Privacy Policy · Boomstick City

This Privacy Policy explains what SES Technology Ventures LLC ("we", "us", "our") collects when you use Boomstick City (the "Game"), how we use it, who we share it with, and the choices you have. It applies to the website at boomstickcity.com and the game at play.boomstickcity.com.

1. Information we collect

Account. The email address you register with and the display name you choose.
Sign-in. If you sign in with Discord, we receive a basic profile from Discord (such as your Discord id, username, and avatar) to create and identify your account. We do not receive your Discord password.
Gameplay. Your progress, matches, collection, cosmetics, in-game currency, and social activity such as friends and referrals.
Purchases. When you buy something, our payment provider (Stripe) processes your payment. We receive a confirmation and order details (such as the item and amount), but never your full card number.
Device and technical data. A device identifier your browser stores so we can recognize your devices for security alerts, plus data our servers log automatically such as your IP address, browser type, and timestamps. We use this for security, fraud and cheat prevention, and to keep the Game running.
Usage and gameplay analytics. Events about how the Game is used and how matches play out, which we record in our own systems to operate, balance, and improve the Game.
Diagnostics. Error and crash reports from the app and our servers, used to find and fix problems.
Communications. Messages you send us for support, and records of transactional emails we send you (such as security alerts and friend notifications).

2. How we use your information

We use your information to create and run your account, operate gameplay and matchmaking, deliver and support purchases, keep the Game secure and prevent cheating and abuse, communicate with you about your account and the Game, comply with our legal obligations, and improve the Game. We do not sell your personal information, and we do not use it for third-party behavioral advertising.

For users in the European Economic Area and the UK, our legal bases are: performance of our contract with you (to provide the Game and your purchases); our legitimate interests (to secure the Game, prevent abuse, and improve our services); your consent (for optional features such as Discord sign-in or optional emails, which you can withdraw); and compliance with legal obligations.

3. How we share your information

We share personal information only as needed to run the Game, and with providers who process it on our behalf under contract:

Supabase for accounts, database, and backend services;
Stripe for payment processing;
Discord for optional sign-in;
Resend for sending transactional email and for delivering to us the support messages you submit;
Cloudflare for website delivery and security, and Hetzner for game-server hosting.

We may also disclose information if required by law, to enforce our Terms, to protect the rights, safety, and security of our players or us, or in connection with a merger, acquisition, or sale of assets. Some of your display name and profile is visible to other players as part of normal gameplay and social features.

4. Cookies and local storage

We use your browser's local storage and similar technologies to keep you signed in, remember your settings, and store a device identifier for security. These are essential to running the Game. We do not use third-party advertising or cross-site tracking cookies.

5. Data retention

We keep your personal information for as long as your account is active. When you delete your account, we delete or de-identify your personal information within 30 days, except where we must keep certain records longer (for example, transaction and tax records, or information needed to resolve disputes, prevent abuse, or comply with the law). Residual copies may remain in backups for a limited period before they are overwritten.

6. Data security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. International transfers

We and our providers may process your information in the United States and other countries, which may have different data-protection laws than yours. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses for transfers of personal data out of the EEA or UK.

8. Your rights and choices

Depending on where you live, you may have some or all of the following rights over your personal information:

EEA and UK (GDPR): access, correction, deletion, restriction, portability, objection, and the right to withdraw consent. You may also lodge a complaint with your local data-protection authority.
California (CCPA/CPRA): the right to know, delete, and correct your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information in this sense, and we will not discriminate against you for exercising your rights.

You can update your display name in the Game and delete your account at any time. To make any other request, contact us using the details in Section 11. We will verify your request and respond within the time the law requires.

9. Children

The Game is not directed to children under 13, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child under 13 has given us personal information, contact us and we will delete it. Players between 13 and 18 should use the Game only with a parent or guardian's involvement.

10. Do Not Track and Global Privacy Control

Because we do not track you across third-party sites or serve behavioral advertising, our practices do not change based on a browser "Do Not Track" signal. Where required, we honor recognized opt-out preference signals such as Global Privacy Control.

11. Changes and contact

We may update this policy from time to time. If we make material changes, we will post the updated policy and update the date above. For any privacy request or question, reach us through our contact form.

Read the Terms of Service →