Privacy policy
1. Who is responsible
The data controller for your data is Beep Boop Bap, Suisse. For any question about your data, write to contact@beepboopbap.com.
2. What we collect, and in what context
a) On the website
Your email address, and nothing else, if you leave it in the sign-up form. No name, no profile, no browsing tracking. We immediately send you an email to confirm that it really is you: until you click, you are not signed up, and without a click your address is deleted 7 days after our last email. You can unsubscribe at any time by writing to contact@beepboopbap.com; invitation emails will also contain a link to do it in one click. Unsubscribing deletes your address; we only keep, for 30 days, a fingerprint computed with a secret key, which cannot be turned back into your address, so that restoring a backup does not sign you up again.
The website sets no cookies and embeds no trackers — no audience measurement tool, and no font or script loaded from a third party.
If you change the “Reduced motion” or “Plain glass” settings in the footer, your choice is kept in your browser (local storage) and nowhere else: it is never sent to us and only serves to respect your preference.
b) Your game account
- an internal identifier, your username, and your email address if you link one;
- your password, never in plain text: it is hashed with Argon2id;
- the account type (guest or full) and the sign-in method used;
- the creation date and the selected creature;
- an installation identifier, randomly drawn by the game the first time it opens: our servers only keep a fingerprint of it, used to limit abuse and to link your feedback and usage data to the same installation. It is not a hardware identifier.
A guest account has neither an email address nor a password: only a device token, stored hashed.
If you sign in with Google, we receive the technical identifier of your Google account and, if Google confirms it is verified, your email address, which becomes your account’s address (it lets you recover your access). If you sign in with Facebook, we only receive the technical identifier of your account: your Facebook address is never kept. In both cases, we receive neither your contacts nor your posts.
c) What you do in the game (usage data)
The game sends usage events: launch, sessions and their length, screens viewed, queueing and matches, disconnections, shop visits, purchases, creature chosen, cosmetic equipped, settings changed, technical errors and performance measurements.
What these events carry: the platform, the game version, the language, the operating system, the device model, the graphics card, the resolution and, at the end of a match, the connection type (Wi-Fi/wired or mobile data) and the network quality during the match (latency, losses, regularity). No unique hardware identifier is collected — the code explicitly forbids it. The only free text sent is the message of a technical error, limited to 200 characters.
You can opt out in the game’s SETTINGS, option “Share usage data”. This sharing is on by default; opting out takes effect immediately and empties the queue of pending events.
During a match, the game server also measures the quality of your connection (latency, losses, input regularity, disconnections and returns to the match). These measurements are recorded with the match and your place in the match — without your account or your IP address — and are used to keep matches smooth. They are part of how matches work: the “Share usage data” setting does not turn them off.
d) What you write
- Feedback sent from the game: your message, the game version, the platform, and the identifier of the match concerned.
- Mail and messages: the mail the team sends you, and the messages you exchange in the game.
- Reports: if you report a player, or someone reports you, the report and its evidence.
e) Your purchases
The game plans purchases, but no payment provider is connected at this time: we do not receive, see or store any banking data. When purchases exist, this policy will be updated before they open.
f) Your IP address
Apart from the two exceptions below, we only keep a fingerprint of your IP address, never the address itself, solely to limit abuse (mass account creation, repeated sign-in attempts, floods of feedback or events). These fingerprints are deleted when their counting window expires, which is measured in minutes or hours.
First exception: while you are searching for a match and during the match, we keep your IP address as is. When placing you, we pass it to our game server host, which picks a server close to you and to the other players. It is deleted at the latest a quarter of an hour after your search or your match ends, and straight away if you leave the queue. A copy may remain in our backups: for 14 days at most, except in the copy of the database made just before the latest update of our servers, which is kept until the next update so that it can be rolled back.
Second exception: the technical logs of our servers, which record the requests they receive, keep your IP address for 15 days at most, for security and diagnostics; it is then deleted from them.
g) Your creations
When the creation workshop is open, you can create creatures and cosmetics by describing what you want. We then record your description, the images and models produced, your choice and the history of the creation.
If you publish a creation in the gallery, it becomes visible to all signed-in players, with your username. You can remove it whenever you want.
3. Why we collect this data
| Data | What it is used for |
|---|---|
| Account, password, sessions | Signing you in and finding you again from one match to the next |
| Account email address | Recovering your access, contacting you about your account |
| Website email address | Letting you know about tests and the release — and nothing else |
| Usage data | Understanding what gets in the way, balancing the game, fixing what breaks |
| Network measurements of matches | Keeping matches smooth, fixing what breaks |
| IP fingerprints | Preventing abuse |
| Feedback, mail, reports | Answering you, moderating, keeping the game livable |
| IP address, for the time of your search and your match | Placing you on a nearby server |
| Technical logs of our servers | Security and diagnostics |
We sell no data, we pass none to any advertiser, and we do no targeted advertising.
