PRIVACY,
WITHOUT THE
MYSTERY.

WHO IS RESPONSIBLE.

The person responsible for processing personal data in connection with the ReversePanda app and this website (controller) is:

Contact: support@reverse-panda.ch

WHAT STAYS WITH YOU.

ReversePanda processes data locally so it can work as a launcher. That information is used on your device to show your apps, remember your layout and power features you turn on. It is not sent to ReversePanda for advertising or profiling.

• Installed apps
• App names and icons
• App usage information used for local launcher features
• Searches
• Layouts
• Dock configuration
• Folders
• Wallpapers
• Settings
• Local backups
• Gestures and shortcut assignments

NO ACCOUNT REQUIRED.

ReversePanda currently has no login, user account or launcher profile. You can use the app without creating an identity with ReversePanda.

FEEDBACK FROM THE APP.

Feedback is always user initiated. You choose when to send something — ReversePanda does not submit messages in the background.

• Send feedback — a general note, question or hello
• Report a bug — something that broke or behaved oddly
• Request a feature — an idea for what should exist next

Bug reports may include technical information such as ReversePanda version, build number, Android version and device model, so the issue can be understood. They do not automatically include installed apps, searches, wallpapers or folder names.

APP SECURITY WITHOUT ACCOUNTS.

The app does not require an account. Backend requests from the app are protected with Firebase App Check. Production builds of the app use Play Integrity, with backend validation and restricted Storage rules. Secrets are not stored in the Android app.

YOU DECIDE WHAT'S OPTIONAL.

• Anonymous Analytics Off by default
• Crash Reports Off by default
• Feedback Sent only when submitted
• Screenshots Uploaded only when selected

Analytics and Crash Reports can be enabled or disabled independently in the app.

NO ANALYTICS ON THE WEBSITE.

The ReversePanda website currently does not use:

• Firebase Analytics or any other website analytics
• Advertising analytics
• Marketing pixels
• Behavioural profiling
• Social media tracking

The website does not set its own cookies.

HOSTING.

The website is hosted with GitHub Pages, a service provided by GitHub. As with any web hosting, delivering a page requires technical request data, such as:

• IP address
• Time of the request
• Requested page or file
• Basic technical request information, such as browser type

This data is processed by the hosting provider to deliver the website and keep it secure. ReversePanda does not use it for analytics.

FONTS.

The fonts used on this website (Bebas Neue and Roboto) are served directly from reverse-panda.ch. Your browser does not request them from Google or any other font service.

THE CONTACT FORM.

The Contact page lets you report a bug, request a feature or say hello. No account is required. Everything you send is voluntary and only sent when you press the submit button.

Depending on the type of request, you may submit:

• Your message or feedback
• A bug description, and optionally what you expected, your Android version and device model
• A feature request
• An optional reply email address
• An optional name (Say Hello only)
• An optional screenshot (bug reports only)

This information is used to process your request, to troubleshoot reported issues and, if you provided an email address, to reply to you. Your email address is not used for marketing or newsletters.

APP CHECK & reCAPTCHA.

The website uses Firebase App Check to protect the feedback system against abuse, specifically:

• Feedback, bug-report and feature-request submission
• Temporary screenshot uploads

On the website, App Check uses Google reCAPTCHA Enterprise as its provider. Play Integrity is only used by the Android app.

reCAPTCHA Enterprise is a security and abuse-prevention service. When you open the Contact page, it runs in the background and evaluates technical signals from your browser to help distinguish genuine requests from automated abuse. For this security assessment, Google may receive technical data such as your IP address and browser and device information. ReversePanda uses reCAPTCHA only for security, not for analytics or advertising.

Other pages of the website do not load Firebase or reCAPTCHA. More information: Google Privacy Policy (opens in a new tab) and Google Terms of Service (opens in a new tab).

BROWSER STORAGE.

On the Contact page, technically necessary browser storage is used so the security checks and the Firebase connection work:

• reCAPTCHA-related local storage for the security assessment
• A short-lived Firebase App Check token, stored in your browser’s IndexedDB
• Firebase SDK heartbeat metadata, such as the date the SDK was last used

Google’s reCAPTCHA service may also use its own storage on Google domains for the same security purpose. This storage is used for technical and security purposes only, not for website analytics or marketing. You can clear it at any time in your browser settings.

SCREENSHOTS ARE OPTIONAL.

This applies to bug reports sent from the app and from the website’s Contact page. Screenshots are never captured automatically. If you attach one to a bug report, only the image you select is uploaded.

• Selected manually by you
• Maximum one image
• Maximum 5 MB
• Temporarily stored in Firebase Cloud Storage
• Not publicly accessible, no public download URL is created
• Forwarded with the bug-report email as part of processing
• The backend attempts to delete it after processing
• Abandoned temporary uploads are removed by a scheduled cleanup after about 24 hours

A screenshot may contain personal information visible in the image, so review it before attaching it.

EMAIL DELIVERY.

Feedback, bug reports and feature requests from the app and the website are validated by the ReversePanda backend and delivered by email to support@reverse-panda.ch through the email delivery service Resend.

ReversePanda does not keep a dedicated feedback database. Messages are kept in the support mailbox for as long as needed to handle your request. Local app backups remain on your device, or wherever you explicitly export them.

SERVICES REVERSEPANDA USES

INTERNATIONAL SERVICES.

Some service providers used by the app or the website may process data outside Switzerland, including in the European Union and the United States. This currently includes:

• Google (Firebase, reCAPTCHA Enterprise)
• GitHub (website hosting)
• Resend (email delivery)

YOUR RIGHTS.

Depending on applicable law, you may have rights regarding personal data relating to you, including access, correction or deletion.

To request access, correction or deletion of personal data you have submitted to ReversePanda, for example through feedback from the app or the Contact form, write to support@reverse-panda.ch. Please include enough information to identify the relevant submission, such as the reply email address you used, if any, and roughly when and how you sent it.

Requests are handled in accordance with applicable data protection law. Information that ReversePanda is legally required or otherwise permitted to keep may be retained. Launcher data that stays on your device is not held by ReversePanda and remains under your control.

For more information about deletion requests, see the Data Deletion page.

CHILDREN

ReversePanda is a general-purpose Android launcher and is not directed at children. It does not knowingly collect personal information from children for marketing or profiling. If you believe a child has submitted personal information through feedback, contact the address below so it can be reviewed and removed where possible.

POLICY CHANGES

This policy may change as ReversePanda grows. When it does, the “Last updated” date at the top of this page will change. Significant updates that affect how optional data is handled will be reflected in the app’s privacy settings where relevant.