RummyAd can collect first-party aggregate page views, download-button clicks and outgoing download redirects. These are separate metrics: a redirect is not proof of a completed download or installation.
The built-in analytics does not set tracking cookies or retain raw IP addresses or full user-agent strings. Short-lived keyed hashes help suppress repeated requests. Browser Do Not Track and Global Privacy Control suppress client-side events; server redirect handling is described separately in the deployment documentation.
Aggregate records are retained for 180 days by default, configurable by the operator. Administrators can disable analytics. Hosting access logs, WordPress accounts and any additional plugins have their own data handling; the operator must review and complete this policy before launch.
External download destinations have their own policies.