Bubbits Privacy Policy

This Privacy Policy outlines how Bubbits collects, uses, and protects your information when you visit and interact with Bubbits. This document is intended to provide clarity on our practices and your rights concerning your data.

1. Who We Are

At Bubbits, we take your privacy very seriously. This Privacy Policy explains how we collect, use, and protect the information of both you and your child when you use our game/website. Our goal is to make sure you understand what information we collect, why we collect it, and how we keep it safe. We also want to ensure that you know your rights and how you can exercise them.

Whether you're a parent, guardian, or player, this document is designed to provide you with clear and straightforward information about our privacy practices. We're committed to providing a safe and enjoyable environment for our younger players while respecting the privacy and concerns of parents and guardians.

2. Information We Collect, Why We Collect It, and How It Is Used

2.1 Visitors

2.1.1 Data Collection and Usage

When you interact with Bubbits, certain data might be collected to ensure the game/website operates correctly and securely. By default, we apply the highest level of privacy protection for all visitors. This means that we collect only the minimal amount of information necessary to operate the game/website and ensure its functionality. The following types of information may be collected:

Technical Info

We might collect IP address, browser type, device type, screen resolution, language selection to ensure the game/website functions correctly and displays in your preferred language.

Usage Info

We might collect Pages visited, time spent on pages, clicks, and interactions within the game/website to analyze how the game/website is used and to improve player experience.

Cookie / Local Storage Info

Cookies / Local Storage is used to store settings and game progress.

Data Retention: Data related to visitors is retained as long as the account is active, or 14 months after your last play session. If a user requests account deletion, the associated data will be deleted promptly, typically within 30 days after the request is processed.

2.2 Registered players

2.2.1 Age Requirements and Parental Consent

Accounts on Bubbits can only be created by players aged 13 or older, or by younger players with parental consent. For those registering through third-party services like Google, Steam, or CrazyGames, the respective service may verify the user's age and handle parental consent if required. For more details, refer to the privacy policies of those services (e.g., Google's Child Privacy Policy).

2.2.2 Data Collection for Registered Players

When creating an account or linking a third-party service, the following data is collected to provide personalized services and enhance user experience:

Account Info

We collect Username, User ID, Email address (if applicable), Third-party service ID (e.g., Steam ID, CrazyGames ID) to create and manage user accounts, link progress across platforms, and identify users for support or purchases.

Technical Info

We might collect IP address, device type, browser type to secure accounts and ensure the game/website functions correctly.

Usage Info

We store game progress, site/game interactions to secure accounts, improve the user experience, offer tailored features, and save progress.

Data Retention: Data related to registered players is retained for as long as the account is active, 14 months after your last play session or If a user requests account deletion, the associated data will be deleted promptly, typically within 30 days after the request is processed.

2.2.3 Data Collection for Store Purchases

When making a store purchase as a registered player, the following data is collected by us or our payment partners listed in section 3.3 to provide a compliant checkout experience and access to their purchase:

Account Info

We collect User ID, Third-party service ID (if applicable), email address (if applicable) to attach any purchase made to your account and verify ownership.

Technical Info

We might collect Transaction ID, IP address, device type, browser type to combat fraud and reporting.

Usage Info

We store Pages visited, site interactions, purchase history to secure accounts and ensure the website functions correctly.

Payment Info

Payment Information, Billing address

To complete and validate your purchase via our payment provider.

Our payment providers, who act as our merchant of record, securely collect payment information and handle it according to the required security & law. Payment information is not shared with or processed directly by Bubbits.

Data Retention: Data related to purchases can be stored for up to 5 years after fulfilling the purposes for which the data were collected to combat fraud and for reporting purposes. 2.3 When You Contact Us

When you reach out to us, we collect information to help us respond to you effectively:

Contact Info

We collect your User ID to be able to identify you in our system.

Message Content

We collect what you say in your message to understand and address your issue or feedback.

Technical Info

Date, time, and details of how you contacted us

For security and to ensure we respond appropriately.

Data Retention: We will retain the personal data collected from your inquiries for up to three months after your query is resolved or closed. This extended period allows us to ensure that any follow-up questions can be addressed. If the inquiry is from a child under the age of 13, any data collected will be deleted as soon as possible.

3. Third-Party Data Use

3.1 Scope of This Privacy Policy

This Privacy Policy applies only to the Bubbits game and its related services when accessed through the official Bubbits website or our official applications.

If you use Bubbits through a third-party platform or website (like Steam or CrazyGames), this Privacy Policy does not cover those environments beyond the data we specifically receive (like your third-party ID). We recommend checking the privacy policies of those sites or platforms and making sure you understand how your data is used before engaging with them.

We may also work with third-party services for some features in our game. These third parties have their own privacy policies, which apply in addition to ours. We encourage you to review those policies as well.

