Privacy Policy — Bump Games Apps
Effective date: 15 September 2025
1. Who collects your data
Controller: Arnăut Vasile, trading as “Bump Games” (developer name on app stores).
In this policy, “we/us/our” refers to Arnăut Vasile.
Platforms: Android (Google Play), iOS (App Store)
SDKs: Google Mobile Ads (AdMob/mediation), Firebase (Analytics/Crashlytics/Performance), Tenjin (attribution), GameAnalytics
Identifiers: GAID (Android), IDFA/IDFV (iOS), Firebase Installation ID
Contact: bumpgamespublic@gmail.com
Business address: Moldova, Chișinău, Mircea cel Bătrân
2. Data we collect
We collect only what’s needed to run apps, measure performance, fight fraud, and show ads.
- Identifiers: GAID/IDFA/IDFV, Firebase Installation ID, similar SDK/device IDs
- Approximate location: region/city inferred from IP (no precise GPS)
- App activity: sessions, screens, taps, story opens, in-app search terms, basic events
- Diagnostics: crash logs, ANRs, performance metrics
- Purchases: product ID, price tier, subscription/entitlement status
- User content (only in UGC apps like Confess2Me): the text you post; stored without a public profile unless an app offers accounts
Not collected by default: name, email, contacts, photos/videos, mic/camera data, precise location.
3. How we use data
- Run features; prevent abuse and fraud
- Personalize or contextualize ads where permitted
- Analytics and retention measurement (Firebase/GameAnalytics)
- Attribution (Tenjin / Apple SKAdNetwork)
- Crash/performance debugging
Legal bases: legitimate interests (measurement, security, debugging); consent where required for personalized ads and cross-app tracking.
Your choices:
- Android: in-app consent dialog; or Settings → Privacy → Ads (reset/limit ad personalization).
- iOS (ATT): if you tap Allow Tracking, we may use IDFA for ads/attribution; if you Don’t Allow, we don’t access IDFA and rely on SKAdNetwork/contextual ads. Change anytime: Settings → Privacy & Security → Tracking.
4. Sharing & disclosure
We share limited data with:
- Analytics providers (Firebase, GameAnalytics) to measure usage and stability
- Advertising partners via mediation (served through AdMob or another mediation SDK) — may receive identifiers, approximate location, device signals, and app activity only to deliver, cap, measure, verify ads, and prevent fraud
We do not sell personal data. In some regions, ad delivery/measurement counts as “sharing.” You can opt out in the app consent dialog and OS settings.
Ad-partners list: https://bump.games/ad-partners (includes networks used via mediation and the last-updated date).
Processor policies:
- AdMob — https://policies.google.com/privacy
- Firebase — https://firebase.google.com/support/privacy
- Tenjin — https://www.tenjin.com/privacy
- GameAnalytics — https://gameanalytics.com/privacy
Data storage: our processors host data in the EU, UK and/or USA.
5. International transfers
Data may be processed in the EU, UK, and USA. Where required, we use EU Standard Contractual Clauses (SCCs) or equivalent safeguards.
6. Retention
- Analytics/attribution: up to 24 months (configurable 14–26 months)
- Ad revenue logs: up to 24 months
- Crash data: up to 90 days
- De-identified aggregates may be kept indefinitely
7. Your rights
Depending on your jurisdiction (GDPR, CCPA/CPRA, LGPD), you can request access, correction, deletion, objection, or withdraw consent for personalized ads.
California (CPRA): we do not sell personal info. We may share identifiers and usage data with advertising partners for cross-context ads; opt out in the app consent dialog or by email. We honor Global Privacy Control (GPC) where applicable.
Contact: bumpgamespublic@gmail.com
8. Data access & deletion
We store pseudonymous events linked to advertising/app identifiers.
Send one of the following with your request:
- Android: GAID (Settings → Privacy → Ads → Copy advertising ID)
- iOS: IDFA (if tracking allowed), IDFV, or Firebase Installation ID (shown in-app under Settings → Privacy)
Email bumpgamespublic@gmail.com. We will export or delete associated Firebase, GameAnalytics, and Tenjin records within 30 days. Ad revenue reporting is aggregated; resetting GAID/IDFA detaches future data from prior events.
9. User-generated content & moderation (UGC apps only)
For apps such as Confess2Me:
Prohibited: CSAM, sexual content involving minors, threats, hate or incitement, doxxing, explicit instructions for illegal activity.
Users can report posts in-app; reports are reviewed and content may be removed, features limited, or devices blocked. CSAM is reported to authorities.
10. Children’s privacy
We publish apps for different age groups. Each app’s store page shows its target age (e.g., 12+, Teen, 16+, 18+).
- Our apps are not directed to children under the applicable digital consent age (DCA) — typically 13 in the US and up to 16 in parts of the EU/UK. We do not knowingly collect personal data from users under the DCA without parental consent.
- If you believe someone under the DCA provided data, email us and we’ll delete it.
- For apps rated 12+ or Teen that may attract younger teens, we avoid personalized ads and cross-app tracking for users under the DCA where required.
- If an app is ever child-directed (Google Play Families / Apple Kids Category), we will publish a separate child notice, disable behavioral ads and tracking identifiers for child users, and meet all Families/COPPA/ATT requirements.
Sensitive personal information (CPRA): we do not use or disclose sensitive personal information for purposes requiring a “Limit the Use” link.
Supervisory authority: EU/UK users may lodge complaints with their local data protection authority. Direct requests first to bumpgamespublic@gmail.com.
11. Security
- TLS 1.2+ in transit
- Provider-managed AES-256 at rest
- Strict access controls and logging
12. Payments & subscriptions
In-app purchases/subscriptions use Google Play Billing and Apple In-App Purchase.
We never receive card details. We store purchase receipts/transaction IDs only to activate or restore entitlements.
13. Store disclosures (summary)
Google Play Data Safety:
- Collected → approximate location, app activity, app info & performance, device/other IDs, purchases
- Encrypted in transit
- Deletion on request
- “Shared” only for ads where applicable
Apple Privacy Labels:
- Data Used to Track You (only with consent): identifiers (IDFA), usage data, approximate location
- Data Linked to You: purchases, identifiers (IDFA/IDFV/Firebase ID), usage data, diagnostics
14. Changes
We may update this policy; material changes appear in-app and on store listings. Continued use after changes means you accept the updated policy.
15. Controller & contact
Controller: Arnăut Vasile (trading as Bump Games)
Email: bumpgamespublic@gmail.com
Address: Moldova, Chișinău, Mircea cel Bătrân