Games privacy notice

We are Codeglue. We make the games Rocket Riot, ibb & obb, HydroTilt, Spellbenders and Antegods.

We are based in The Netherlands and you can reach us at or by post at Goudsesingel 178, 3011 KD Rotterdam, The Netherlands.

In this privacy notice we describe:

  • The ways we collect personal data about you when you play our games, and why we do so
  • How we use your personal data, and
  • The choices you have about your personal data.

We collect data, including personal data, when you launch our games, connect to a social networking site through our website or subscribe to our newsletter. 

When we publish our games ourselves we are the controller for your personal data. Like for example Rocket Riot on Steam and on the Windows Store.

When we work with a publisher, that publisher is the controller for our personal data. They control what data they collect, why, and how they use is. Like for example Rocket Riot on

We are committed to a lawful, fair and transparent processing of personal data, adhering to the EU General Data Protection Regulation (GDPR) and this notice describes how we handle your data.

1. We process the following (categories of) personal data

When you play our games we process the following personal data: 

  • Your IP address, and the country based on the IP address, 
  • Your device type (for example, iPhone 7, Samsung Galaxy S7) and operating system version.
  • Your Game Center ID (for iOS games) or Google Play ID (for Android games) and the nickname. 
  • For analytics, when you installed and played the game, your progress throughout the game, and events that are connected to your game-play. We generally cannot identify you with this data but treat it the same as personal data. 
  • Your e-mail address, if you subscribe to our newsletter. Note that if at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.

2. What (purposes) do we use the data for

We use this personal data to perform analytics for our games. We currently do not collect data, and do not allow third-parties to collect data related to the delivery of advertising. 

For the games we publish:

  • Rocket Riot on Steam and the Windows Store: we use a third-party analytics service. 
  • Rocket Riot on Apple iOS: we don’t collect any data. 
  • Rocket Riot on we use a third-party analytics service. 
  • ibb & obb on Steam and Playstation 3: we don’t collect any data.
  • HydroTilt: we store levels that players make with a user-name that players can choose. If you choose a real name or a nickname that can easily be tied to you, this may be personal data. Antegods : we use third-party analytics and multiplayer functionality.

For our websites, we use Google Analytics.

For our newsletter, we use the email address that you provided when you signed up, to send you the newsletter.

3. What is our legal basis for the processing

For analytics we base the processing of personal data on the legitimate interest of Codeglue and that of our partners: the ability to analyze how players progress through our games or use our websites to make them better, and to know our player-base on an aggregate level. For the third-parties we use, this is their legitimate interest is to be able to offer us their services. 

For multiplayer functionality we base the processing of personal data on the execution of a contract with you. Without the multiplayer functionality you would not be able to play the game.

For our newsletter, we base the processing of your personal data on your consent.

4. Where do we obtain the data from (sources) and who do we share data with

We obtain the data from our third-party services providers and share data with them. These are either controllers, or processors acting on our behalf. We have linked to their respective policies:

Your use of Steam ( is covered by Valve Inc.’s privacy policy, available here:

Your use of Microsoft Store ( is covered by Microsoft Corporation’s privacy policy, available here:

We might sell (part of) our business to another company. Such transfer of ownership could include the transfer of your personal data to the buyer if the data directly relates to that (part of the) business.

We will also release personal data to the authorities if we are compelled to do so by law.

5. How long and where do we store data 

We store the personal data that we collect for up to two years to be able to analyze player trends, and only aggregate data after that time. Aggregation data means that we can no longer look at data for individual players. 

When a third-party service provider is a controller, they may keep data as well, either for a shorter or longer period.

6. What safeguards have we taken to protect data

Taking into account the nature, scope, context and purpose of the processing, we have taken the following technical and organizational measures:

  • Access to our database and user accounts with third-party service providers is protected with access control.
  • Access to the database is limited, not all staff in our organization have full access. 
  • Data sent from our games is encrypted in transit where technically possible.

We do not actively monitor the security of our databases and need to rely on our processors to notify us of any data breaches. 

7. Transfer of your personal data

You should also know that your personal data may be transferred from your home country to third parties. If you are an EU resident, this could imply that we also transfer data to countries that do not offer an adequate level of protection for your personal data. When we transfer this data, we will do so only when we have put in place appropriate safeguards to protect your personal data. Please contact us to get a copy of the safeguards that we have put in place. Our contact details are at the bottom of this text.

8. Cookies

We, and our third-party services providers, use the following cookies: 

NameHow longPlaced byReason
1 minute
2 years from set/update
Google Inc.We use Google Analytics. This is a web analytics service provided by Google, Inc. to count visitors to our websites and analyse their usage of the site to help us determine the value of our content to our users.

Their precise use is described in the respective privacy policies: 

9. Your Rights

You have the right to request access to your personal data that we process. You also have the right to:

  • Rectify incorrect personal data or erase it in certain circumstances. 
  • Restrict or object to the processing of your personal data.
  • Receive your data so that you can use it elsewhere (data portability). 

If you wish to exercise any of the above rights, please write us at Finally, if we don’t properly handle your complaint, you have the right to lodge a complaint with a supervisory authority. If you do not know who your supervisory authority is, please contact us and we will tell you.

10. How to contact us

You can contact us with any questions you may have about the processing of your personal data or the use of cookies and similar technologies by us, or to exercise the above rights:




Goudsesingel 178, 3011 KD Rotterdam

The Netherlands


11. Version information

We last updated this notice in May 2018.