Rotbox Support

Privacy

Effective 2 October 2026

Short version: Rotbox has no accounts of its own. The app sends us usage stats tied to a random installation ID, such as which game you played and for how long, so we can make it better. The free version shows ads from AppLovin and its partners as labelled cards between videos in the feed and as rewarded ads. Those partners collect device data to pick and measure ads, and you choose whether they can track you. Instagram, TikTok and YouTube Shorts run inside the app on their own websites, under their own privacy policies, and we never see your passwords or what you watch. You can wipe your Rotbox data from Settings. This policy covers Rotbox on iPhone, iPad and Android.

Who we are

Rotbox is made by Kramer Ventures GmbH, Hagenholzstrasse 81, 8050 Zurich, Switzerland (“we”, “us”). We’re responsible for the personal data described here: the “controller” under the EU and UK General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). You can reach us about anything in this policy at team@rotbox.app.

What Rotbox is

Rotbox splits your screen in two. The top half shows Instagram Reels, TikTok or YouTube Shorts, each the platform’s own website loaded inside the app. The bottom half runs a small game. The games are built into the app and run on your device. Interdimensional Cable is marked “coming soon”.

What we collect

Rotbox has no user accounts of its own. The app sends us usage stats tied to a random installation ID:

Some things you choose to send go with the same ID:

We never collect what you watch: no videos, links, creators, captions, likes, comments or anything from your Instagram, TikTok or YouTube account. To show the feed, the app reads the name, caption and link of the post on screen, on your device only, and never sends or stores it. Rotbox itself doesn’t use your advertising identifier, your location from location services, contacts, photos or crash reports.

Our server runs on Cloudflare, which stores this data for us. We don’t sell it, we don’t give it to advertisers, and we don’t combine it with other companies’ data.

Why we use it

Legal bases (EEA and UK)

In Switzerland, we process personal data in line with the principles of the FADP. Where it requires a justification, we rely on the same grounds: your consent, providing what you asked for, our overriding interests or the law.

Ads

The free version of Rotbox on iPhone and iPad shows ads through AppLovin MAX: native ads shown as a full card between videos in the feed (one every few videos, clearly labelled “Ad”, alternating with Rotbox’s own “Get Rotbox Premium” card), and rewarded ads you can choose to watch to unlock games. Rotbox never hides, skips or changes Instagram’s own ads. To show, pick and measure ads and to prevent fraud, AppLovin and the networks below collect information from your device directly, such as its IP address (used to estimate your general location), device and system details, the ads you see and how you interact with them, and identifiers: the device’s advertising identifier (IDFA) if you allow tracking, and an identifier for vendor (IDFV). They use it under their own privacy policies:

Rotbox never gives ad partners what you watch, your Instagram or TikTok account or anything you type. Rotbox Premium turns off the ads and cards Rotbox shows, and for Premium users the ad partners’ code isn’t started. Ads inside Instagram’s, TikTok’s or YouTube’s own feed, marked “Sponsored” or “Ad”, come from that platform, not from us. Rotbox leaves them as the platform shows them, and Premium doesn’t remove them.

Your choices

Instagram (Meta)

TikTok and YouTube Shorts

Unlocking games by sharing

You can unlock Surf by sharing Rotbox with 3 friends from your phone’s share sheet. You pick who to send it to and which app to use. Rotbox only counts completed shares, on your device and in the usage stats above. We don’t see who you share with or what they do with the link.

Purchases and Premium

Rotbox Premium is a subscription. On iPhone and iPad, Apple handles payment through the App Store; on Android, Google handles it through Google Play Billing. We never see your payment details. Apple or Google tells the app only whether a subscription is active, and the stats above note the purchase itself. To cancel, manage the subscription in your App Store or Google Play account.

