Privacy Policy

Last updated: 1 March 2026

Who we are

CrossWorld is operated by Rhubarb Press, based in London, United Kingdom. If you have any questions about this policy, contact us at enquiries@rhubarbpress.com.

Data we collect

• Email address
• Username
• Date of birth (for age verification)
• Gameplay statistics (scores, completion times, words found)
• Friend relationships
• Credit balance and division history

How we collect it

• Account creation (email, Google Sign-In, or Apple Sign-In)
• Age gate — date of birth entered during registration
• Gameplay activity recorded automatically as you play
• Multiplayer interactions (matches, ratings, results)

Authentication providers

We use Firebase Authentication to manage sign-in. You may authenticate via Google Sign-In, Apple Sign-In, or email and password. We receive only the information necessary to create and manage your account.

Why we use your data

• Account management and authentication
• Delivering gameplay features (crosswords, scoring, leaderboards)
• Matchmaking and multiplayer functionality
• Displaying non-personalised advertising

Legal basis for processing

• Contract — processing necessary to provide the gameplay service you signed up for
• Legitimate interest — analytics, security, and fraud prevention
• Consent — creating your account and agreeing to this policy

Third-party processors

Processor	Purpose	Data shared
Firebase / Google Cloud	Infrastructure, authentication, database	All app data (encrypted in transit and at rest)
RevenueCat	Subscription management	User ID and entitlement status
Google AdMob	Advertising	Non-personalised ads only
Sentry (EU region)	Error monitoring	Stack traces and user ID only (no PII by default)

Children

CrossWorld requires users to be aged 13 or older. We enforce this through a date-of-birth gate during registration. Users who do not meet the age requirement are blocked from creating an account. We do not knowingly collect personal data from children under 13.

Date of birth

Your date of birth is stored permanently as part of your account for regulatory audit purposes. It is personal data under GDPR, PIPEDA, and the Australian Privacy Act. Your date of birth is not shared with any third parties.

Data retention

Your personal data is retained for as long as your account is active. If you request account deletion, there is a 30-day grace period during which you may change your mind. After the grace period, personal data is permanently deleted. Completed game results are anonymised to preserve historical leaderboard integrity.

Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to the 30-day grace period)
• Request portability of your data
• Object to processing based on legitimate interest
• Lodge a complaint with the ICO (UK) or your relevant data protection authority

To exercise any of these rights, email enquiries@rhubarbpress.com.

Local storage

CrossWorld uses AsyncStorage on your device to persist authentication tokens and user preferences. We do not use tracking cookies. No data is stored on your device for advertising purposes.

Advertising

CrossWorld displays non-personalised advertisements via Google AdMob. We do not use behavioural targeting, and we do not collect or share your Identifier for Advertisers (IDFA).

International data transfers

Our infrastructure is provided by Google Cloud, which may process data in data centres outside the UK and EEA, including in the United States. Where this occurs, appropriate safeguards are in place, including standard contractual clauses.

Leaderboards

Leaderboard participation is opt-in. If you choose to appear on leaderboards, your username will be visible to other players. You can opt out at any time in your account settings.

Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page will be revised accordingly. Material changes will be notified to you within the app. Continued use of CrossWorld after changes constitutes acceptance of the updated policy.