Privacy Policy
Effective date: October 8, 2026
Your privacy matters in and out of the arena. This policy explains what Bro Battles collects, why it is used, and the choices available to you.
1. Information we process
- Accounts and sessions: username, a securely hashed password for permanent accounts, temporary guest identifiers, session tokens, account status, and timestamps. Creating a permanent account requires an email address and verification. We store that address and verification status, with temporary hashed verification codes and attempt counts. You can later change your email address in account settings. We do not store your password in readable form.
- Gameplay: character choices, parties, progression, virtual currency, match activity, battle records, and information needed to run multiplayer sessions.
- Communications: friend requests, direct messages, party chat, message reactions and read information, feedback, support requests, and replies. Other members of a party can see its messages, reactions, and who viewed a message. The sender and recipient can see their direct messages, reactions, and read status. Friends and party members can also see the profile and activity information the game displays to them. Support requests are available to you and authorized support staff. Do not put information in a message that you do not want its audience to see.
- Purchases: order identifiers, currency grants, payment status, refunds, and disputes. Stripe processes payment details. Bro Battles does not ask you to enter card numbers into its feedback or support forms.
- Technical and security information: connection information such as IP addresses, request activity, and abuse-control records needed to deliver and protect the service. Hosting and network providers may process request logs under their own service configurations.
- Browser preferences: settings and other interface preferences are saved in your browser. Clearing browser storage removes those preferences and can affect guest access.
We do not ask for or store a birthdate in this version. Please do not send passwords, card details, or unnecessary sensitive information in messages.
2. Why we use information
We use information to operate accounts and multiplayer gameplay, remember preferences, deliver purchases, answer support requests, improve the game using feedback, prevent abuse, and meet legal obligations.
If you choose to receive game news and offers, we record that preference and may share the verified email address and preference with our email delivery provider to send those updates. You can turn marketing messages off in account settings or use an unsubscribe link in any marketing email.
Where data protection laws require a legal basis, processing may be necessary to provide the service you request, meet legal duties, or pursue legitimate interests in operating and securing the game, subject to your rights. Where consent is required for optional processing, it must be obtained separately. Acknowledging this policy is not blanket consent to advertising or optional tracking.
3. Cookies and browser storage
Session cookies keep you signed in. Other cookies and local storage support display names, preferences, and gameplay interface state. Blocking or clearing them may prevent sign-in or remove access to a temporary guest account.
This feature release does not add advertising or analytics trackers. Any optional analytics or nonessential tracking must be documented and configured with required choices before it is enabled.
4. Who receives information
Other players can see usernames and information shared through multiplayer and chat features. Authorized administrators can access information needed for support, moderation, and operations.
We use Cloudflare for website/network services, Stripe for payment processing, and Resend to deliver verification emails, support/feedback notifications, and opted-in game updates. When AI help search is configured and you submit a help search, we send your search words and our help article text to Google's Gemini API to rank relevant articles. Do not put personal or sensitive information in a help search. Providers process information needed to deliver their services. Information may also be disclosed when required by law, to protect rights or security, or as part of a lawful transfer of the service with appropriate protections and notice where required.
We do not describe your information as anonymous merely because it uses a username.
5. Retention
Guest accounts are scheduled to expire after approximately two hours; cleanup runs periodically. Expiry does not necessarily remove related security, purchase, chat, or historical gameplay records at the same time.
Feedback submitted through the new feedback system is retained for up to 12 months. Support conversations are retained while open and for up to 12 months after closure, subject to periodic cleanup. Keep requests open only while they need attention.
Permanent accounts and their profile and progression records remain while the account is active; there is no automatic inactivity deletion for permanent accounts. Friend direct messages, reactions, and read status remain while both accounts exist, even if the players are no longer friends. Deleting either account removes their direct conversation from the live database. Party messages, reactions, and view records remain while the party exists. Deleting a party removes its chat records; deleting an account removes that player's party messages and related interactions from the live database.
Battle history, purchase and currency records, and moderation/security records do not currently have a scheduled age-based deletion period. They are kept while needed to operate the game, resolve transactions or disputes, investigate abuse, or meet legal and accounting obligations. Legal acceptance records identify the versions and time of acceptance. Deletion requests are reviewed manually against those needs and other players' rights. Copies in backups may remain until the applicable backup rotation ends; that schedule depends on the deployed backup configuration.
6. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, receive a copy of, restrict, or object to processing of your information, withdraw consent where applicable, or complain to a data protection authority. Contact [email protected], or use the Privacy category in the Help Center.
We may need proportionate information to verify a request. Do not send your password. Some requests may be limited by other people's rights or applicable legal obligations. You can change local settings in the game and clear browser storage through your browser.
7. Younger players
Bro Battles is intended for ages 13 and older, and is not offered to children under 13. A parent or guardian should contact us if they believe a younger child has supplied personal information. We will investigate and take appropriate steps, including deletion where required.
Players under the age of majority must have a parent or guardian's permission. Additional protections or consent requirements may apply by region; the stated minimum age does not replace them.
8. International processing and security
Information may be processed in the United States and other places where providers operate. Applicable international-transfer requirements must be addressed through appropriate legal arrangements.
We use measures such as password hashing, authenticated sessions, access controls, and request limits to protect the service. No system can guarantee absolute security.
9. Changes and contact
We may update this policy as the game develops. The effective date and version will identify changes; material changes will be brought to your attention where required.
Bro Battles Support