Legal

Privacy Policy

Effective date: May 6, 2026 · Last updated: May 6, 2026

This Privacy Policy explains how PydevSolutions ("we", "us", "our") collects, uses, and protects information when you use the BomberzBoard mobile application (the "App"). We respect your privacy and are committed to protecting it through compliance with this policy.

BomberzBoard is published by PydevSolutions, with bundle identifier com.pydevsolutions.bomberzBoard, and is distributed through the Apple App Store.

1. Information We Collect

We collect the following categories of information when you use the App:

1.1 Account & identity data

User ID — a unique identifier we generate when you create an account. Used to keep your progress synchronized across sessions and devices.
Display Name — the name you choose for your in-game profile, visible to other players in leaderboards and matchmaking screens.
Sign-in identity — when you sign in via Sign in with Apple, we receive an opaque identity token (no email or real name unless you choose to share them). When you sign in via Google Sign-In, we receive your email address and Google profile name to authenticate your account.

1.2 Device data

Device Identifier (IDFV) — Apple's vendor-scoped identifier, used for analytics and to prevent duplicate accounts on the same device.
Push Notification Token (APNs) — the token issued by Apple Push Notification service, so we can send you gameplay-related notifications (daily missions, tournament reminders).
Device model + iOS version — included in diagnostic logs to help us reproduce and fix bugs.
App version — to correlate issues with specific releases.
Advertising Identifier (IDFA) — only if you grant tracking permission via the iOS App Tracking Transparency prompt. Used by our advertising partner (Google AdMob) to serve relevant rewarded video ads.

1.3 Gameplay & purchase data

Game outcomes — match results (win/loss), tournament participation, daily mission progress, login streaks.
Currency balances — fuel, medals, insignia, plane skins, and other in-game inventory.
Friend & rival connections — the user IDs of players you've added as friends or rivals, and gifts sent or received.
Purchase history — records of in-app purchases (which pack you bought, when, and whether the purchase was successful, refunded, or restored). Payment is processed by Apple — we never see your card number, billing address, or full transaction details.
Ad interaction events (Advertising Data) — when an advertisement is shown to you and when you complete a rewarded video ad. We log these events for reward grant verification, ad-funnel analytics, and they are correlated by our advertising partner (Google AdMob) for ad personalization when you grant tracking consent.

1.4 Diagnostic data

Crash logs — automatically generated when the App stops unexpectedly, so we can fix the issue.
Error events — non-fatal errors logged with anonymized context (no personal identifiers other than the User ID).
Performance metrics — aggregate timing data for slow operations.

1.5 Pre-launch waitlist (website only)

Email address — collected only when you voluntarily submit the "Notify me at launch" form on bomberzboard.com. Used to send a single welcome email + a one-time launch announcement when the App goes live. Stored with our email service provider (see §3).
Sender identity — emails are sent from info@pydevsolutions.com. PydevSolutions is the legal entity that publishes BomberzBoard.
Double opt-in — after submitting your email, you receive a confirmation email and must click the link to confirm. Without confirmation, your email is NOT added to the waitlist (GDPR-compliant double opt-in).
Unsubscribe — every email we send includes a one-click unsubscribe link. Unsubscribing removes your email from our list within 24 hours. You may also email privacy@bomberzboard.com to request deletion.
No tracking — we do NOT track open rates or click-through rates on these emails.

2. How We Use Your Data

Data category	Purpose
Account & identity	Authentication, syncing your progress, displaying your profile to other players in multiplayer features.
Device data (IDFV, push token, model, OS)	App functionality, push notifications, diagnostic correlation, fraud prevention.
IDFA (only with your ATT consent)	Personalized advertising via Google AdMob.
Gameplay & purchase data	Running the game, calculating rankings, granting rewards, providing customer support, fraud detection on in-app purchases.
Advertising Data (ad impressions & completions)	Reward grant verification (server-side), measuring ad performance, analytics, and personalized advertising via Google AdMob (only with your ATT consent).
Diagnostics & crash logs	Fixing bugs, improving stability and performance.

