Privacy Policy

Data Transmission Protocols

We collect the following categories of information to operate BountyWarz and deliver your training experience:

Identity & Authentication

• Username / callsign you choose during onboarding
• Email address (collected via Supabase authentication)
• Authentication tokens and session identifiers

Gameplay & Mission Data

• Game progress, completed missions, and bounty records
• Battle outcomes, scores, and in-game decisions
• Nation affiliation and character configuration

Learning Analytics

• Cybersecurity skill assessments and competency levels
• Training module completion and performance metrics
• Interaction patterns with the Athelgard mentor system

Data Vault Architecture

Your data is stored in a Supabase (PostgreSQL) database. Supabase provides row-level security, encrypted connections, and industry-standard data protection. Your authentication credentials are managed through Supabase Auth and are never stored in plaintext.

Our application is hosted on Vercel, which provides serverless infrastructure with enterprise-grade security, automatic HTTPS, and global edge deployment.

AI Operations & External Relays

BountyWarz uses artificial intelligence services to power game experiences. When you interact with these features, limited data is transmitted to third-party AI providers:

Gemini AI (Google)

Game scenarios, NPC dialogue, and cybersecurity training content are generated using Google's Gemini API. Data sent may include your gameplay context, current mission parameters, and skill level. This data is used solely for generating relevant in-game content and is subject to Google's API Terms of Service.

DALL-E (OpenAI)

Avatar and visual asset generation uses OpenAI's DALL-E API. Character appearance descriptors may be sent to generate images. No personally identifiable information is included in these requests. Usage is subject to OpenAI's Terms of Use.

Mission Parameters for Your Data

We use your information for the following purposes:

• Operating and maintaining the BountyWarz platform
• Authenticating your identity and managing your account
• Tracking gameplay progress and learning outcomes
• Generating personalized AI-driven training scenarios
• Improving game balance, content, and educational effectiveness
• Communicating essential service updates

Data Sovereignty Guarantee

We operate under a strict no-compromise data policy:

• No third-party advertising — BountyWarz does not display ads and does not share your data with advertising networks
• No sale of personal data — We will never sell, rent, or trade your personal information to third parties
• No data brokers — Your information is never shared with data aggregators or marketing platforms

Your data is used exclusively to power your BountyWarz experience. Full stop.

Cookie Transponder Logs

BountyWarz uses a minimal set of cookies necessary for platform operation:

• Session cookies — Maintain your active session while you play. These expire when you close your browser or after a period of inactivity.
• Authentication cookies — Managed by Supabase Auth to keep you securely logged in across visits. These persist until you log out or the token expires.

We do not use tracking cookies, analytics cookies from third parties, or any advertising cookies.

Operative Rights Protocol (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions with similar data protection laws, you have the following rights regarding your personal data:

• Right of Access — Request a copy of all personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability — Receive your data in a structured, machine-readable format
• Right to Restrict Processing — Request that we limit how we use your data
• Right to Object — Object to the processing of your data for specific purposes

To exercise any of these rights, contact us at support@bountywarz.com. We will respond to verified requests within 30 days.

Age Clearance Requirement

BountyWarz is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age, in compliance with the Children's Online Privacy Protection Act (COPPA).

If we learn that we have inadvertently collected data from a user under 13, we will promptly delete that information from our systems. If you believe a child under 13 has provided us with personal data, please contact us immediately at support@bountywarz.com.

Defensive Perimeter

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission via HTTPS/TLS
• Row-level security policies in our database
• Secure authentication token management
• Regular security review of our serverless infrastructure

While no system is impenetrable, we continuously work to safeguard your data against unauthorized access, alteration, or destruction.

Data Retention Cycles

We retain your personal data for as long as your account is active or as needed to provide you with the BountyWarz service. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate operational purposes (such as fraud prevention or legal compliance).

Anonymized, aggregated gameplay data may be retained indefinitely for game improvement and research purposes.

Protocol Amendments

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify users through the BountyWarz platform. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

Open a Comm Channel