Vault Rush
Rob their vaults. Guard yours.
Vault Rush is a one-touch heist game. Your thief runs by itself and turns on walls; tap to jump. Break into other players' trap-filled vaults, steal their gold, then build your own vault and lock it in by beating it yourself. Your proof run becomes the ghost every raider sees.

How to play



Features
- Eight traps with direction, length, speed and timing to tune
- Async raids: other players' vaults, their ghost runs alongside you
- Revenge: watch who cracked your vault, then raid them back for extra gold
- Daily missions, daily chest, leagues and a leaderboard
- Suits, scarves, visors and hats for your thief; 24-hour boosts
- Plays in 14 languages · Free with optional ads and purchases
Support
What are lockpicks?
Every raid uses one lockpick. You hold up to five, and a new one arrives every 12 minutes. You can also get two for a rewarded ad (four times a day) or refill with gems.
Why does my vault say "not tested"?
A vault only goes live after you reach its chest yourself. Open My vault and tap Test & lock. Until then, raiders face your last locked vault.
Someone robbed me. What now?
Open the Log tab: you can watch the replay of their run and take revenge on their vault, which pays 50% more gold. After a successful robbery your vault gets a two-hour shield.
Are purchases required?
No. Gems, packs, boosts, looks and the no-ads option are optional. Rewarded ads only play when you choose them.
How do I restore a purchase on a new phone?
Purchases are tied to your Google Play or Apple account and restore from the Shop. Your profile is saved to the cloud under an anonymous player ID; sign in with the same store account on the new phone.
How do I delete my data?
Settings → Delete my data removes your cloud profile and vault. You can also email us; see the Delete your data section below.
How do I change the language?
Settings on the home screen (the gear button).
Anything else? Write to vaultrush@solidprod.com. We answer within a few days.
Privacy Policy
Vault Rush · Effective date: 4 October 2026
In short: Vault Rush has no sign-up and never asks for your name, email or phone number. The Game creates an anonymous player ID and saves your profile (gold, gems, trophies, nickname, your vault layout and the log of raids on it) to Unity Cloud Save so it survives a new phone and so other players can raid your vault. Your vault layout, your proof run and your nickname are visible to other players; nothing else is. The free Game shows ads from Google AdMob and offers optional purchases through Google Play or the App Store; we never see your payment details. Outside the EEA, the UK and Switzerland, the Meta (Facebook) SDK tells Meta that the Game was installed and opened, so we can measure our own ads. Where the law requires it, you are asked for consent first, and on iOS you can decline tracking.
1. Who we are
Vault Rush ("the Game") is developed and published under the SolidProd brand by Elizan Media Organizasyon Ltd. Şti., a company registered in Türkiye ("we", "us", "our"). We are the data controller for the processing described here. Contact: vaultrush@solidprod.com.
2. What we do not collect
The Game has no sign-up or login form. We do not collect your name, email address, phone number, contacts, photos, precise location or payment details. There is no chat and no free text anywhere in the Game: the only thing other players ever see from you is your nickname, your vault layout and your recorded proof run.
3. Data the Game stores about you
| Data | Why | Where |
|---|---|---|
| Anonymous player ID (a random identifier created by Unity Authentication on first launch) | Telling your profile apart from other players' without an account | Unity Cloud Save (Unity Technologies), on your device |
| Profile: nickname (generated, you can change it), gold, gems, trophies, lockpicks, purchases and unlocked looks, missions, settings | Running the Game and restoring your progress on a new phone | Unity Cloud Save, on your device |
| Your vault: layout, traps and your recorded proof run (tap timings) | Letting other players raid your vault and see your ghost; this is the core of the Game and is shared with other players | Unity Cloud Save (readable by other players), on your device |
| Raid results: who raided whom, outcome, gold moved, the attacker's tap timings | Showing the log of raids on your vault, replays, revenge and the leaderboard | Unity Cloud Save / Unity Cloud Code, on your device |
| Nickname and trophies | The public leaderboard | Unity Leaderboards |
Until the online features are enabled in your version of the Game, all of this stays on your device only.
4. Third-party services and the data they process
| Service | Purpose | Data processed |
|---|---|---|
| Unity Gaming Services (Authentication, Cloud Save, Cloud Code, Leaderboards, Push Notifications) | Anonymous sign-in, saving and sharing the data listed in section 3, delivering "your vault was raided" notifications | Player ID, the profile and vault data above, device push token, device and app information, IP address |
| Google AdMob | Showing and measuring ads (including optional rewarded ads), frequency capping, fraud prevention | Advertising ID (Android Advertising ID; Apple IDFA only if you allow tracking), IP address, device and app information, ad interactions |
| Google User Messaging Platform | Asking for and storing your consent choices | Your consent choices, device and app information, approximate region |
| Google Play Billing / Apple In-App Purchase (through Unity IAP) | Processing optional purchases (gems, packs, boosts, no-ads) and restoring them | Purchase token or receipt, product id, purchase time. Your payment method and billing details stay with Google or Apple and are never shared with us. |
| Meta (Facebook) SDK — only outside the EEA, the UK and Switzerland | Measuring installs, app opens and purchases that come from our ads on Facebook and Instagram (attribution). We do not use Facebook Login. | App install, app open and purchase events, Advertising ID, device and app information, IP address |
| Unity (game engine, Unity Analytics, Cloud Diagnostics) | Running the Game, counting in aggregate how raids and features are used, finding crashes | Device model, OS version, language, approximate country, game events (raid started or won, trap placed, vault locked, ad watched, purchase made), crash traces |
More information: Unity Privacy Policy · How Google uses information from apps that use its services · Google Privacy Policy · Meta Privacy Policy.
