Imposter X: Party Game ("Imposter X," the "App," "we," "us," or "our") is a local, pass-the-phone social-deduction party game published by Cuberix ("Cuberix," the "Publisher"), the data controller for the limited personal data described in this policy. The App is available on Apple's App Store for iPhone (bundle identifier com.cuberix.imposterx).
This Privacy Policy explains what information the App does and does not collect, who the third-party providers are, and the rights you have. It applies to your use of the App. By using Imposter X, you agree to the practices described here.
The data controller for the limited personal data described in this policy is Cuberix. For any privacy question or request, contact us at cuberixapps@gmail.com. If you are in the EEA or the UK, you may contact us at the same address regarding your rights under the GDPR / UK GDPR.
If you have questions, contact us at cuberixapps@gmail.com.
Imposter X is intentionally designed to work without an account. We want to be precise about this because it shapes everything else in this policy:
We do not collect any of the following:
The App is built so that the only data leaving your device is the minimum needed for ads, for the optional features you turn on, and for purchases. Specifically:
| Data type | Used for | Who handles it | Default state |
|---|---|---|---|
| Device advertising identifier (IDFA) and coarse usage / ad-interaction data | Showing ads in the free version | Google AdMob | Ads are shown in the free version. The IDFA is accessed and used for tracking only if you grant App Tracking Transparency (ATT) permission; if you decline or have not yet responded, the IDFA is not available and AdMob serves non-personalized ads (no cross-app tracking). |
| Product interaction / usage events (e.g., which screens are used, game-flow events) | Understanding and improving the App | Firebase Analytics | Off by default; collected only after you give in-app consent, and you can turn it off again at any time. |
| Crash logs and diagnostic data | Diagnosing crashes and stability bugs | Firebase Crashlytics | Off by default; collected only after you give in-app consent, and you can turn it off again at any time. |
| Purchase history and an anonymous, app-generated user identifier | Unlocking and restoring your "Pro" subscription | RevenueCat (with Apple as the payment processor) | Active only if you make or restore a purchase. |
| Game content requests (word packs / categories) | Delivering up-to-date game content to your device | Cloud Firestore (Google) | Active; no personal data is sent by players. |
| Settings and game state | Running the game | Stored on your device only | Active; never leaves the device. |
The data types above are reflected in the App's privacy manifest (PrivacyInfo.xcprivacy) and the "App Privacy" labels on the App Store. The core declared types are: Device ID (used for tracking / third-party advertising — this corresponds to the AdMob IDFA described above, and applies only when you allow tracking via ATT), Product Interaction (analytics), Crash Data (app functionality), and Purchase History (app functionality). The App Store listing's "App Privacy" section may enumerate these and related sub-categories in more detail; please refer to that listing for the full, current declaration.
Note on the RevenueCat identifier. The anonymous, app-generated user identifier used by RevenueCat is an app-functionality identifier tied to your Purchase History so the App can recognize and restore your "Pro" entitlement. It is not the "Device ID used for tracking" declared for advertising, and it is not used to track you across other companies' apps or websites.
Imposter X includes the following third-party software. Each is described below with what it does and a link to its own privacy policy. These providers act as independent data controllers or processors for the data they handle; their handling is governed by their own policies.
The free version of the App displays advertising served by Google AdMob. AdMob may collect coarse, ad-related usage information (such as ad impressions and interactions, device type, and general app context) to select and measure ads. Access to your device's advertising identifier (IDFA) — which corresponds to the "Device ID used for tracking / third-party advertising" type declared in the App's privacy manifest — depends on your App Tracking Transparency choice (see Section 6):
Google's privacy policy: https://policies.google.com/privacy
How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites
Firebase Analytics records product-interaction and usage events to help us understand how the App is used and where to improve it. This collection is OFF by default. It is enabled only after you give consent inside the App, and you can change that choice in the App's settings at any time — withdrawing consent is as easy as giving it. The analytics data is not used by us to track you across other companies' apps or websites.