4. How long we keep it
| Data | Duration |
|---|---|
| Account and its data | As long as the account exists |
| Detailed usage events | 180 days, then deleted automatically |
| Aggregated usage statistics | Kept beyond that, with no content that can be linked to your detailed activity |
| Network measurements of matches | 90 days, then deleted automatically |
| Match server logs | 14 days |
| Session tokens | 15 minutes (access) and 30 days (refresh) |
| Emails sent by the game (sending queue) | 7 days after sending; 30 days for a failed send set aside |
| Friend requests | Pending for 30 days at most, then deleted 30 days after the answer or the expiry |
| Invitations to join a friend’s lobby | Valid for 5 minutes, then deleted |
| Squad invitations | Valid for 5 minutes; automatically deleted 7 days after they expire |
| Squads and their members (who was in which squad, and when) | While the squad exists, then automatically deleted 7 days after it breaks up |
| Anti-duplicate record of requests and invitations | 7 days |
| Chat messages | 7 days; private messages 90 days |
| Reports and their evidence | 90 days (evidence up to 180 days) |
| Feedback sent from the game | No automatic purge at this time |
| Database backups | 14 days at most; the copy made just before the latest update of our servers is kept until the next update, so that it can be rolled back |
| Email address left on the website, unconfirmed | 7 days after our last email, then deleted automatically |
| Email address left on the website, confirmed | Until you unsubscribe or ask for deletion |
| Fingerprint (computed with a secret key) of an unsubscribed address | 30 days (only so that restoring a backup does not sign you up again) |
| Creations of a deleted account | Removed from the gallery as soon as you ask; files erased 30 days after the account is erased |
5. Who else sees this data
- Vercel Inc. (United States) — hosts and serves the website.
- Oracle (Oracle Cloud Infrastructure, an American company) — hosts our servers, our database and their backups, as well as the game and update files, stored in Germany (Frankfurt): your IP address reaches it when you download them.
- Edgegap Technologies Inc. (Canada) — runs the match servers; receives your IP address at placement time, to pick a server close to the players (see 2.f).
- Infomaniak Network SA (Switzerland) — sends our emails and hosts our contact mailbox.
- Google or Facebook (Meta), only if you choose to sign in with them.
Some of these providers are established outside Switzerland and the European Union (United States, Canada).
No one else. No third-party analytics, no advertising network, no data broker.
6. Your rights
You have the right:
- to access your data and receive a copy of it;
- to have it rectified if it is inaccurate;
- to have it erased (see “Deleting your account” below);
- to restrict its processing, for example while we check a dispute;
- to receive the data you gave us in a machine-readable format and have it sent to another service (portability);
- to object to its processing — usage data sharing can be turned off directly in the game’s SETTINGS;
- to withdraw your consent at any time, for example by unsubscribing from the website list, without affecting what was done before.
To exercise these rights, write to contact@beepboopbap.com from your account’s email address, or give your username if you play as a guest. We may ask you to prove the account is yours. It is free of charge.
Deleting your account
How to ask. Write to contact@beepboopbap.com from your account’s email address (or give us your username if you play as a guest). We file the request for you. A dedicated screen is coming to the game; until then, this right is exercised by email. The details fit on one page: delete my account.
Once the request is filed, your account is locked immediately — your sessions are closed and you can no longer play online — and it is deleted after 30 days. During that time, signing back in cancels the deletion, and the game tells you so clearly at that moment: nothing is cancelled silently. This is so that a moment of anger or a stolen account does not cost you everything.
The deletion date is given to you when you make the request, and an acknowledgement is sent to your account’s verified address: it restates that date and how to cancel, and it protects you if someone else asked for the deletion in your place. A guest account, which has no address, does not receive one.
What disappears: your email address, your username, your device identifiers, your Google or Facebook sign-ins, your creatures, what you wrote, your sessions and your detailed usage data. The network measurements of matches (see 2.c) carry neither your account nor your IP address: they remain for 90 days at most, and can no longer be linked to you.
What does not disappear, and why: a technical identifier, with nothing that can lead back to you, remains in our accounting and moderation records, which cannot be rewritten. Reports you made or received are kept without your identity until their normal purge. In other words, your account is dissociated from you as a person; it is not struck from the history of the service. We would rather say so plainly than promise a total erasure that no one can deliver.
In our backups, your data disappears at the latest 14 days after it is erased; only the copy of the database made just before the latest update of our servers may keep it longer, until the next update. If a backup had to be restored in the meantime, your deletion would be replayed.
If a sanction is in progress against your account, you can still delete it. We then keep, for the duration of the sanction, a fingerprint of your email address and of your device, computed with a key that only our server holds: it does not allow the address to be recovered, only to refuse that a sanctioned account comes straight back by linking the same address. We do this on the basis of our legitimate interest in preventing fraud. The device fingerprint is a simple barrier, not proof of identity.
For anything else, write to contact@beepboopbap.com. We reply within one month.
If our answer does not satisfy you, you can contact a data protection authority, in particular:
- in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch;
- in France, the Commission nationale de l’informatique et des libertés (CNIL): www.cnil.fr;
- or the authority of the EU country where you live or work.
7. How we protect this data
Passwords are hashed with Argon2id, session tokens are never stored in plain text, an IP address is only kept in plain text in the two cases described in 2.f and for the time stated there, and exchanges with our servers go over an encrypted connection.
8. Changes
This policy will evolve with the game, in particular when purchases open. The date of the last update is shown at the top.
