Privacy policy

Controller+ turns your phone into a game controller. It is published by All Blue LLC. This policy covers the Controller+ apps for iPhone, iPad and Android, the desktop app, the phone-browser controller and the controller.plus service.

In short: there are no accounts and no ads in the app, and we do not sell personal data. Your controls go to the game you join, as directly as possible: phone to game, encrypted. We count how the app is used (anonymously) and measure which of our own ads bring people to it. On iPhone we only use your device's advertising identifier if you allow tracking.

What the app uses, and where it goes

• The name you choose. You can give yourself a player name. It is stored on your phone and sent to the games you join, so other players see it. We do not keep it.
• Your controls. Button presses, stick and pedal positions, and the steering or flight values the app works out from tilting your phone.
  • They are sent to the game you joined: peer to peer when possible (WebRTC, encrypted with DTLS), otherwise through our relay or a nearby relay operated by Cloudflare.
  • They are passed on in real time and not stored.
• Motion sensors. Wheel and flight modes read the phone's tilt on the phone. Only the resulting control values leave it; raw sensor readings are not sent.
• Camera. Used only to scan a game's QR code. Images are processed on your phone and never stored or sent.
• App version and network type. When you join a game, the app tells it which Controller+ app and version you use, and whether you are on Wi-Fi or mobile data.
  • The game can then ask you to update, or suggest Wi-Fi for a faster connection.
  • We do not keep this with your name.
• Computers you pair with. When you pair with the Controller+ desktop app, your phone keeps a pairing key in its secure storage (the iOS Keychain or Android Keystore).
  • The computer keeps a one-way fingerprint of that key plus a random identifier for this installation, so it can recognise your phone again.
  • The key itself never travels through our relay. Reconnecting from another network uses a challenge that proves both sides hold it.
• Private screens. Some games show you private information (a secret role, a word to draw). It goes from the game to your phone and is not kept by us.

Usage analytics

To learn which features people use and keep the service healthy, the apps, the browser controller and our own game pages send us small usage events in the background:

• the app was opened or installed;
• a QR code was scanned and a game joined;
• minutes played, as a count every two minutes while you are connected or practising;
• a game round started or ended (on our game pages);
• the Pro screen was viewed or Pro was bought (with the store's price and currency);
• you were asked to update;
• you changed controller mode.

Each install is identified by a random ID created by the app. It is not linked to your name, email, phone number or contacts. With the events we receive the app version and platform, and the country your connection comes from (looked up by our network provider, Cloudflare). We do not store your IP address with them.

Events are added up into daily totals, which have no IDs. Each install also has a record that holds:

• its random ID, platform and app versions, and the country;
• when it was first and last seen;
• its campaign attribution: on iPhone, Apple's Search Ads answer, your tracking-permission answer and, only if you allowed tracking, the advertising identifier; on Android, the install link's campaign fields (source, medium, campaign, content, term), a Google Ads click ID if the link had one, and the advertising ID (see below);
• its purchase count, date and amounts.

Install records are deleted automatically two years after the app was last opened.

You can turn usage events off in the app (Settings › Usage data). From then on that also stops the advertising measurement below: the milestones and advertising identifier on iPhone, and the install referrer and advertising ID on Android. The browser controller sends events only to the website that serves it, and sends none if your browser asks not to be tracked (Global Privacy Control or Do Not Track).

Measuring our advertising

When we advertise Controller+, we want to know which ads lead to installs and purchases, so we can stop ads that don't work.

On iPhone and iPad:

• Apple Search Ads. On first launch the app gets an attribution token from Apple (AdServices). Our server asks Apple which Search Ads campaign, if any, led to the install. This does not use your advertising identifier.
• SKAdNetwork / AdAttributionKit. Apple's privacy-preserving measurement. The app reports simple milestones (opened, joined a game, played ten minutes, bought Pro), and Apple tells ad networks about them without identifying you.
• Advertising identifier (IDFA), only with your permission. The app asks once (App Tracking Transparency). If you allow tracking, it sends your device's advertising identifier, with your install's random ID, to t.controller.plus to measure our ads. If you decline, it never reads the identifier. You can change your answer any time in iOS Settings › Privacy & Security › Tracking.

On Android:

• Google Play install referrer. On first launch the app reads which campaign link, if any, led to the install. It sends only the link's campaign fields (source, medium, campaign, content and term) and, for Google Ads, its click ID (gclid), never the rest of the link.
• Advertising ID. Android does not ask permission for this. On first launch the app sends your device's advertising ID, with your install's random ID, to measure our ads, unless you have deleted the ID or turned off ads personalization (Android Settings › Privacy › Ads). It is sent once; resetting the ID later does not send the new one. To have a sent ID removed, ask us (see Your choices).

We use this data only to measure our own advertising. We do not sell it, and we do not let ad networks use it to target you elsewhere. If we start sending conversion data to an ad platform to optimise our campaigns, we will name that platform here first.

The controller.plus service

Browser games and the desktop app can use our hosted relay to introduce your phone to the game and, when a direct link is not possible, to carry the controls.

• Network addresses. Our servers see your IP address while you are connected, as any internet service does. To limit abuse we keep a pseudonymised digest of it (never the address itself) in counters that expire within minutes. An address that misuses a relay can be blocked for a day the same way.
• Room records. For operating the service we keep a record of each room: when it opened and closed, which game it was for, and whether it used Pro features. Room records contain no player names and no IP addresses.
• Aggregate counters. Daily totals such as the number of rooms, phones joined and minutes played.
• Operational logs. Errors and timings, kept for a short time to keep the service reliable and secure.
• Cloudflare. Our site and service run behind Cloudflare.
  • Phones use Cloudflare's public STUN service to find a direct route to the game.
  • When no direct route works and our own relay is far away, Cloudflare's TURN relay can carry the encrypted connection.
  • Cloudflare processes connection data to provide this; see Cloudflare's privacy policy.

Purchases

Controller+ Pro is a subscription or a one-time purchase made through the App Store or Google Play. They handle payment; we never see your payment details.

• The app checks your purchase with the store on your device. It also sends a usage event with the product, price and currency so we can measure revenue (see above).
• To unlock Pro relay features, the app may send our service the store's signed proof of the purchase (product and transaction identifiers, no payment information) so we can confirm it with the store.

Children

Controller+ is suitable for all ages and does not knowingly collect personal information from children. The only personal detail the app handles is the player name you choose, which is shared with the games you join and not stored by us. Usage events use a random install ID. On iPhone the advertising identifier is used only with permission. On Android the advertising ID is used for ad measurement as described above, and the Google Play listing is for ages 13 and up.

Your choices and rights

• Play without a name; forget a paired computer at any time (which also tells the computer to forget your phone); turn off vibration and sound.
• Turn off usage events in Settings › Usage data. Decline or withdraw tracking permission in iOS Settings. On Android, delete your advertising ID or turn off ads personalization in Android Settings, ideally before you first open the app.
• Ask for your data or ask us to delete it by writing to us with your install ID. The app shows it under Settings › Version. We will answer within 30 days.

Changes and contact

We will update this page when the app or service changes what it does with data, and change the date below.

Contact: support@controller.plus · All Blue LLC

Last updated: 5 November 2026