RIGGED
Privacy policy
Zero bytes collected.
Not anonymised, not aggregated, not “only to improve the experience”. There is no server to send anything to, so there is no version of this where we quietly change our minds.
- No account
- No email, no phone number, no profile, no password to lose. Nothing to sign up for.
- No analytics
- No crash reporting, no event tracking, no advertising SDK, no attribution.
- No backup
- Android’s cloud backup is switched off in the manifest. Your settings never leave the phone, not even to your own Drive.
Phone to phone. Nowhere else.
Play Together asks for the network permission because Android has no “local network only” permission to request. The packets travel to the phone next to you and stop. There is no middle.
Cards are dealt per device: the host tells your phone your own hand and everyone else’s card count. Nobody’s hand crosses the wire to someone who should not see it.
Three permissions, and what each is for.
This is the complete list from the app’s manifest. There is no location, no contacts, no camera, no phone state, no storage, and no advertising ID.
Talking to the phone next to you
Opening a socket or sending a broadcast on your own Wi-Fi needs this, even though the packets never leave the room.
Never used for: any server, API, download, or advert. Every game works in aeroplane mode except Play Together.
Telling two failures apart
“You are not on Wi-Fi” and “you are on Wi-Fi but nobody is hosting” look identical to a player and need opposite advice.
Never used for: reading your network name, your SSID list, or anything that says where you are.
Two games that listen to how you say it
Yes or No and Magic 8-Ball let you ask out loud. Requested the first time you open one, never at launch, and switchable off inside both.
Never used for: transcribing, recognising speech, identifying a voice, or uploading anything. Deny it and both games still work — you tap instead of talking.
One detail worth being exact about, because “we never record you” is the kind of sentence people write without checking. The meter scores delivery — how loud you got, how steady you held it, how long you hesitated. It is a party gag and the app says so; it is not a lie detector, because there is no acoustic signature of lying and anything sold as one is a coin flip with a waveform on it.
Normally the samples are read as a live stream and thrown away as they arrive — nothing is written down. On a platform that refuses to stream, the recorder falls back to a single temporary file in the operating system’s own cache, deleted the moment the score is read. Never kept, never copied, never sent, never touched by any other part of the app.
What is stored, and where.
One JSON file in the app’s private folder, which no other app on your phone can read. Uninstalling the app deletes it. It holds:
- Your settings — sound, haptics, reduce motion, accent colour, animation speed
- Lists you have typed — names, options, dares, forfeits, teams
- Photos you picked for Mystery Boxes or Tier Ranker, copied into the app’s own folder so it needs no standing access to your gallery afterwards
- Your RIGS balance — play money that cannot be bought, sold, or cashed out
- A random 16-character id, generated on your device, so a host can give you your seat back if your Wi-Fi drops mid-game. It is not a hardware id, not derived from anything about you or your phone, identifies nothing outside that one game, and never leaves your local network
None of it is transmitted anywhere. Android’s automatic cloud backup is
explicitly disabled — allowBackup="false" and a
dataExtractionRules file that excludes everything — so it is not copied
to your Google Drive and does not follow you to a new phone. That is the trade: nothing to
restore, because there is nothing stored anywhere but here.
Don’t take our word for it.
Anyone can write “we respect your privacy”. These are things you can test yourself, in about two minutes, with no tools beyond the phone in your hand.
- Put the phone in aeroplane mode and play. Every game except Play Together works exactly the same. Nothing spins, nothing waits for a network, nothing degrades — because nothing needed one.
- Check the permission list yourself. Settings → Apps → RIGGED → Permissions. You should see nothing beyond a microphone entry. No location, no contacts, no files, no nearby devices.
- Read the data safety label on Google Play. We fill it in; Google audits it against what the app actually does and can pull the listing if the two disagree. It says no data collected and no data shared.
- Open devtools on this page and count the requests. There should be exactly three, all to this domain, and the table below names them. Find a fourth and this page is lying to you — the address at the foot is how to say so.
| File | Origin | Why | Size |
|---|---|---|---|
| / | this domain | The policy. CSS, the diagram, and the display font are all inline. | ≈68 KB |
| /favicon.ico | this domain | The icon in your tab and in search results. | ≈9 KB |
| /mark.png | this domain | The logo at the top of this page. | ≈8 KB |
| Third-party domains contacted: none. The typeface ships inside the page, so it adds no request; no scripts, no frames, no beacons, no analytics. | |||
There are none.
No advertising network. No analytics provider. No crash reporter. No attribution SDK. No social login. No payment processor — because there is nothing to buy: no subscription, no in-app purchase, no coin pack, and no way to spend real money anywhere in the app.
The app is built with open-source Flutter packages for playing sound, reading files, and speaking text. They run locally on your device and none of them phone home. Nobody is paying us for a slot inside this app, which is the actual reason there is nothing to disclose here.
Rated 18+, and honestly so.
RIGGED is not directed at children. The dare and confession decks reference drinking and adult situations, so the listing is rated for adults and carries no “Family” tag — a rating we chose knowing it costs us reach, because the alternative is claiming something the app does not honour. Since nothing is collected from anybody, no data is knowingly collected from children either.
Every release, and what it collected.
Most of these builds were internal testing that only we ran; 1.2.1 is the first release on the public store. Read the right-hand column down the page: a whole multiplayer mode arrived, the app went from private to public, and the answer never changed.
| Version | Released | Track | What changed | Collected |
|---|---|---|---|---|
| 1.0.3 | Aug 19, 2026 | Internal testing | First build — the single-device party games. | None |
| 1.0.4 | Aug 19, 2026 | Internal testing | Pointer and keyboard support, so the games play on a desktop too. | None |
| 1.1.0 | Aug 21, 2026 | Internal testing | Mystery Boxes, and remove-the-winner on the wheel. | None |
| 1.2.0 | Sep 3, 2026 | Internal testing | Play Together — multiplayer over your own Wi-Fi. The first build to ask for the network permission, and the reason this policy was written. Still no server, still nothing collected. | None |
| 1.2.1 | Sep 10, 2026 | Public release | The first public release. Sound across the Play Together games, and UNO played by the proper rules. | None |
If this ever stops being true.
If a future version collects anything, this page changes before that version ships, the date at the foot changes with it, and the Play data safety label is updated in the same release. A policy quietly edited after the fact is worth nothing, and the edit history of this page is public.
There is no mailing list to notify, because there are no email addresses on file. The date below is the honest signal — if it has not moved, nothing has changed.
A real person reads this.
Questions about privacy, a bug, or something in here that reads as evasive — say so, and it gets fixed or explained.