Privacy Policy
1. Introduction
This Privacy Policy explains how Running For The Front Limited ("we", "us" or "our") collects, uses, shares and protects personal data when you use Reviewed APKs (reviewedapks.com) (the "Website"). We process personal data in line with applicable data protection law, including the EU General Data Protection Regulation (GDPR) where it applies.
For data protection purposes, Running For The Front Limited is the controller of the personal data processed through the Website. You can reach us at Room 701, Unit 108, 7/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Kowloon, Hong Kong, or by email at [email protected]. Further contact options are listed in the "Contact Us" section below.
By using the Website you confirm that you have read this Privacy Policy. It forms part of our Terms & Conditions. If you do not agree with it, please stop using the Website.
2. Personal Data We Collect
We may collect and process the following personal data:
Information you give us: you can read the Website without telling us who you are, and we do not offer user accounts. If you contact us by email, through our contact or report forms (which open your own email program), by post or by telephone, we receive the details you choose to share, such as your name, email address, telephone number and the content of your message. If you send a copyright notice or another legal request, we keep it and may share it with the people involved where the law requires.
Information collected automatically: when you visit the Website, your browser sends technical information such as your IP address, browser type and version, operating system, device type, language settings, the page you came from and the pages you request. Our hosting and security provider, Cloudflare, processes this information to deliver the Website and protect it from abuse.
Cookies and similar technologies: we and the services we use store and read small files and identifiers on your device, for example to remember your settings, to measure how the Website is used and, where applicable, to show and measure ads. Details are in our Cookie Statement.
Analytics data: we use Google Analytics 4 to understand how visitors use the Website. It collects information such as the pages you view, how long you stay, the links and buttons you click (for example a download button), your approximate location derived from your IP address, and information about your device. Google Analytics 4 does not log or store individual IP addresses. We use this information in aggregate to improve the Website, not to identify you.
Advertising data: ads on the Website are served by Google Ad Manager. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this Website or to other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this Website and/or other sites on the Internet. You can opt out of personalized advertising in Google's Ads Settings, or opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info. See also how Google uses information from sites that use its services.
Advertising measurement data: we promote the Website through advertising on Microsoft Advertising. The tags of these platforms run on the Website and record page views and selected actions, such as a click on a download button, together with information about your device and browser, the page address and cookie identifiers, so that the platforms can measure and improve our campaigns.
Ad click information: if you arrive through an ad, the ad click identifier and campaign details in the link are stored in a first-party cookie (_ck_attr) for up to 90 days, together with the time of your first visit, so that later actions on the Website can be attributed to the right ad. This tells us which ads bring visitors to the Website without identifying you by name.
3. How We Use Personal Data
We use personal data for the following purposes and on the following legal bases:
To operate and deliver the Website (legitimate interests): we process IP addresses, device information and page requests to show you the Website, adapt it to your device, remember your settings and keep it available. This is in our legitimate interest in providing a working website.
To understand and improve the Website (consent or legitimate interests): we use analytics data to see which pages are popular, how visitors move through the Website and where problems occur. Where the law requires consent for analytics cookies, we only use them with your consent; otherwise we rely on our legitimate interest in improving the Website.
To show ads (consent or legitimate interests): advertising funds the Website. Where you consent, Google and its partners may personalize the ads you see and measure how you interact with them. If you do not give consent where it is required, only non-personalized or limited ads are shown.
To measure our advertising (consent or legitimate interests): we use advertising measurement data to understand which of our campaigns bring visitors to the Website and to improve them.
To communicate with you (legitimate interests): if you contact us, we use your details to reply and to deal with your request, for example to investigate a problem you report. We do not send newsletters or marketing emails.
For security and fraud prevention (legitimate interests and legal obligations): we and Cloudflare process IP addresses, request data and similar signals to detect and block abuse, such as automated attacks, scraping and invalid traffic.
To comply with legal obligations (legal obligation): we keep and, where required, disclose information to comply with the law, for example to handle copyright notices or to answer lawful requests from authorities, and we keep the records needed for tax and accounting.
To enforce our terms (legitimate interests): we may use personal data to investigate breaches of our Terms & Conditions or misuse of the Website, and to establish, exercise or defend legal claims.
4. Cookies and Similar Technologies
Cookies and similar technologies play an important part in how data is collected on the Website. Our Cookie Statement lists each cookie and its purpose. In short:
Necessary cookies: keep the Website working and secure, for example the storage that remembers your display setting, the record of your privacy choices where a consent message is shown, and the security cookies that Cloudflare may set to tell real visitors apart from bots. They are always active.
Analytics cookies: Google Analytics cookies such as _ga help us understand how the Website is used. Where consent is required, they are only set if you accept them. They last up to 2 years.