3. Third-Party Services

BomberzBoard integrates the following third-party services. Each operates under its own privacy policy:

Apple Sign In — Apple Inc. We do not request your email or name unless you choose to provide them. Apple Privacy Policy
Google Sign-In — Google LLC. Used as an alternative authentication method. We receive your Google email and profile name. Google Privacy Policy
Google AdMob — Google LLC. Serves rewarded video ads. Collects the IDFA only when you grant App Tracking Transparency consent. AdMob Privacy & Data Policy
Apple Push Notification Service (APNs) — Apple Inc. Used to deliver in-game notifications.
Amazon Web Services (AWS) — our backend infrastructure (Lambda, DynamoDB, API Gateway, S3) is hosted on AWS. AWS processes your data only as a service provider on our behalf. Data is stored in AWS regions us-east-1 and eu-west-1 depending on availability requirements.
Mailchimp (Intuit Inc.) — we use Mailchimp's free tier to manage the pre-launch waitlist (see §1.5). Mailchimp acts as our data processor under a Data Processing Agreement (GDPR Art. 28). Emails are sent from info@pydevsolutions.com via Mailchimp's SMTP infrastructure. Your email is used only for the pre-launch welcome email and launch announcement — never shared with advertisers, never used for marketing, never shared with other players. Mailchimp / Intuit Privacy Statement

4. Data Sharing & Disclosure

We do not sell your personal information.

We share data only in the following limited circumstances:

With other players — your display name, in-game rank, and game outcomes are visible to other players on leaderboards, in matchmaking, and during multiplayer matches. This is core to the multiplayer experience.
With our service providers — Google (AdMob), Apple (Sign In, push, IAP), AWS (hosting). Each acts under contractual obligations limiting their use of your data to providing the service to us.
For legal compliance — if required by valid legal process (subpoena, court order), regulatory request, or to investigate fraud, abuse, or violations of our terms.
In a corporate transaction — if PydevSolutions is acquired, merged, or sells assets, your data may be transferred to the successor entity. You will be notified of any such change in this policy.

5. App Tracking Transparency (ATT)

iOS requires apps to request your permission before tracking your activity across other apps and websites. BomberzBoard uses ATT for one purpose only: to allow Google AdMob to serve personalized rewarded ads using your IDFA.

Your choice does not affect your in-game rewards. Whether you grant or decline tracking, you receive identical rewards for watching ads. Declining tracking simply means the ads you see are less personalized.

6. Children's Privacy

BomberzBoard is rated 13+ on the Apple App Store and is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us at privacy@bomberzboard.com and we will delete it.

7. Your Rights

7.1 European Economic Area / United Kingdom (GDPR)

If you are in the EEA or UK, you have the following rights regarding your personal data:

Right of access — request a copy of the data we hold about you.
Right to rectification — correct inaccurate data.
Right to erasure — request deletion of your account and associated data.
Right to restriction — limit how we process your data.
Right to data portability — receive your data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — for processing based on consent (e.g., ATT).
Right to lodge a complaint — with your national data protection authority.

Our legal bases for processing under GDPR are: (a) contractual necessity for account, gameplay, and purchase data; (b) consent for tracking via ATT; (c) legitimate interests for fraud prevention, analytics, and security.

7.2 California (CCPA / CPRA)

California residents have the right to: know what personal information we collect; request deletion; opt out of the sale or sharing of personal information (we do not sell); and not be discriminated against for exercising these rights.

7.3 How to exercise your rights

Contact us at privacy@bomberzboard.com with your request. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

8. Data Retention

Account data — retained while your account is active. If you delete your account, your personal data is removed within 30 days, except for legal/fraud-prevention records retained up to 12 months.
Purchase history — retained for 7 years to comply with tax and consumer protection law.
Diagnostic logs — retained for up to 90 days, then deleted automatically.
Aggregated analytics — anonymized data may be retained indefinitely for product analytics.

9. International Data Transfers

Our backend is hosted on Amazon Web Services. Depending on your region, your data may be processed in the United States or in EU regions. For transfers from the EEA/UK to the US, we rely on the EU–US Data Privacy Framework and AWS's Standard Contractual Clauses where applicable.

10. Security

We protect your data using industry-standard measures: TLS encryption for all data in transit, AWS-managed encryption at rest, scoped IAM permissions, JWT-based authentication, and audit logging. No system is 100% secure — if we become aware of a breach affecting your data, we will notify you within 72 hours per applicable law.

11. Account Deletion

You can request deletion of your account at any time:

From within the App: open Settings → Account → Delete Account.
By email: privacy@bomberzboard.com with the subject "Delete my account".

Deletion is permanent. Your in-game progress, currency, and inventory will be lost. Purchase records are retained as required by law (see Section 8).

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the App or by email. Continued use of the App after a change constitutes acceptance of the updated policy.

13. Contact

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@bomberzboard.com
Support: support@bomberzboard.com
Mailing address: PydevSolutions, [your registered business address]

For EU/UK residents, our designated contact for GDPR-related inquiries is also privacy@bomberzboard.com.