Legal

Privacy Policy

Effective date: May 6, 2026 · Last updated: June 21, 2026

This Privacy Policy explains how BE PLUS S.R.L. ("we", "us", "our") collects, uses, and protects information when you use the BomberzBoard mobile application (the "App"). We respect your privacy and are committed to protecting it through compliance with this policy.

BomberzBoard is published by BE PLUS S.R.L., with bundle identifier com.pydevsolutions.bomberzBoard, and is distributed through the Apple App Store.

What other players can always see

BomberzBoard is a competitive multiplayer game. Your callsign (display name), your rank, and your match outcomes are public: they appear to other players on the global Leaderboard, in matchmaking, and during matches. This is inherent to a public ranking game and cannot be turned off while you play online.

The in-app "Activity in Intel Feed" privacy setting (Settings → Privacy) controls only one thing: whether your purchases and gifts are broadcast in the social Intel Feed. It does not hide your callsign or rank on the Leaderboard. Those stay public even when that setting is OFF.

1. Information We Collect

We collect the following categories of information when you use the App:

1.1 Account & identity data

User ID — a unique identifier we generate when you create an account. Used to keep your progress synchronized across sessions and devices.
Display Name (callsign) — the name you choose for your in-game profile. It is always public to other players on the global Leaderboard, in matchmaking, and during multiplayer matches, regardless of the in-app "Activity in Intel Feed" privacy setting. Choose a callsign you are comfortable showing publicly.
Sign-in identity — when you sign in via Sign in with Apple, we receive an opaque identity token (no email or real name unless you choose to share them). When you sign in via Google Sign-In, we receive your email address and Google profile name to authenticate your account.
Game Center Player ID — when you choose to sign in to Apple Game Center (optional), we receive your Game Center player identifier (gamePlayerID). We use this only to report achievement unlocks to Apple Game Center on your behalf. We never receive your real name, Apple ID, or email through Game Center. You can use BomberzBoard without signing into Game Center; this is entirely optional.

1.2 Device data

Device Identifier (IDFV) — Apple's vendor-scoped identifier, used for analytics and to prevent duplicate accounts on the same device.
Push Notification Token (APNs) — the token issued by Apple Push Notification service, so we can send you gameplay-related notifications (daily missions, tournament reminders).
Device model + iOS version — included in diagnostic logs to help us reproduce and fix bugs.
App version — to correlate issues with specific releases.
Advertising Identifier (IDFA) — only if you grant tracking permission via the iOS App Tracking Transparency prompt. Used by our advertising partner (Google AdMob) to serve relevant rewarded video ads.

1.3 Gameplay & purchase data

Game outcomes — match results (win/loss), tournament participation, daily mission progress, login streaks.
Currency balances — fuel, medals, insignia, plane skins, and other in-game inventory.
Friend & rival connections — the user IDs of players you've added as friends or rivals, and gifts sent or received.
Achievement progress — counters that track your progress toward in-game achievements (e.g. number of PvP wins, login streak days, fleet variety used). If you sign in to Apple Game Center, achievement unlocks are also reported to Apple Game Center under your Game Center Player ID so they appear in your iOS Game Center profile.
Purchase history — records of in-app purchases (which pack you bought, when, and whether the purchase was successful, refunded, or restored). Payment is processed by Apple — we never see your card number, billing address, or full transaction details.
Ad interaction events (Advertising Data) — when an advertisement is shown to you and when you complete a rewarded video ad. We log these events for reward grant verification, ad-funnel analytics, and they are correlated by our advertising partner (Google AdMob) for ad personalization when you grant tracking consent.
In-app analytics events — we record first-party product-analytics events (for example: screens viewed, buttons tapped, matches started and finished, tournament participation, purchases, and ad views), linked to your User ID. These events are sent to our own analytics service hosted on our AWS infrastructure — not to a third-party advertising network — and are used only to understand how the game is used and to improve it.

1.4 Diagnostic data

Crash logs — automatically generated when the App stops unexpectedly, so we can fix the issue.
Error events — non-fatal errors logged with anonymized context (no personal identifiers other than the User ID).
Performance metrics — aggregate timing data for slow operations.

1.5 Camera access (QR scanning)

BomberzBoard requests camera access for one optional feature: scanning a friend's QR code to join a live multiplayer match. The camera is used only to read the on-screen room code locally on your device. We do not capture, store, transmit, or otherwise collect any photo or video, and the camera is never used for any other purpose. You can decline camera access and still join a match by typing the room code manually.

2. How We Use Your Data

Data category	Purpose
Account & identity	Authentication, syncing your progress, displaying your profile to other players in multiplayer features.
Device data (IDFV, push token, model, OS)	App functionality, push notifications, diagnostic correlation, fraud prevention.
IDFA (only with your ATT consent)	Personalized advertising via Google AdMob.
Gameplay & purchase data	Running the game, calculating rankings, granting rewards, providing customer support, fraud detection on in-app purchases.
Advertising Data (ad impressions & completions)	Reward grant verification (server-side), measuring ad performance, analytics, and personalized advertising via Google AdMob (only with your ATT consent).
Diagnostics & crash logs	Fixing bugs, improving stability and performance.

