Last updated: 5 October 2026
Rogue Broker does not collect or transmit any personal information. There are no accounts to create, no advertising, and no analytics service.
The app is built with one small open-source library, Pow, which draws some of the interface's animation. It is code that ships inside the app, not a service. It does not collect data, contact a server, or get told anything about you. It is named here because an earlier version of this policy said the app contained no third-party libraries at all, and that stopped being true.
One switch in Settings changes what is sent. Share run data starts on if you installed through TestFlight and off if you downloaded it from the App Store; with it on, the game sends the developer a record of how each run went, so the game's difficulty can be tuned against real play instead of guesswork. You can turn it off at any time, in Settings, and nothing further is sent. It is described in full under Run data. Nothing else is sent to the developer in the background. The only other transmissions are the iCloud sync and Game Center submissions described below, and those go to Apple, not to the developer.
Separately, you can choose to email the developer from inside the app. The app prepares a draft, you read it, you edit or delete anything you would rather not send, and you press send. The app cannot send mail by itself. Because these are ordinary emails, the address you send from is visible to the developer. See Email you choose to send.
Everything the game needs is written to a file inside the app's own storage on your device: your Data Cores, your trader's condition and wardrobe, unlocked worlds and ranks, permanent upgrades, achievements, collection progress, recent run history, and settings. It is a plain save file. Deleting the app deletes it.
If you are signed in to iCloud, your profile is synchronised across your own devices using Apple's CloudKit, in your private iCloud database. That data belongs to your Apple Account. The developer cannot read it, cannot access it, and receives no copy of it.
Sync is optional and automatic. With no internet connection or signed out of iCloud the game works exactly as it does offline, saving only to the device, and syncs by itself later if a connection becomes available.
Deleting the app leaves that iCloud copy in your account, and it comes back if you reinstall. Erasing your profile in Settings deletes it too. The erase reaches the cloud copy even if it has to wait for a connection.
Rogue Broker has a Share run data switch in Settings. It starts on if you installed the game through TestFlight (a test build exists to be measured, and its testers volunteered for exactly that) and off if you bought it from the App Store. Settings says which, on the switch itself. Turn it off and nothing further is recorded or sent; turn it on and it resumes.
With it on, the game makes a record when a run ends. It describes the game you played, and nothing else. In full, that is:
It is used for one thing: working out how hard the game is.
It does not include your name, email address, Apple ID, location, device model, any advertising identifier, or anything you typed.
On the seed. Earlier versions of this policy said the seed was not recorded. It is, and has been since the record's ninth revision, so the change is stated plainly rather than quietly edited out. A seed names a board. For a Daily Challenge it is a date that every player in the world shares, which is what lets the difficulty of one fixed board be measured across the people who played it. For an ordinary run it is drawn fresh each time from the clock and a random number, with nothing about your device or account anywhere in it, so two runs sent from one phone have no more in common than two runs from two phones. A seed you type yourself into the optional Seed box is not recorded. That box is free text, and the promise above that nothing you typed is sent is meant literally.
Where it goes. The record is written to your device and also sent to the developer's own iCloud database, using Apple's CloudKit. It is sent when the run ends; if you have no connection at the time it waits on your device and goes when one is available, or is dropped if too many pile up. Nothing else in the app is transmitted this way.
On the word "anonymous". The record carries no identifier of yours, and each run is stamped with a fresh random number that cannot be matched to any other run. Apple does, however, stamp records in a developer's database with an identifier it assigns per app. That identifier cannot be resolved to your Apple Account, your name or your email. It is stable, though, so several runs sent from one device are visibly from the same device. That is pseudonymous rather than strictly anonymous, and it is written here rather than glossed over.
Your copy. The same records are kept on your device, in the app's own storage. Earlier versions offered three buttons in Settings to mail, export or clear that file by hand; they existed because sending it yourself was once the only way it reached the developer, and they went when the sending became automatic. Turning the switch off deletes the copy, as below.
Turning the switch off stops it immediately, and deletes both anything waiting to be sent and the copy on your device. Erasing your profile does the same. Records already sent are on the developer's side; if you want those removed as well, email the address at the bottom of this page.
Rogue Broker sells two things: the full version, which removes the free-run limit, and a one-time pack of Data Cores. Both are handled entirely by Apple's own in-app purchase system.
The developer never sees your payment details. Your card, your Apple Account, your name and your billing address are between you and Apple; the app has no access to any of it and never receives it. What the app is told is whether this Apple Account owns each product, and nothing more.
That answer is read back from Apple each launch and each return to the app; a purchase follows you to a new phone because it is tied to your Apple Account, not to anything the app stores. The Data Core pack's credited cores live in your save file and sync through your own private iCloud database like the rest of it. RESTORE PURCHASES in Settings, and RESTORE on either purchase screen, asks Apple again from scratch.
Nothing about purchases is included in run data. A shared run record does not say what you bought with real money, or whether you bought anything at all.
One feature in the app prepares an email for you. It only opens a draft: you can read and edit every part of it first, and cancelling sends nothing.
Reporting a bug. Settings offers Report a bug. The draft contains what you wrote, plus details of the run you were playing so the problem can be reproduced: the run seed, your trader's condition, rank, level and day, net worth, the quota due, which relics you held, and the app and iOS version. All of it is shown on screen before you send. This is available whether or not Share run data is switched on.
The email carries your own email address, because that is how email works. It is used only to read what you sent and to reply to you. It is not added to any mailing list, not shared with anyone, and not used for anything else.
If you sign in to Game Center, Daily Challenge scores and achievements are submitted to Apple's Game Center leaderboards. Game Center is operated by Apple and is governed by Apple's Privacy Policy. There is no leaderboard screen in the game at present, so declining Game Center changes nothing you can see: the game plays identically either way, and a score that cannot be submitted is simply not submitted.
Rogue Broker does not knowingly collect personal information from anyone, of any age. It asks for none, and there is none in a run record: the only things the developer ever receives are the anonymous run data described above, if that switch has been turned on, and whatever someone chooses to put in an email and send.
If this policy changes, the updated version will be posted here and the date above revised. Any change that would involve collecting data would ship with a new app version and be described here first.
Questions about this policy: roguebrokergame@gmail.com