BountyWarz ("we", "us", or "our") operates the BountyWarz mobile application and website located at www.bountywarz.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with any part of it, please discontinue use of the Service.
1. Information We Collect
We may collect the following categories of information:
- Account information — email address, username, and password hash when you register.
- Gameplay data — scores, progress, session duration, in-game actions, and achievement records.
- Device information — device model, operating system version, unique device identifiers, and mobile network information.
- Log data — IP address, browser/app type and version, pages or screens visited, timestamps, and crash reports.
- Communications — messages you send us via support channels or feedback forms.
We do not knowingly collect payment card numbers; all purchases are handled by Google Play's billing infrastructure.
2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service.
- Personalise gameplay, match difficulty, and mentor-AI responses.
- Process in-app purchases via Google Play.
- Monitor and analyse usage trends to improve performance and features.
- Detect, investigate, and prevent fraudulent or abusive activity.
- Send administrative notifications (security alerts, policy updates).
- Respond to your support requests and inquiries.
- Comply with legal obligations.
We do not sell your personal information to third parties.
3. Third-Party Services
We integrate third-party services that may collect information as described in their own privacy policies. These include:
- Sentry (privacy policy) — error monitoring and crash reporting. Sentry receives anonymised stack traces, device metadata, and the Sentry DSN tied to this application.
- Supabase (privacy policy) — backend database and authentication. User account records and gameplay state are stored in Supabase-hosted PostgreSQL instances.
- Google Play (privacy policy) — app distribution and in-app billing. Google Play processes payment transactions and may collect device and usage data per Google's own policies.
We encourage you to review the privacy policies of each third-party service. We are not responsible for their data practices.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Gameplay telemetry and crash logs are retained for a maximum of 12 months from collection. Upon account deletion, personal data is purged within 30 days, except where retention is required by applicable law.
6. Data Security
We implement industry-standard technical and organisational measures to protect your information, including:
- TLS encryption in transit for all API and web traffic.
- Encrypted storage of sensitive fields (passwords, keystore material).
- Role-based access controls limiting employee access to production data.
- Regular security audits and dependency vulnerability scanning.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Children's Privacy
BountyWarz is not directed to children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, please contact us at privacy@bountywarz.com and we will delete the information promptly.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your personal data ("right to be forgotten").
- Portability — receive your data in a structured, machine-readable format.
- Objection / Restriction — object to or restrict certain processing activities.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, please email privacy@bountywarz.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide in-app notification or email notice at least 7 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy, please reach out:
- Email: privacy@bountywarz.com
- Website: www.bountywarz.com