Firebase privacy and security: https://firebase.google.com/support/privacy · https://policies.google.com/privacy
Firebase Crashlytics collects crash reports and diagnostic information (such as the type of crash, device model, OS version, and a technical stack trace) so we can fix stability problems. This collection is also OFF by default and is enabled only after in-app consent. You can change this choice in the App's settings at any time.
Firebase privacy: https://firebase.google.com/support/privacy
RevenueCat helps us manage in-app purchases and the "Pro" subscription. When you buy or restore a purchase, RevenueCat processes your purchase history and an anonymous, app-generated user identifier that lets the App recognize that your device is entitled to "Pro." This identifier is an app-functionality identifier tied to your purchase, not a cross-app tracking identifier. RevenueCat does not receive your Apple ID, your payment card, or your name from us.
RevenueCat privacy policy: https://www.revenuecat.com/privacy
All payments for the "Pro" subscription are processed by Apple through the App Store. The App never sees or stores your payment card details. Your transaction, billing, refunds, and subscription management are handled by Apple under Apple's terms and privacy policy.
Apple privacy policy: https://www.apple.com/legal/privacy/
We use Google's Cloud Firestore to deliver game content — such as word packs and categories — to the App. The App is offline-first: content is cached on your device so you can play without a connection. Players do not write personal data to Firestore through normal gameplay; the App reads content from it.
Google Cloud / Firebase privacy: https://firebase.google.com/support/privacy · https://cloud.google.com/terms/cloud-privacy-notice
The free version of Imposter X is supported by ads. On iPhone, ad personalization depends on the device advertising identifier (IDFA) and on Apple's App Tracking Transparency (ATT) framework:
ATT is separate from the in-app analytics/crash consent. The ATT prompt controls advertising tracking only. Firebase Analytics and Crashlytics are governed by a separate in-app consent toggle (see Sections 5.2, 5.3, and 8) and remain off by default regardless of your ATT choice.
You can change your tracking choice at any time in iOS Settings → Privacy & Security → Tracking, and you can limit ad personalization in iOS Settings → Privacy & Security → Apple Advertising.
Removing ads: The "Pro" subscription removes ads. See Section 7.
Imposter X offers an optional auto-renewing subscription ("Pro") that unlocks premium features and removes ads. Purchases are made through Apple's in-app purchase system:
If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we rely on the following legal bases:
How consent is collected. For analytics, crash reporting, and personalized advertising we obtain consent through an in-app consent mechanism before the relevant SDK begins collecting data. The consent is intended to be freely given, specific, informed, and unambiguous, and you can withdraw it as easily as you gave it (via the in-app settings toggle, or by declining the ATT prompt for advertising).
For users in the EEA/UK, a GDPR/ePrivacy-valid consent (for example, a Google User Messaging Platform / consent-management prompt) governs personalized ads and analytics. Apple's ATT is an additional Apple platform requirement, not by itself the GDPR legal basis for processing. Non-essential SDKs do not initialize before the applicable consent is obtained.
Because there is no account and we hold no identity profile of you, the most powerful controls are built directly into the device and the App:
Subject to legal conditions, you may have the right to: access the personal data processed about you; correct it; erase it; restrict or object to processing; data portability; and withdraw consent at any time. You may also lodge a complaint with your local data protection authority. To exercise these rights with us, contact cuberixapps@gmail.com. We will respond within the period required by applicable law (generally one month under the GDPR, extendable where permitted). Note that for data held by third parties as independent controllers (e.g., Google for AdMob), you may also exercise rights directly with them.
If you are a California resident, you may have the right to know what personal information is collected, to delete it, to correct it, to opt out of the "sale" or "sharing" of personal information, and to limit the use of sensitive personal information — all free from discrimination for exercising your rights.