Advertising cookies: help show ads, avoid showing you the same ad too often and measure whether ads lead to visits and actions. Our Cookie Statement lists each of them with its lifetime. We only receive aggregated reports from these services, such as the number of visitors who clicked an ad.
Links to Google Play: when you follow a download button you leave the Website, and Google's privacy policy applies on Google Play.
Managing cookies: where a consent message is shown, you can accept or refuse non-essential cookies and change your mind later. In any case you can delete or block cookies in your browser settings. See our Cookie Statement for details.
5. Disclosure of Personal Data to Third Parties
We do not sell your personal data. We share personal data only with the following recipients, and only as far as needed for the purposes described in this policy:
Service providers: companies that help us run the Website, such as hosting, security, analytics and advertising providers. They receive only the data they need and are bound to keep it confidential and secure.
Cloudflare (hosting, content delivery and security): the Website is hosted on Cloudflare's network. Cloudflare processes IP addresses and request data to deliver pages from servers close to you and to filter malicious traffic, and may process this data in the United States and other countries.
Google (analytics and advertising): we share data with Google for Google Analytics and Google Ad Manager. This includes your IP address, device information, cookie identifiers and the actions you take on the Website. Google may process this data in the United States and other countries. See the Google Privacy Policy.
Microsoft: the Microsoft Advertising UET tag runs on the Website and sends page views, selected actions, device and browser information, the page address and cookie identifiers to Microsoft, so that Microsoft can measure and improve our ads. See the Microsoft Privacy Statement.
Legal and regulatory purposes: we may disclose personal data where we believe in good faith that this is needed to comply with the law or a court order, to enforce our terms, to deal with fraud, security or technical problems, or to protect the rights, property or safety of Running For The Front Limited, our visitors or the public.
Business transfers: if Running For The Front Limited is involved in a merger, acquisition or sale of assets, personal data may be transferred to the new owner, who must protect it at least as well as this policy does. We will tell you through a notice on the Website.
We share only what is necessary for each purpose and check how our partners protect data. Where data leaves the EEA, the UK or Switzerland, the safeguards described in the next section apply.
6. International Data Transfers
Running For The Front Limited is based in Hong Kong. Some of the service providers listed above, such as Cloudflare, Google and Microsoft, process data in other countries, in particular the United States. When personal data from the EEA, the UK or Switzerland is transferred to a country that does not offer an equivalent level of protection, we rely on one of these transfer mechanisms:
Adequacy decisions: transfers to countries that the European Commission, or the UK or Swiss authorities, have recognized as providing adequate protection, such as Japan or the United Kingdom. For recipients in the United States this covers companies certified under the EU-U.S. Data Privacy Framework, its UK Extension or the Swiss-U.S. Data Privacy Framework, within the scope of their certification. Recipients certified in this way include Cloudflare, Google and Microsoft.
Standard Contractual Clauses: the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum for data from the UK and the adaptations required by Swiss law for data from Switzerland.
In addition, data is encrypted in transit, and we limit what is transferred to what each service needs. Contact us if you would like more information about the mechanism used for a particular recipient or a copy of the relevant safeguards.
7. Data Retention
We keep personal data only as long as needed for the purposes for which it was collected, including legal, accounting and reporting requirements:
Request logs: we do not run our own web servers. Cloudflare processes request data, including IP addresses, and keeps logs for a limited period as described in the Cloudflare Privacy Policy.
Analytics data: we set Google Analytics to keep event-level data for 14 months, after which it is deleted automatically. We may keep aggregated reports that contain no personal data for longer.
Advertising data: cookies on your device have the lifetimes listed in our Cookie Statement; a cookie expiring does not by itself delete data that an advertising service has already received. Advertising platforms keep the event and click data they receive under their own retention policies, linked in Section 5. The reports we receive from them are aggregated and contain no personal identifiers, so we may keep them as business records.
Communications: we keep your messages and the details in them as long as needed to deal with your request, to resolve disputes and to meet legal requirements. Copyright notices and records of data protection requests may be kept longer to document how we handled them.
Legal obligations: we keep some records for the periods required by law, for example under tax and accounting rules, and we may keep relevant information until a possible legal claim is settled or time-barred.
When a retention period ends, we delete the data or anonymize it so that it can no longer be linked to you.
8. Your Rights under the GDPR
Where the EU GDPR or the UK GDPR applies to our processing of your personal data, you have the following rights, subject to the conditions and exceptions set out in those laws. Rights under Swiss law or other applicable laws may differ, and we will consider any request we receive, wherever you live:
Right of access: you can ask whether we process personal data about you and receive a copy of it, together with information about how we use it. To protect other people's privacy, we will not include data that identifies someone else.
Right to rectification: you can ask us to correct inaccurate data or to complete incomplete data.
