple's privacy-preserving SKAdNetwork instead, which reports to Meta in aggregate without identifying you.
The SDK does not log you in to Facebook, does not need a Facebook account, and does not receive your handle, scores, email address or anything you type. Meta handles the data it receives under its own policy: facebook.com/privacy/policy. You can also control how Meta uses activity from apps for ads in your Facebook or Instagram settings under Ad preferences → Activity information from ad partners.
The microphone, in co-op only
Co-op games include voice chat. When it is on, your microphone audio is sent live to the other player through our relay server and is discarded immediately. It is never recorded, never written to disk and never stored. You can turn voice off entirely in Settings — the option is called Open mic in co-op — and co-op remains fully playable in silence.
Basic technical information
Requests to our server carry the ordinary things any web request carries, such as your app version and platform, and an IP address at the moment of the request. We use these to make the game work and to stop abuse.
What the game does not collect
- No analytics, telemetry or crash-reporting software. The only measurement code in the app is Meta's app-events SDK, described above, and it reports only installs, app opens and purchases.
- No location data.
- No contacts, photos, files or calendar.
- No browsing or app-usage history from outside Sabotage.
- No recordings of your voice.
- No password. No email address, unless you attach Sign in with Apple or Google Sign-In (see above).
Who your data goes to
| Who | What they get | Why |
|---|---|---|
| Supabase | Your account identifier, handle, progress and scores — and, if you attach Sign in with Apple or Google Sign-In, the email address it shares | Hosts the accounts, the leaderboard and the server-side economy |
| Google AdMob | Advertising identifier and ad interaction data | Serving the opt-in rewarded ads |
| Meta (Facebook) | App events — install, app opens, purchases — with device information, IP address and, on Android only, the advertising ID | Measuring whether our ads on Facebook and Instagram lead to installs |
| Apple / Google | Sign-in and purchase records | Optional sign-in, and processing in-app purchases |
| Our co-op relay | Live game and voice traffic during a co-op session | Connecting two players; nothing is retained after the session |
We do not sell your data, and we do not share it with anyone beyond what is listed above.
How long we keep it
Your account and its progress are kept while the account exists, so that returning to the game returns you to your run. Co-op session traffic is not retained at all. Delete your account and the data attached to it goes with it.
Deleting your account and your data
In the game: settings (the gear in the lobby) → DELETE ACCOUNT → tap again to confirm. The account, its progress, its leaderboard and contest entries, its purchase records and any Apple or Google sign-in attached to it are deleted immediately, and the game starts fresh on your phone. Step-by-step instructions and exactly what is deleted.
By email: if you no longer have the game, write to privacy@ravenealassociates.com from any address with the handle you played under. We will delete the account and confirm to you when it is done — within 30 days, and normally much sooner.
Deleting your account removes your data. It does not refund purchases; refunds are handled by Apple and Google under their own terms.
Children
Sabotage is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.
Your rights
Depending on where you live, you may have the right to see what data we hold about you, to have it corrected, to have it deleted, or to object to how it is used. Ask us at privacy@ravenealassociates.com and we will answer. You will never be charged for asking, and asking will not affect your account.
Changes to this policy
If this policy changes in a way that affects what we collect or who it goes to, we will update this page and change the date at the top. The current version is always the one published here.