For transparency, the following describes our practices at a category level:
| Category of personal information | Source | Business / commercial purpose | Disclosed or "shared" with |
|---|---|---|---|
| Identifiers — device advertising identifier (IDFA) | Your device (only after you allow ATT tracking) | Serving and measuring advertising in the free version | Google AdMob — may constitute "sharing" (cross-context behavioral advertising) when tracking is allowed |
| Identifiers — anonymous app-generated purchase identifier | Generated by the App | Providing and restoring the "Pro" subscription | RevenueCat, Apple — not "sold" or "shared" for advertising |
| Internet / electronic activity — product-interaction and usage events | Your use of the App (only after in-app consent) | Understanding and improving the App | Firebase Analytics (Google) — not "sold" or "shared" for advertising |
| Diagnostics — crash logs and technical diagnostics | Your device (only after in-app consent) | Fixing stability and functionality problems | Firebase Crashlytics (Google) — not "sold" or "shared" for advertising |
| Commercial information — purchase history | Your purchase activity | Providing and restoring the "Pro" subscription | RevenueCat, Apple — not "sold" or "shared" for advertising |
We do not "sell" your personal information for money. However, under the CPRA's broad definitions, our use of the device advertising identifier for personalized advertising through Google AdMob may be considered "sharing" (cross-context behavioral advertising) when you allow tracking.
Do Not Sell or Share My Personal Information — Notice of Right to Opt Out. You can opt out of this "sharing" directly:
Sensitive personal information: we do not use sensitive personal information to infer characteristics about you, so no separate "right to limit" request is required; the limited identifiers above are used only for the purposes stated.
We do not knowingly sell or share the personal information of consumers we know to be under 16, and we do not knowingly process such information for sale or sharing without the affirmative opt-in (ages 13–15) or parental consent (under 13) that the CPRA requires. See Section 10 regarding children. Residents of other US states with similar laws may have comparable rights. To make a request, contact cuberixapps@gmail.com; we will respond within the period required by applicable law (generally 45 days under the CCPA/CPRA, extendable where permitted), and we may need to verify your request using information reasonably available to us, such as your device or transaction details.
Imposter X is a general-audience party game. It is not in the App Store "Kids" category and is not directed to children under 13 (or the equivalent minimum age in your country). Because the App uses the device advertising identifier (IDFA) for advertising, it is not designed for, and should not be used by, children under 13.
We do not knowingly collect personal information from children under 13, and (per Section 9.3) we do not knowingly sell or share the personal information of anyone under 16 without the consent the law requires. The App does not provide an age gate; if you believe a child under 13 has provided information to us, contact cuberixapps@gmail.com and we will take appropriate steps to address it.
We keep data only as long as needed for the purposes described in this policy or as required by law.
We rely on Apple's platform protections, on-device sandboxing, and the security practices of our reputable third-party providers (Google/Firebase, RevenueCat, Apple), which protect data with encryption in transit and at rest as described in their own documentation. No method of transmission or storage is completely secure, but because the App holds no account credentials and stores gameplay locally, the personal-data attack surface is intentionally minimal.
In the event of a personal-data breach that affects you, Cuberix will notify the affected users and/or the relevant supervisory authority as and where required by applicable law (including Articles 33 and 34 of the GDPR / UK GDPR).
Our third-party providers (Google/Firebase, RevenueCat, Apple) may process data on servers located in the United States and other countries that may have data-protection laws different from yours. As the data exporter, Cuberix ensures that such transfers rely on an appropriate transfer mechanism — for example, the EU-US / UK Extension / Swiss-US Data Privacy Framework where the importing provider is certified, and/or the EU Standard Contractual Clauses with the equivalent UK addendum. You may request information about the safeguards that apply to transfers of your personal data by contacting cuberixapps@gmail.com (Art. 13(1)(f) / Art. 46 GDPR). By using the App, you understand that data handled by these providers may be processed outside your country of residence.
The App and this policy may contain links to third-party websites and services (for example, advertisers' destinations, Apple, Google, and RevenueCat). We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policy of any third-party service you interact with.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice within the App or on the App Store listing. Your continued use of the App after an update means you accept the revised policy.
If you have questions, requests, or complaints about this Privacy Policy or your data, contact:
Cuberix (Publisher)
Privacy: cuberixapps@gmail.com
Support: cuberixapps@gmail.com (see our Support page)
App: Imposter X: Party Game (com.cuberix.imposterx)
We will respond to privacy requests within the timeframe required by applicable law.