Privacy policy

Playing as a guest

• You never have to give us your email or any other personal details to play.
• The name you type is saved in your browser and sent to the game when you join a room, so the other players can see it. In a public room it also shows in the Public rooms list, and the host's name can show in the preview of the room's invite link.
• Rooms live only in the game server's memory. Chat messages are passed on to the players in the room, and the last 30 stay there for people who join later. Nothing from a room is saved unless someone reports a player (below): the rest is all gone when the room closes.

If you sign in

• Signing in is optional. It keeps your XP, level and hats. You type your email and we send you a 6-digit code; there is no password.
• You can also sign in with Google or Discord instead (not in the Android and iOS apps). Then that service tells us your email address and that it has verified it, and we keep only that email, exactly as if you had typed it: the same account either way. We ask for nothing else (no contacts, no friends list, no profile picture), we do not keep anything the service sends us besides the email, and we post nothing anywhere. That service's own privacy policy covers what it keeps about you signing in.
• We keep your email address, your name, your XP, the hat you picked, how many practice matches you played on the last day you practiced, when you made the account, and the time of each match you won (for the leaderboard). For each device you signed in on, we keep only a hash (a one-way fingerprint) of its sign-in token, when it was made and when it was last used. A sign-in code is kept only as a hash and works for 10 minutes.
• Your email is only ever shown to you. The leaderboard shows names, levels, hats and wins.
• While you are signed in, the other players' pages in your room also get a code made from your account (a one-way fingerprint, never your email or anything else about you), so that someone who blocks you on their device keeps you blocked in the next room.
• Delete my account, in your profile, deletes your email, name, XP, hats and wins at once and signs that device out.

Cookies and what stays on your device

• We set one cookie, and only when you sign in: __Host-lb, which keeps you signed in. Scripts on the page cannot read it (HttpOnly), it only goes to this site over HTTPS (Secure, SameSite=Lax), and it lasts 400 days from your last visit. Signing out or deleting your account removes it. While you sign in with Google or Discord, a second cookie, __Host-lb-oauth, holds a random check for at most 10 minutes so the sign-in can only finish in this browser; it is removed as soon as you come back. Guests get no cookies at all (unless they start signing in), and there are no advertising or tracking cookies.
• The game saves a few things in your browser's local storage, which stay on your device: your name, your language, whether the sound is on, your last practice choices, whether this browser has been here before and has finished a match (so newcomers get easier bots, and for the counts below: only a yes or no is ever sent), when to offer installing the app again, and the players you blocked (below). A reconnect token in session storage puts you back in your room after a reload; it goes when you close the tab. When the game is updated while it is open, the page reloads itself once, and session storage keeps which version it reloaded for and the name you had typed, until you close the tab.
• Your browser may keep a copy of the game's files so it opens quickly. It holds no personal data.
• You can clear all of this in your browser's settings.
• The Android and iOS apps are the same game with the same rules: everything on this page holds for them too, and what it says your browser keeps, the app keeps in its own storage on your device.

The daily counts

• To see whether the game is growing, the server counts a few things per day: pages opened, which known site or app a visit came from (only its name, such as "google" or "whatsapp", never the full link), link previews, joins, matches played and taps on share. They are only numbers per day, with no IP addresses, no IDs, nothing you typed and nothing that could tell who you are.
• This browser also remembers where its first visit came from (the site's name and, for an ad, the campaign's short name) and sends those two words with later visits and matches, so we can see which links bring players who play. From your browser's own description the server notes only the kind of device (phone, tablet or computer) and its system (such as Android or iOS), never the description itself, along with the page's language and the hour.
• To stop floods and abuse, the server remembers recent IP addresses (and, for signing in, email addresses) in its memory only. They are never written to disk, and a restart forgets them.
• When something breaks in the game on your device, the page sends us a short error report so we can fix it: the version of the game, what kind of error it was, the error's own text with anything that could be a link, an email, a room code or something typed removed, where in our code it happened, the kind of device and its system (as above), and which game and step you were in. Nothing that says who you are. Reports are kept 30 days.

Reporting and blocking players

• In a room, tap another player's chat line or their name to block or report them. Blocking only hides their messages and emotes on your device; nothing about it is sent to us.
• A report keeps when it was made, the room's code and game, the reason picked, the reported player's name and their last 10 chat messages in that room (as everyone saw them), and for both the player who reported and the one reported, their account's number if they were signed in and a keyed hash of their IP address (a one-way fingerprint made with our own secret key, never the address itself). Only the person who runs the game reads reports, to keep the game friendly. Nobody is ever told who reported them.
• When two different players report someone in the same room, that player's typed chat is muted for the rest of that room, and they are told so.
• Reports are deleted after 90 days (a copy can stay in the backups below for up to four weeks more).

What we never do

No ads, no third-party analytics and no trackers. We do not sell or rent your data, and we share it only with the services below, for what they do for the game.

Services we use

• Google Cloud hosts the game server in the United States (Iowa, region us-central1). Accounts and the counts are stored there.
• Resend delivers the sign-in emails. It receives your email address and the message with your code.
• Google and Discord, only if you choose to sign in with one of them: you sign in on their own page, and they send us your email address and whether they verified it.
• Google Cast: in browsers that can cast, such as Chrome, the game loads Google's Cast library from gstatic.com (on a phone's home screen and in a room's lobby) so you can show a room on a TV. When you cast, the room's TV link goes to the TV through DashCast, a public Cast receiver. Google's own privacy policy covers its library.
• Game portals: if you play Bump Soccer on CrazyGames, Poki or itch.io, the portal serves the game, and its own privacy policy covers what it and its SDK collect. There, signing in and typed chat are off. On CrazyGames, if you are signed in there, the game reads your CrazyGames username only to fill in an empty name field. The game still connects to our server to play, as it does here.

Replays and clips

Replays and clips are made in your browser. A replay link carries the replay itself after the # in the link, a part browsers never send to a server; a clip is a video made on your device. Nothing is uploaded to us. Both show the names of the players in that match, and they go only where you share them.

Logs and backups

• The game server's log notes when it starts and any errors. It does not record email addresses, sign-in codes or chat. The web server in front of it can log the IP address and the address asked for of a request that fails (for example while the game restarts). Logs stay on our server for 7 days and are then deleted (a copy can remain in the server's disk backups for up to 14 more days).
• Every night the server copies the accounts' data (with the counts) and keeps the last 14 copies, and Google Cloud keeps a snapshot of the server's disk for 14 days, so we can recover from an accident. Something you delete can stay in these backups for up to four weeks before they are deleted automatically.

Your data, your choice

• Your profile shows what your account holds: your email, name, level and XP, hats and wins.
• To delete your account, tap Delete my account in your profile, or write to us.
• For a copy of your data, to correct or delete it, or for any question about it, email nando@snib.games from the address you signed in with (or tell us which one it is).

Children

Bump Soccer is a game for everyone. It does not ask your age, and you can play without giving any personal information. Signing in is optional: if you are under 13 (or the age your country sets), ask a parent before you sign in. If you are a parent and think your child gave us their email, write to us and we will delete the account.

Changes

If what we keep changes, we will update this page and its date.

Contact

• Bump Soccer is made and run by Joao Donato, who is responsible for the data described on this page (the data controller).
• Questions about privacy, or a request about your data: nando@snib.games.