Playables for media buying
RUEN
Open Lab Send a brief
Legal

Privacy policy

Draft version dated 2026-10-21
Draft pending legal review. This page reflects how the site actually works, but it does not go live until a lawyer has reviewed it. The data controller’s details and the governing law are marked “to be filled in at launch”. The Lab accounts section was added on 2026-10-14 and is also pending legal review.

1.Who processes the data

The data controller is legal entity and details: to be filled in at launch (“we”, “AblePlay”). For anything related to this policy, reach us through the brief form.

2.What data we collect

You hand us data in two places: the brief form and signing in to Lab (see below). Through the brief form we receive:

  • a way to reply — a Telegram handle or an email address;
  • details of the task: offer and vertical, geos, target networks, timing, links, comments.

Any further correspondence (email, Telegram) is kept as ordinary business correspondence. We collect nothing beyond what you write yourself.

Lab account. Browsing mechanics and building a playable in Lab works without signing in. Signing in with Google is needed only to download the finished file. When you sign in, Google passes us, and we store:

  • the email address and name of your Google account, and its internal identifier — so we recognise you next time. Your Google password never reaches us;
  • your Lab plan and its download counter;
  • your download history: which mechanic you built, for which network and geo, the file name and size, and the build settings. The file itself is not stored;
  • wizard projects you chose to save — their settings only.

This data is kept for as long as the account exists. The account and everything listed above can be deleted on request (section 7).

3.Cookies and analytics

The site runs no analytics — no counters, no pixels, no behavioural tracking. Cookies are set only for people who sign in to Lab, and only the technical ones sign-in cannot work without:

  • ap_sid — the sign-in session: keeps you signed in for up to 30 days or until you sign out. Our database stores a hash of it, not the cookie itself;
  • ap_oauth — a helper cookie that lives up to 10 minutes while Google sign-in is in progress, then is removed.

There are no advertising or analytics cookies, so there is no consent banner either: strictly necessary cookies do not require consent.

If analytics is ever added as the site evolves, this policy will be updated before it is switched on, and collection will start only with consent.

4.External requests

Fonts, styles and images are served from our own server — no third-party font services or CDNs. The only third-party resource on regular pages is the Cloudflare Turnstile check in the brief form (the challenges.cloudflare.com domain): it tells people from bots without an image captcha. To do that, your browser sends Cloudflare its IP address and technical browser signals; how Cloudflare handles them is described in its own privacy policy.

Lab sign-in goes through Google: for the duration of sign-in you are on a Google page, where you confirm that you share your email and name with us. We request nothing else from your Google account. The site and the accounts database are hosted by Cloudflare, which processes this data as the hosting provider.

The demo playables in the showcase run offline and make no external requests; app store redirects inside them are disabled.

5.Why we use the data

  • to reply to your enquiry and discuss the task — on the basis of your request;
  • to let you sign in to Lab, run your plan, and show your download history and saved projects in your account — on the basis of your signing in and using Lab;
  • to run the project if we agree to work together — on the basis of the contract;
  • to keep business correspondence — for the periods usual for such correspondence.

We do not use your data for mailings without separate consent, do not sell it, and do not pass it to third parties for advertising.

6.Client materials

Logos, brand books, existing creatives and other campaign materials are used only in your build. They never reach other projects and are never used for model training. Work appears in the showcase on this site only stripped of your brand and offer — and only with your consent.

There is no telemetry inside a finished creative: zero external requests, no analytics, no counters — a requirement of the ad networks and our own rule.

7.Your rights

You can request a copy of the data we hold about you, ask us to correct it or to delete it. Write through the brief form — we will delete the brief and the correspondence unless keeping them is required by an existing contract or by law. Likewise, on request we delete your Lab account together with its download history, projects and plan. You can also delete a saved project yourself in your account, and the sign-out button ends your session immediately.

8.Governing law and changes

Governing law and jurisdiction: to be filled in at launch.

When this policy changes, we update the version date at the top of the page. Material changes affecting data already provided will be announced to those they concern.