3.2 Service Providers

We work with trusted third-party service providers to help operate the game/website and deliver services effectively. These providers only receive the data necessary to perform their functions and are required to maintain the confidentiality and security of your information. The key service providers we work with are categorized as follows:

Hosting and Data Storage Service Provider

Vultr

Data storage and processing -Hosts our servers and stores data securely.

MongoDB

Email, User data, app usage data, device information - Provides the database for registered users

Upstash

Provides an in memory database to provide data management for the games online features

Website Security and Performance Service Provider

Analytics

Matomo

Collects usage data, pages visited, interactions on the site and helps us to analyze the website usage to help us understand how the site is used and improve user experience.

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small data files stored on your device that help identify you when you visit a website. They allow the site to remember your preferences and provide a smoother experience.

4.2 Types of Cookies We Use

We use cookies to enhance your experience and ensure that Bubbits functions properly. Here's what our cookies do:

Functional Cookies

Ensure the website/game works properly by enabling basic functions like navigation and settings and allow remembering your game settings, progress or language preferences.

4.3 Managing Cookies

You can control cookie settings through your browser. Below are links to guides on how to manage cookies for common browsers:

Google Chrome: Go to Settings > Privacy and Security > Clear browsing data > Cookies and other site data. Mozilla Firefox: Go to Options > Privacy & Security > Cookies and Site Data > Clear Data. Safari: Go to Preferences > Privacy > Manage Website Data > Remove All. Microsoft Edge: Go to Settings > Cookies and site permissions > Manage and delete cookies and site data.

5. Security Measures

We take the security of your data seriously. We implement various measures to ensure your personal information is protected and manage it according to applicable data protection laws.

5.1 Technologies and Procedures

We use encryption and other security technologies to safeguard your personal information during transmission and storage. Our servers are hosted by trusted partners who apply high security standards to protect the data we store. We regularly monitor our systems for potential vulnerabilities and use firewalls and anti-virus software to prevent unauthorized access.

5.2 Staff Training and Compliance

Our team is trained to manage your data securely and in accordance with data protection laws like GDPR and COPPA. Internal procedures are in place to ensure that only authorized personnel can access sensitive data.

5.3 Data Breach Notification

In the unlikely event of a data breach that affects your personal information:

We will promptly notify affected users, as required by law.

The notification will include: What data was compromised. The steps we are taking to resolve the issue and protect your data. Recommendations for what you can do to protect yourself (e.g., change passwords). We take all necessary steps to ensure that breaches are addressed swiftly to minimize any potential harm.

6. International Data Transfers

Your data may be transferred to servers in other countries. All international transfers comply with relevant data protection regulations, ensuring that your information is safeguarded.

7. Data Retention

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy:

Technical and Usage Data: Retained for 14 months after your last visit to the site/game or until you request removal and the removal is verified. Personal Data for Registered players: Retained for as long as the account is active or 14 months after your last play session. Upon request for account deletion, data will be removed promptly, typically within 30 days after the request is processed. Contact Information: Retained for three months after the query is resolved or closed. If personal data from children under 13 is collected during contact, it will be deleted as soon as possible after resolution. Cookies: Cookies are retained for varying periods, depending on their purpose. Functional cookies are typically retained for as long as they are needed to operate the site/game. If we collect personal data beyond what is outlined above, we will remove it as soon as possible once it is no longer needed.

8. Your Rights

8.1 Your Choices and Control

As a user of Bubbits, you have the right to:

Access Your Data: Request a copy of the personal information we hold about you. Correct Your Data: Ask us to correct any inaccurate or incomplete information. Delete Your Data: Request the deletion of your personal information when it is no longer needed. Limit Data Collection: Request that we limit the collection or use of your data. Object to Data Processing: Object to certain types of data processing, such as for marketing purposes.

8.2 Parental Choices and Control

As a verified parent or guardian of a child using Bubbits, you have the right to:

Access Your Child's Data: Request a copy of the personal information we've collected about your child, including details like username, User ID, third-party ID (if applicable), and email address (if provided). Correct Your Child's Data: Ask us to correct any inaccurate or incomplete information about your child. Delete Your Child's Data: Request the deletion of your child's account and all associated data. Once verified, we will delete this data promptly, typically within 30 days. This will also remove any saved progress in the game. Limit Data Collection for Your Child: Request that we limit the collection or use of certain types of data, such as usage information, from your child.

8.3 How to Exercise Your Rights

To exercise any of these rights, contact us using the information provided below. We may require proof of identity before proceeding with your request. Responses will typically be provided within 30 days.

9. Contact Us

Got questions or concerns? We're here to help. Reach out to us at:

Email: privacy@bubbits.io Address: Florian Meyszies c/o MDC Management#1199 Welserstraße 3 87463 Dietmannsried Germany

10. Updates to This Policy

We may update this policy occasionally to reflect changes in our practices or the law. When we do, we'll update the "Last updated" date at the top. Please check back occasionally to stay informed.