Privacy

What we keep

• Your account: email address, username, display name, avatar and a salted hash of your password. We never store your password itself.
• Guest play: if you play as a guest we keep a guest profile with a generated name, your coins and your progress. It is tied to the device you play on. Guest profiles that are not used for 30 days are deleted.
• Your game: matches, rounds, story-mode progress, slap duels, Round Points, Game Coins and every change to your balance, items you own or equip, and your clan.
• Purchases: what you bought, when, and the payment status reported by our payment provider.
• Security: sign-in sessions and failed sign-in attempts, so we can keep your account safe. One-time email codes are stored only in scrambled (hashed) form and expire after 15 minutes.
• Device and network: when you sign up, play as a guest or sign in, we record a random device id this app creates in your browser (kept in local storage and a first-party cookie), a short fingerprint hash (browser type, platform, screen size, time zone and language, scrambled on your device, no canvas or hardware probing), your IP address and its network, and your browser's user agent. We use them only to stop one person making many accounts, to spot abuse, and to warn you when your account signs in from a new device. We keep them for up to a year.

How we use it

• To run your account, your matches, your balance and the leaderboards.
• To keep the game fair: spotting multiple accounts, automation and abuse.
• To fix problems and improve the game.

We don't sell your information. We show Google ads on a few pages (see “Advertising” below).

What other players see

Your display name, username, avatar, level, record, clan, online status and leaderboard position. Your email address is never shown to anyone.

Emails we send

• Account emails (always sent): your welcome and email-verification code, password-reset codes, "password changed" and new-device sign-in alerts, and notices if your account is suspended or reinstated.
• Feature updates (your choice): news about new games, story chapters and events, only once your email is verified. Every update has an unsubscribe link (one click, no sign-in), and you can turn them off or on from your profile.

Emails are delivered through our email provider, which processes your address only to deliver them.

Payments

Coin purchases are handled on Bachs.io's secure checkout. Your card or bank details go straight to Bachs.io; we never see or store them. We receive only the result of the payment.

Advertising

The game is free and partly paid for by ads. We use Google AdSense to show ads on a few content pages: the home page, the rules and about pages, the leaderboard and the Story Mode map. We never show ads during a match, a slap duel, sign-in, checkout or account screens.

• Third-party vendors, including Google, use cookies to serve ads. Google's advertising cookies let it and its partners serve ads to you based on your visits to this and other sites on the internet. Google and its partners may place and read cookies on your browser, or use web beacons or your IP address, to collect information as a result of ad serving on this site.
• Unless you turn on Personalised ads in your cookie choices, we ask Google for non-personalised ads only, which are chosen from the page and your general location rather than your browsing history. Google may still use cookies to limit how often you see an ad and to fight fraud.
• You can opt out of personalised advertising at Google Ads Settings or opt out of some third-party vendors' cookies at aboutads.info.
• Learn how Google uses data when you use our partners' sites or apps.
• We never send Google your name, email, username or anything else that identifies you.

Cookies and storage on your device

• Essential (always on): keeps you signed in, remembers your sound and motion settings and your cookie choice, and keeps a guest's coins and progress on this device.
• Analytics (only if you say yes): anonymous counts of which screens and modes get played, to improve the game. Never sold, never used for ads.
• Advertising (Google): on the pages that show ads, Google sets and reads its own cookies (see “Advertising”). They are used for personalised ads only if you turn on Personalised ads.

Change your choices any time: Cookie settings

Children

After Round 1 is not directed at children under 13, and creating an account requires confirming you are 13 or older. We don't knowingly collect information from children under 13; if you believe a child under 13 has an account, tell us and we will delete it.

Keeping it safe

Your data is stored on secured servers, sign-in sessions expire and rotate, and repeated wrong passwords make you wait longer and longer before the next try. Admin access is limited to the people who run the game.

Your choices

• Change your display name, avatar and username from your profile.
• Turn feature-update emails off or on from your profile, or with the unsubscribe link in any update.
• Sign out of every device by signing out and signing back in.
• Ask us for a copy of your data, or to delete your account, through the game's support channel.