Effective date: July 27, 2026
Data Controller
ClueCrush is a word game published by Rdc Network di Barbara Basso, VAT No. 09792641004, Via delle Canarie 70, 00121 Rome, Italy.
Privacy enquiries can be sent to info@rdcnetwork.it.
Data stored on the device
Game progress, current level, stars, lives, hints, sound preferences and consent status are stored locally on the device.
This game data is not automatically transferred to the ENIG MAX account. It can be removed by clearing the app’s data or uninstalling ClueCrush.
Optional ENIG MAX account
ClueCrush can be played without registration. Users may optionally create or access a shared ENIG MAX account using:
- email and password; or
- Google Sign-In.
For email registration, the service processes the email address and a non-reversible cryptographic hash of the password. Passwords are never stored in plain text.
For Google Sign-In, the service receives a verified email address and a stable Google account identifier. Rdc Network does not receive or store the user’s Google password.
The service also processes an internal account identifier and technical session tokens required for authentication and security.
Technical data
The server may record technical logs containing:
- IP address;
- date and time of the request;
- requested resource and result;
- app version;
- basic device or app information;
- security and diagnostic events.
These logs are used to operate the service, diagnose errors, prevent abuse and protect accounts and infrastructure.
Advertising
ClueCrush uses Google AdMob to display advertisements.
Google and its advertising partners may process IP addresses, device or account identifiers, Advertising ID when available, app and advertising interactions, diagnostic information and approximate location inferred from the IP address.
Google User Messaging Platform may be used to collect and manage advertising preferences where required. Advertising processing depends on the user’s consent choices, device settings and Google’s policies.
Further information is available in Google’s Privacy Policy and the Google Mobile Ads data disclosure.
Purchases and subscriptions
ClueCrush may offer in-app purchases or subscriptions through Google Play.
Payments are processed by Google Play. Rdc Network does not receive complete payment-card details, but may process the product identifier, purchase token, transaction status and Premium entitlement information required to verify or restore purchases.
Purposes and legal bases
Data is processed to:
- create and manage the optional account;
- provide sign-in and authentication;
- operate the game and its online features;
- verify purchases and Premium access;
- display and measure advertising;
- prevent fraud, abuse and unauthorised access;
- diagnose technical problems;
- provide assistance.
Processing necessary to provide requested services is based on performance of the service. Security and abuse prevention are based on the controller’s legitimate interests. Advertising activities requiring consent are performed according to the user’s choices.
Data sharing
Rdc Network does not sell personal data.
Data may be processed by service providers necessary to operate ClueCrush, including:
- hosting, server and backup providers;
- Google, for Google Sign-In;
- Google Play, for distribution, purchases and subscriptions;
- Google AdMob, for advertising;
- technical providers required for security and app operation.
These providers process data according to their respective privacy policies and, where applicable, on behalf of the controller.
Retention
Account data is retained while the account remains active or until deletion is requested.
Local game data remains on the device until the app’s data is cleared or ClueCrush is uninstalled.
Technical API logs are generally retained for no longer than approximately 15 days, unless longer retention is necessary for security or investigation of abuse.
Encrypted backups follow a retention schedule of 7 daily, 4 weekly and 6 monthly copies. Data removed from the active database may therefore remain in restricted disaster-recovery backups for up to approximately six months.
Purchase, fraud-prevention or legal records may be retained only where necessary and for the applicable period.
Account and data deletion
Users can open Account inside ClueCrush and select Delete account.
Because the ENIG MAX account is shared, deleting it may also prevent access to the same account from other ENIG MAX applications.
Deletion removes the active account, credentials, sessions and associated server data. Locally stored ClueCrush progress may remain on the device and can be removed by clearing the app’s data or uninstalling it.
Deleting the ENIG MAX account does not automatically cancel a Google Play subscription. Subscriptions must be cancelled separately through Google Play.
Users who cannot access the app may visit the ENIG MAX account deletion page or contact info@rdcnetwork.it.
Security
Communications with the API use HTTPS. Passwords are not stored in plain text, and authentication tokens are protected using Android security facilities.
Access to servers and backups is restricted. Although no system can be completely risk-free, proportionate technical and organisational safeguards are applied.
Children
ClueCrush is not specifically directed to children under 13. Rdc Network does not knowingly request personal information directly from children.
User rights
Users may request access, correction, deletion, restriction or portability of their data, where applicable, or object to processing by contacting info@rdcnetwork.it.
Users may also lodge a complaint with the Italian Data Protection Authority.
Changes
This policy may be updated to reflect changes to ClueCrush, its providers or applicable requirements. The latest version and effective date will remain available on this page.
Contact
Rdc Network di Barbara Basso
Email: info@rdcnetwork.it