Privacy Policy
What we collect
Account: your email address and sign-in method (Google or email/password; passwords are handled by Firebase Authentication, we never see them). Guest sessions get an anonymous ID until claimed.
Purchases: what you bought and when. Payments run entirely through Stripe; your card number never touches our servers and we cannot see it.
Gameplay: your bots, their state, expeditions, salvage, fragments found, and interactions. This is the game itself.
Profile: a public handle if you choose one and an avatar image if you upload one. Handles appear publicly in the Registry next to your bots; that is their purpose.
Messages: anything you send through the contact form, including the name and email you choose to include, and your account ID if you are signed in (so we can actually help with your account).
Notifications: if you enable homecoming pings, the browser push token needed to deliver them.
Analytics: standard Google Analytics events (pages, funnel steps) plus ordinary server logs, to understand what is working. You can opt out with Google's Analytics opt-out browser add-on, and if your ad blocker eats this, the game still works fine.
What we do with it
Operate the game, deliver what you bought, answer your messages, send notifications you asked for, and improve the product. Nothing else. We do not sell your data. We do not run third-party ads.
Who else sees it
Our processors, strictly to run the service: Stripe (payments), Google Firebase (auth, database, hosting), Google Analytics (usage), Brevo (delivery of account and service email), and AI providers including Anthropic, Google, and Replicate, which generate bot names, dialogue, and portraits. The AI providers receive game data (a bot's traits, stats, and interaction counts), never your identity. Each processor holds only what its job requires.
Your choices
Push notifications: turn them off in your browser or device settings any time. Email: any announcement email we send will include a working unsubscribe that is honored immediately. Account deletion: contact us and we will delete your account and personal data; bots you licensed return to the game.
Retention and security
We keep account data while your account exists and as long as needed to run the game, comply with law, and resolve disputes. Deleted data may persist briefly in backups. We use reasonable safeguards and lean on Stripe and Firebase security for the heavy lifting; no system is perfectly secure.
Age
Bot Bastards is for adults 18 and older; we do not knowingly collect data from anyone under 18, and we delete it if we learn we have. If you believe a child gave us information, contact us and we will remove it.
Where this applies, and your rights
The service is intended for users in the United States. Depending on your state, you may have rights to access, correct, delete, or port your personal information; even where those laws do not yet apply to a game our size, we will honor verifiable requests where practicable. Contact us to make one.
Changes and contact
If this policy changes materially, we will announce it on the site. Questions: botbastards.com/contact or info@botbastards.com. Mail: OURANIA K.A. - LLC, PO Box 121, London, OH 43140.