Privacy

Privacy policy

Last updated: 7 October 2026

In short

• The app has no user accounts, no ads and no analytics tools.
• The names you enter and your settings are stored only on your phone.
• Purchases go through Apple or Google. We use RevenueCat to keep track of which packs you own, with a random ID and no name.
• This website, getbusted.online, has no visitor statistics and no cookies. It only remembers the language you chose.

Who is responsible

Snikkerbua Holding AS, org. no. 927 118 300, Voldgata 27, 2000 Lillestrøm, Norway, is the controller for the Get Busted app and the websites getbusted.online and getbusted.no. Contact: kontakt@getbusted.no.

The app

What is stored on your phone

• Player names, chosen packs, level, language and other settings, so you do not have to enter them again.
• A game in progress, so you can pick up where you left off.
• That you have confirmed you are over 18, and whether you have turned on notifications.

This is not sent to us or anyone else, and it is deleted when you delete the app. Please do not use full names or sensitive information about other people as player names: first names or nicknames are enough.

Purchases

Purchases are made in the App Store or Google Play. Apple and Google process the payment and are responsible for the information they hold about you. We never receive your name, your email address or your payment details.

To know which packs you own, and so you can restore purchases on a new phone, we use RevenueCat (RevenueCat, Inc., USA) as our processor. RevenueCat receives a random app user ID created by the app, the receipt for the purchase from Apple or Google (which product, when, and the transaction ID) and technical information sent with the request, including IP address, platform and app version. RevenueCat stores data in the USA, and the transfer is based on the EU Standard Contractual Clauses (SCCs). The legal basis is that this is necessary to deliver what you have bought (GDPR Art. 6(1)(b)). The information is kept for as long as you may need to restore your purchases, or until you ask us to delete it.

New cards from the internet

The app fetches a file with current cards from getbusted.no. No information about you is sent, but as with any visit to a website, the server (GitHub, see below) sees your phone's IP address.

Notifications, sharing and ratings

• Notifications are scheduled on your phone. There is no notification server, and you can turn them off in the app or in your phone's settings.
• When you share a card or a summary, the app uses your phone's own share menu. We do not see what you share or with whom.
• The app may ask Apple or Google to show a dialog for rating the app in the store. We do not find out what you answer.
• Song cards may have a button that opens Spotify. Spotify's own terms and privacy policy then apply.

The websites

Hosting

The websites are hosted on GitHub Pages (GitHub, Inc., USA). GitHub logs visitors' IP addresses for security reasons. GitHub is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in delivering the website securely (Art. 6(1)(f)).

No statistics on getbusted.online

getbusted.online has no visitor statistics, no analytics tools and no cookies. It only remembers the language you chose, in your browser's local storage, and that is never sent to us. Read more on the cookies page. The Norwegian site getbusted.no counts visits with Metricool, but only if you say yes to statistics there.

Fonts and links

The fonts are on our own server, so nothing is sent to Google or anyone else when the page loads. Links to other services, such as the App Store, Google Play, Instagram or TikTok, only take you there when you tap them.

Emailing us

If you write to us, we use your email address and what you write to reply to you and follow up the matter. The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f)). The email is deleted when the matter is closed, unless we need to keep it, for example in the case of a complaint.

Age limit

Get Busted is made for adults over 18. We do not knowingly process information about anyone under 18.

Your rights

You have the right to access the information we hold about you, and to have it corrected or deleted. You can also ask us to restrict processing, object to processing based on legitimate interest, receive information you have given us (data portability) and withdraw consent. Write to kontakt@getbusted.no. We reply within one month.

Since we do not have your name linked to purchases, we need the receipt or order number from Apple or Google to find the right information at RevenueCat.

If you think we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet. If you live in the UK, you can also complain to the Information Commissioner's Office (ICO), and if you live in the EU, to the data protection authority in your country. We would appreciate it if you contact us first.

Changes

If we change how the app or the websites process personal data, we will update this page and the date at the top. If there are significant changes to something you have consented to, we will ask you again.