Privacy Policy

Last updated: 2026-09-29

This Privacy Policy explains how Vineet Singh ("we", "us" or "our") handles information in the mobile game BombForge: Arena (the "Game") and on this website.

Summary

• You do not need an account to play. We never ask for your name, email address or phone number in the Game.
• Your progress, coins and settings are stored on your device.
• Some online features use a random install ID. We only store a scrambled (hashed) form of it on our server, so it cannot be turned back into the original ID.
• In Online Arena matches your phone connects directly to the other players' phones, so they can see your IP address.
• Ads are provided by Google AdMob and purchases by Google Play.
• We do not sell your personal information.

Information stored on your device

Your game progress, coins, unlocked heroes and items, settings, downloaded level packs and a random install ID created by the Game are stored locally on your device. You can delete them with Settings > Reset progress or by uninstalling the Game (Reset progress keeps the install ID and a Remove Ads purchase so that purchases and code limits keep working). Device or operating-system backups may keep app data according to your device settings.

Online features and our server

When you are online, the Game contacts our server to load game settings and prices, check the date for the Daily Challenge, list and download level packs, events and challenges, and show announcements. When you use the features below, the Game also sends your install ID, which our server stores only in hashed form:

• Coupon codes and friend codes. We store the hashed install ID with the time each code was used, the first time your device contacted this feature, your friend code, and for friend codes a hashed form of your network (IP) address. This lets us allow each code once per phone and stop misuse. These records are kept while the codes and limits they protect are in use.
• Tester phones. If you enter a tester code, the hashed install ID is stored so that phone can see test content.
• Online Arena. See the next section.

Like any website, our hosting provider may process your IP address and keep standard server logs for security and to run the service, for a limited time according to its policies.

Online Arena (multiplayer)

To play an Online Arena match you choose a player name for that match. The name, your hero and the room settings are stored on our server and shown to the other players in the room. Rooms, names and match results are deleted about 24 hours after the room was created. A hashed install ID is kept for 2 days to apply the daily room limits.

During a match, phones connect directly to each other (peer to peer) to exchange game moves. This means the other players' phones receive your IP address, as is normal for online games. To set up these connections the Game uses Google's public STUN servers, which see your IP address. For the few phones that cannot connect directly, game traffic may pass through a relay (TURN) service that we configure; the relay provider processes your IP address and the game traffic, but not your name. Game traffic never goes through our website server.

Please do not use your real name or anything offensive as a player name.

Advertising

The Game uses Google AdMob to show banner, interstitial and rewarded ads. Google and its partners may collect and process information such as your device's advertising ID, IP address, device information, approximate location and ad interactions, depending on your device, region and privacy choices. Where required by law, the Game asks for your consent for personalised ads, and you can change your choice in Settings > Ad privacy choices or your device settings (Android: Settings > Google > Ads). See Google's Privacy Policy and how Google uses information from apps that use its services. We do not control the data Google collects directly.

Purchases

Coin packs and Remove Ads are bought through Google Play. Google handles the payment; we never receive your card or payment details. To add coins and stop the same purchase being used twice, the Game sends the purchase's product and purchase token to our server, where they are stored. Remove Ads is checked with Google Play on your device, which remembers it on your Google account.

Messages you send us

If you contact us or request data deletion through this website or by email, we receive the name, email address and message you provide. We use them only to reply to you, handle your request and keep a record of it.

Children

The Game is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Sharing

We do not sell your personal information. Information is processed by service providers that help run the Game: Google (AdMob, Google Play and STUN servers), our hosting provider, and a relay (TURN) provider for Online Arena connections that need one. Other players in an Arena room see your player name and receive your IP address as described above. We may disclose information if required by law.

Security

All connections to our server use HTTPS, install IDs and network addresses are stored only in hashed form, and we take reasonable measures to protect the data we hold. No method of storage or transmission is completely secure.

Your choices and rights

You can delete the data on your device at any time (see above), reset your advertising ID, and change ad consent in the Game. You can ask us to delete the data we hold on our server; see the Data Deletion page. Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you may have further rights, such as access and correction. Contact us to use them.

Changes

We may update this policy. The date at the top shows the latest version. Significant changes will also be announced in the Game's Updates.

Contact and grievances

Vineet Singh, Bilaspur, Chhattisgarh, India
Email: contact@vineetsinghid.in
Questions, complaints or requests about your data can be sent to this address. We aim to reply within 30 days.