3. Third-Party Services

BomberzBoard integrates the following third-party services. Each operates under its own privacy policy:

Apple Sign In — Apple Inc. We do not request your email or name unless you choose to provide them. Apple Privacy Policy
Apple Game Center — Apple Inc. Optional service that tracks achievement unlocks under your Game Center Player ID and surfaces them in your iOS Game Center profile. Sign-in is voluntary; declining or skipping Game Center does not affect gameplay or in-game rewards. We do not use Game Center leaderboards or multiplayer matchmaking. Apple Game Center Terms · Apple Privacy Policy
Google Sign-In — Google LLC. Used as an alternative authentication method. We receive your Google email and profile name. Google Privacy Policy
Google AdMob — Google LLC. Serves rewarded video ads. Collects the IDFA only when you grant App Tracking Transparency consent. AdMob Privacy & Data Policy
Apple Push Notification Service (APNs) — Apple Inc. Used to deliver in-game notifications.
Amazon Web Services (AWS) — our backend infrastructure (Lambda, DynamoDB, API Gateway, S3) is hosted on AWS. AWS processes your data only as a service provider on our behalf. Our first-party product-analytics service (see Section 1.3) also runs on this AWS infrastructure. Data is stored in AWS regions us-east-1 and eu-west-1 depending on availability requirements.
GoatCounter — privacy-friendly pageview analytics on the marketing website bomberzboard.com (NOT inside the App). Cookieless, no IP address storage, no personal data collection by design. We only see aggregated pageview counts, top referrers, and top pages — never individual user behavior. GoatCounter Privacy Policy

4. Data Sharing & Disclosure

We do not sell your personal information.

We share data only in the following limited circumstances:

With other players — your callsign (display name), in-game rank, and game outcomes are public to other players on the global Leaderboard, in matchmaking, and during multiplayer matches. This is core to the multiplayer experience and applies whenever you play online, independent of the "Activity in Intel Feed" setting (which governs only whether your purchases and gifts appear in the social Intel Feed).
With our service providers — Google (AdMob), Apple (Sign In, Game Center, push, IAP), AWS (hosting). Each acts under contractual obligations limiting their use of your data to providing the service to us.
For legal compliance — if required by valid legal process (subpoena, court order), regulatory request, or to investigate fraud, abuse, or violations of our terms.
In a corporate transaction — if BE PLUS S.R.L. is acquired, merged, or sells assets, your data may be transferred to the successor entity. You will be notified of any such change in this policy.

5. App Tracking Transparency (ATT)

iOS requires apps to request your permission before tracking your activity across other apps and websites. BomberzBoard uses ATT for one purpose only: to allow Google AdMob to serve personalized rewarded ads using your IDFA.

Your choice does not affect your in-game rewards. Whether you grant or decline tracking, you receive identical rewards for watching ads. Declining tracking simply means the ads you see are less personalized.

6. Children's Privacy

BomberzBoard is rated 13+ on the Apple App Store and is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us at privacy@bomberzboard.com and we will delete it.

7. Your Rights

7.1 European Economic Area / United Kingdom (GDPR)

If you are in the EEA or UK, you have the following rights regarding your personal data:

Right of access — request a copy of the data we hold about you.
Right to rectification — correct inaccurate data.
Right to erasure — request deletion of your account and associated data.
Right to restriction — limit how we process your data.
Right to data portability — receive your data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — for processing based on consent (e.g., ATT).
Right to lodge a complaint — with your national data protection authority.

Our legal bases for processing under GDPR are: (a) contractual necessity for account, gameplay, and purchase data; (b) consent for tracking via ATT; (c) legitimate interests for fraud prevention, analytics, and security.

7.2 California (CCPA / CPRA)

California residents have the right to: know what personal information we collect; request deletion; opt out of the sale or sharing of personal information (we do not sell); and not be discriminated against for exercising these rights.

7.3 How to exercise your rights

Contact us at privacy@bomberzboard.com with your request. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

8. Data Retention

Account data — retained while your account is active. If you delete your account, your personal data is removed within 30 days, except for legal/fraud-prevention records retained up to 12 months.
Purchase history — retained for 7 years to comply with tax and consumer protection law.
Diagnostic logs — retained for up to 90 days, then deleted automatically.
Aggregated analytics — anonymized data may be retained indefinitely for product analytics.

9. International Data Transfers

Our backend is hosted on Amazon Web Services. Depending on your region, your data may be processed in the United States or in EU regions. For transfers from the EEA/UK to the US, we rely on the EU–US Data Privacy Framework and AWS's Standard Contractual Clauses where applicable.

10. Security

We protect your data using industry-standard measures: TLS encryption for all data in transit, AWS-managed encryption at rest, scoped IAM permissions, JWT-based authentication, and audit logging. No system is 100% secure — if we become aware of a breach affecting your data, we will notify you within 72 hours per applicable law.

11. Account Deletion

You can request deletion of your account at any time:

From within the App: open Settings → Account → Delete Account.
By email: privacy@bomberzboard.com with the subject "Delete my account".

Deletion is permanent. Your in-game progress, currency, and inventory will be lost. Purchase records are retained as required by law (see Section 8).

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the App or by email. Continued use of the App after a change constitutes acceptance of the updated policy.

13. Contact

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@bomberzboard.com
Support: support@bomberzboard.com
Mailing address: BE PLUS S.R.L., Str. Dealul Țugulea nr. 77, etaj 1, birou 2, sector 6, 060865 București, Romania

For EU/UK residents, our designated contact for GDPR-related inquiries is also privacy@bomberzboard.com.