Privacy Policy
Last updated: 29 August 2026
This Privacy Policy explains how Wynyard Collective ("we", "us") collects and uses information when you visit rough.co.nz, play rough in a browser, or use our official Android app on Google Play.
Android app
rough Android app is a secure client for the same online game at rough.co.nz. It requires an internet connection. The app shows Google AdMob rewarded and interstitial advertisements (native ads, not website AdSense). Rewarded ads optionally grant a temporary in-game speed boost. Google may collect an advertising identifier and related signals for ad delivery and measurement, subject to your consent choices where required. The app requests network access only.
Package name: nz.co.wynyardcollective.rough. Privacy questions for the app: admin@wynyardcollective.co.nz.
Information we collect
- Account data — email address, password (stored as a bcrypt hash), and optional hero name when you register.
- Guest play — if you choose guest mode, progress is stored only in your browser (localStorage) until you create an account.
- Game save data — progress such as location, inventory, quests, and settings, stored so you can continue across devices while signed in.
- Technical data — standard server and security logs (for example IP address, user agent, and timestamps) may be processed by our hosting provider (Cloudflare) to operate and protect the service.
- Local storage — the browser may keep a local copy of your save and preferences for performance.
How we use information
- To create and authenticate your account
- To store and sync game progress
- To keep the service secure and reliable
- To understand aggregate traffic and improve the site (including via advertising partners described below)
Advertising
On the public website we may use Google AdSense. In the Android app we use Google AdMob rewarded and interstitial ads. Google and its partners may use cookies, advertising identifiers, or similar technologies to serve and measure ads. You can learn more and manage ad personalization at Google Ads Settings and review Google's policies at How Google uses information from sites that use our services.
Cookies
We use an httpOnly session cookie to keep you signed in. Advertising partners may set their own cookies subject to their policies. You can control cookies through your browser settings; disabling them may affect login and some site features.
Account and data deletion
You may request deletion of your account and associated cloud save data at https://rough.co.nz/delete-account or by emailing admin@wynyardcollective.co.nz. We will verify ownership of the account and delete personal data within a reasonable period, except where retention is required for security or legal obligations.
Data retention
We retain account and save data while your account remains active unless you request deletion. Contact admin@wynyardcollective.co.nz. Hosting and security logs are retained according to our provider's practices and operational needs.
Children
rough is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided such information, contact us and we will take appropriate steps.
Contact
Privacy questions: admin@wynyardcollective.co.nz