Subscription screens are shown through Superwall. Superwall receives an anonymous ID it creates for the app, an identifier for vendor, device and app details (like model, OS version, language and region), the approximate region your IP address points to, which screen was shown and whether a purchase or restore happened. We use it to show and improve these screens. It doesn’t receive your payment details or your feed, and Superwall doesn’t use purchase data for advertising.

What stays on your device

How long we keep data

Deleting your data

In Rotbox, open Settings → Delete account, on iPhone, iPad or Android. This clears your connected accounts, Instagram’s, TikTok’s and YouTube’s website data, unlocks and Rotbox settings on this device, removes this installation’s record and its link to its usage stats on our server (the stats already sent become anonymous and expire within 3 months; anonymous stats can’t be picked out to delete one by one), removes your Notify me registration and push token from our server, and gives the app a new random installation ID. On iPhone and iPad, if your phone is offline, the app keeps trying until our server confirms. To have your feedback erased as well, email us. Delete account doesn’t delete your Instagram, TikTok or YouTube account, and it doesn’t cancel an App Store or Google Play subscription. You can also disconnect Instagram or TikTok from Settings, or delete the app.

Sharing and international transfers

We share personal data only with the service providers and partners named in this policy, and with authorities when the law requires it. Cloudflare, AppLovin, Google, Liftoff, Unity, Superwall, Appodeal and BidMachine are based in or process data in the United States and other countries, and Mintegral is part of Mobvista, with operations in Asia. When data from the EEA or UK goes to a country without an adequacy decision, it’s protected by safeguards such as the European Commission’s Standard Contractual Clauses (with the UK addendum), or the EU-U.S. Data Privacy Framework where the recipient is certified. Switzerland is recognised by the EU and the UK as providing adequate protection. When data goes from Switzerland to a country the Swiss Federal Council hasn’t found adequate, we rely on the Swiss-U.S. Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC), adapted for Swiss law.

Your rights

EEA and UK. You can ask to access, correct or erase your personal data, to restrict or object to how we use it (including objecting to processing based on legitimate interests), and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. You can also complain to your local data protection authority; in the UK, that’s the Information Commissioner’s Office.

Switzerland. Under the FADP, you can ask for access to your personal data, have it corrected or deleted, object to how we use it, withdraw consent, and receive data you gave us in a common electronic format. Our supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), and you can report a concern to it.

California and other US states. In the last 12 months, Rotbox and its partners collected these categories: identifiers (the installation ID, push token, advertising identifier and IDFV, and IP address used by ad partners), commercial information (subscription purchases), internet or app activity (app usage and ad interactions), approximate location (country or region from your IP address), and, only if you send feedback, the email or handle you give us. Ad partners may also draw inferences about your interests for advertising. We disclose identifiers and app and ad activity to the ad partners above for cross-context behavioural advertising, which may count as “selling” or “sharing”; we don’t sell or share any other data, we don’t collect sensitive personal information, and we don’t knowingly sell or share the personal information of anyone under 16. You have the right to know, access, correct and delete your personal information, to opt out of selling or sharing (see Your choices), and not to be treated differently for using these rights. Because Rotbox has no accounts, we verify a request using your installation ID. You can use an authorised agent.

To use any of these rights, email us. We’ll reply within the time the law sets, usually one month (45 days in California).

Children

Rotbox is rated 16+ and isn’t directed at children. We don’t knowingly collect personal data from anyone under 16. Instagram, TikTok and YouTube also set their own minimum ages, and you need an Instagram account to use the Instagram feed. If you think someone under 16 has used Rotbox, email us and we’ll delete what we hold.

Security

Data sent to our server travels over HTTPS, IP addresses are removed before storage, and only we can access what’s stored. No system is perfectly secure, but we keep what we collect small to limit the risk.

Changes

If this policy changes, we’ll update this page and the date at the top.

Contact

Questions about privacy, or a request about your data? Write to Kramer Ventures GmbH, Hagenholzstrasse 81, 8050 Zurich, Switzerland, or email us:

team@rotbox.app