Right to erasure: you can ask us to delete your data, for example when it is no longer needed or when you withdraw your consent. This right is not absolute; we may keep data that we are legally required to keep.
Right to restrict processing: you can ask us to limit the use of your data, for example while we check its accuracy or consider an objection.
Right to data portability: for data you gave us that we process by automated means on the basis of consent or a contract, you can receive it in a structured, commonly used, machine-readable format, or ask us to send it to another controller where this is technically possible.
Right to object: you can object to processing based on our legitimate interests, and you can always object to processing for direct marketing.
Right to withdraw consent: where we rely on your consent, you can withdraw it at any time, for example by changing your cookie settings. This does not affect processing that took place before.
Rights related to automated decisions: we do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. If this changes, we will tell you, and you will be able to ask for human review and to challenge the decision.
To exercise any of these rights, contact us using the details in the "Contact Us" section. We may need to confirm your identity first. We will answer within one month of receiving your request; for complex or numerous requests we may extend this by up to two further months, in which case we will tell you within the first month and explain why.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the data protection authority in the country where you live or work. We would appreciate the chance to address your concern first, so please contact us.
9. Your Choices and Controls
Besides your legal rights, you can control how your data is used in these practical ways:
Cookie controls: where Google's consent message is shown, you can accept or refuse analytics and advertising cookies and change your choice at any time through its privacy and cookie settings link. You can also delete cookies in your browser; if you do, the consent message appears again on your next visit.
Opting out of analytics: you can install the Google Analytics Opt-out Browser Add-on to stop Google Analytics from measuring your visits to any website.
Ad personalization: you can manage or turn off personalized Google ads in Ads Settings. Many other ad networks can be opted out of at youronlinechoices.eu (EU) or aboutads.info (US). Opting out does not remove ads; they just become less tailored to you.
Email communications: we do not send marketing emails. Replies to messages you send us are not promotional, so there is nothing to unsubscribe from.
Do Not Track: the Website does not respond to browser "Do Not Track" signals. Please use the controls above instead.
Google Play and other platforms: download buttons take you to Google Play, where Google's privacy policy applies. Platforms such as Google Play have their own privacy settings, which you can adjust there.
10. Data Security
We use appropriate technical and organizational measures to protect personal data, including:
Encryption: the whole Website is served over HTTPS (TLS), so information exchanged between your browser and the Website is encrypted in transit.
Access management: only authorized people who need it can access our accounts and data, which are protected by permissions and authentication.
Monitoring: Cloudflare's network monitors traffic to the Website and blocks known malicious requests.
Updates: we keep the software and tools we use up to date and apply security fixes promptly.
Data minimization: we collect as little personal data as we can. The Website has no user accounts and does not keep a database of its visitors.
No method of transmission over the Internet is completely secure, so we cannot guarantee the security of data sent to the Website. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it. If the breach is likely to result in a high risk to you, we will also inform you without undue delay, unless a legal exception applies.
You can also protect yourself online: use strong, different passwords for different services, and be careful about sharing personal data in public places or in reply to unsolicited messages.
11. Children's Privacy
The Website is not directed at children under 16, and we do not knowingly collect personal data from them. If you are under 16, please do not send us any personal information. If we learn that we have collected personal data from a child under 16, we will delete it promptly.
Parents or guardians who believe that we may hold information about a child under 16 should contact us so that we can delete it.
The age at which a person can consent to online data processing differs between countries (between 13 and 16 in the EU). We do not intend to process the data of anyone below that age without the consent of a parent or guardian.
12. Updates to This Privacy Policy
We may change this Privacy Policy to reflect changes in our practices, in the services we use or in the law. The date at the end of this page shows when it was last updated, and for significant changes we will show a more prominent notice on the Website.
Changes may follow, for example, from new features that affect how personal data is used, guidance from data protection authorities, or a change of service provider. Please review this policy from time to time.
If you continue to use the Website after a change takes effect, the updated policy applies. If you do not agree, please stop using the Website and, where applicable, exercise your rights, for example by asking us to delete your data.
13. Contact Us
Questions, comments and requests about this Privacy Policy or our handling of personal data are welcome. You can reach us as follows:
Email: [email protected] (please put "Privacy Inquiry" in the subject line so that we can route your message quickly).
Mail: Running For The Front Limited, Room 701, Unit 108, 7/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Kowloon, Hong Kong.
To exercise your rights under Section 8, it is best to write to us by email or post, so that there is a record of your request. We may ask you to confirm your identity before we act on it.
We aim to reply promptly and take every question seriously. If you think we have not resolved your concern, you can contact a data protection authority as described in Section 8.
Thank you for reading our Privacy Policy.
Last updated: 11/11/2026