5. Consent and your choices
- EEA, UK and Switzerland: before personalised ads, the Game shows a consent form (Google User Messaging Platform). You can accept, reject or choose specific purposes, and change your choice later with the Privacy options button in Settings. If you reject, you may still see non-personalised ads.
- iOS: the Game asks for permission through Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", your IDFA is not shared.
- Android: you can delete or reset your advertising ID, or opt out of ads personalisation, in your device settings (Google → Ads).
- Rewarded ads are optional: ads that give an extra attempt, double loot, lockpicks or a second daily chest are only shown when you choose to watch them. The no-ads purchase removes all other ads.
- Notifications are optional and can be turned off in Settings or in your device settings.
- Nickname: you can change the generated nickname in Settings. Please do not enter personal information in it.
6. Legal bases (GDPR, UK GDPR, KVKK)
We rely on contract performance for saving and sharing your profile and vault (that is what the Game is), for purchases and for the leaderboard; on your consent for personalised advertising and, where required, for analytics and notifications; and on our legitimate interests in keeping the Game working, fair and free of fraud (crash reports, cheat detection in raid results, ad fraud prevention, non-personalised ads). You can withdraw consent at any time as described above.
7. US state privacy rights (including California)
We do not sell personal information for money. Showing personalised ads through Google AdMob, and measuring our ads with Meta, may be considered "sharing" or "targeted advertising" under some US state laws. You can opt out by deleting your advertising ID or opting out of ads personalisation on Android, or by turning off tracking on iOS. Residents of California and other states with privacy laws may request access to or deletion of their personal information by using Settings → Delete my data or by emailing us; we will not discriminate against you for using these rights.
8. Children
The Game is intended for a general audience and is not directed to children under 13 (or the higher minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.
9. Retention, transfers and security
Your cloud profile is kept while you play and deleted when you use Delete my data or when the profile has been inactive for 24 months. Raid logs are kept for 30 days. Unity Analytics data is kept for up to 12 months and crash data for up to 90 days; AdMob and Meta data according to their policies. Our providers may process data outside Türkiye and outside your country (for example in the United States); such transfers rely on the providers' standard safeguards, such as Standard Contractual Clauses. Data is transmitted over encrypted connections. Raid results are checked by replaying the recorded run on our Cloud Code function so nobody can forge loot.
10. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to complain to a data protection authority (in Türkiye, the Personal Data Protection Authority — KVKK; in the EU, your local authority). Settings → Delete my data deletes everything we hold under your player ID. For anything else, email vaultrush@solidprod.com with your player ID (shown in Settings) and we will respond within 30 days.
11. App permissions
The Android version requests internet and network-state access (cloud save, ads, purchases), the advertising ID permission and, if you allow it, notifications. It does not request access to your location, camera, microphone, contacts or files.
12. Changes to this policy
We may update this policy, for example when we add a new service. The effective date at the top shows the latest version.
13. Contact
Elizan Media Organizasyon Ltd. Şti. (SolidProd), Türkiye · vaultrush@solidprod.com
Delete your data
In the Game, open Settings and tap Delete my data: your cloud profile, vault, raid logs and leaderboard entry are deleted and the Game starts over with a new anonymous ID. Uninstalling the Game removes everything stored on your device. If you no longer have the Game installed, email vaultrush@solidprod.com with your nickname or player ID and we will delete the profile within 30 days and confirm. Purchase records stay with Google or Apple under their policies. To reset the advertising identifier used by Google AdMob, use your device settings (Android: Google → Ads → Delete/Reset advertising ID; iOS: Settings → Privacy & Security → Tracking).
Terms of Use
By downloading or playing Vault Rush you agree to these terms. The Game is provided by Elizan Media Organizasyon Ltd. Şti. (SolidProd) for your personal, non-commercial entertainment.
Licence
We grant you a personal, non-exclusive, non-transferable, revocable licence to play the Game on devices you own or control. You may not copy, modify, distribute, sell, reverse-engineer or create derivative works of the Game or its content, except where the law allows.
Fair play
Raids are checked on our servers; using modified clients, automation or exploits to forge raid results, gold or purchases may lead to a reset of your profile or a ban. Your nickname must not contain personal information, offensive content or impersonate others; we may rename it.
Ads
The Game is free and supported by advertising. Rewarded ads are optional and give in-game help only; they have no monetary value and cannot be exchanged or refunded.
Purchases
The Game offers optional in-app purchases (gems, packs, boosts, looks and a no-ads option) through Google Play or the App Store, under their terms. Gems, gold and other virtual items have no monetary value, cannot be transferred or exchanged for money and are consumed within the Game. Refunds are handled by Google or Apple according to their policies. Gold inside your vault can be stolen by other players; that is part of the Game and is not refundable.
Availability and changes
We may update, change or discontinue the Game, its online services or parts of it at any time, and may rebalance the economy. The Game is provided "as is" without warranties of any kind to the extent permitted by law.
Liability
To the extent permitted by law, we are not liable for indirect or consequential damages arising from your use of the Game. Nothing in these terms limits liability that cannot be limited by law.
Third-party content
The Game uses icons from game-icons.net by Lorc, Delapouite and contributors (CC BY 3.0) and the fonts Russo One and Nunito under the SIL Open Font License. Trademarks belong to their owners.
Governing law
These terms are governed by the laws of Türkiye; mandatory consumer protections of your country of residence still apply.