Privacy Policy
Last updated: 3 October 2026
- No account is needed to play. We never ask for a real name, email, phone number, birthday, photo or location.
- There is no chat, no voice, no messaging and nothing players can upload.
- We keep game progress (stars, wins, looks) under a random player number, and short bug-report logs that you can switch off.
- The phone apps show ads from Google AdMob. Every ad request is marked as child-directed: no personalised or interest-based ads, family-safe (G-rated) ads only.
- You can delete your player profile at any time inside the game, or by emailing us.
Who we are
BUMP! is a party game made by Aviral Yadav, an independent developer based in India (“we”, “us”). This policy covers the BUMP! web game at play.aviral.lol and the BUMP! apps for Android and iOS. Questions or requests: yaviralatwork@gmail.com.
BUMP! is made for kids and families
We designed BUMP! so that children can play without giving us personal information. We do not knowingly collect a child's name, email, phone number, address, photo, voice or location. The little we do keep (below) is tied to random numbers, not to a person, and is used to run the game: saving progress, the leaderboard, keeping matches fair, and fixing bugs. If you are a parent or guardian and think your child has given us personal information (for example by typing a real name as their player name), email us and we will delete it.
What we keep, and why
| What | Why | How long |
|---|---|---|
| Player profile: a random player id, the player name (picked from our list or typed and run through a word filter), the Bumpling's look, stars, wins, trophies, level, matches played, and when it was made and last used | To save progress and show the leaderboard. Created the first time you play online. | Guests: deleted automatically after 180 days without playing. Signed-in profiles: until you delete them. |
| Device key: a random secret kept on your device; our server stores only a scrambled (hashed) copy | So your device can get back to its own profile. | As long as the profile exists. |
| Google account number (only if you choose “Sign in with Google”) | So you can keep your progress on more than one device. We keep only Google's private account number; we never keep your email, name or photo from Google. | Until you delete the profile. |
| Match and reward records: what a match paid out (stars, wins) and simple facts about it (length, number of bots) | To spot cheating and farming so the leaderboard stays fair. | 90 days, or until you delete the profile. |
| Bug reports (session logs): screens visited, matches started and finished, errors and glitches, frame rate, connection quality, and device details (browser/app version, device type, screen size, graphics chip, memory) | To find and fix crashes and lag. These logs use a random session number and contain no names or typed text. | 30 days. Switch it off any time: Settings → BUG REPORTS: OFF. |
| Reports a player makes about a name or behaviour (the reason and the names involved) | To keep the game safe and kind. | Until reviewed and no longer needed. |
| IP address | Needed to connect your device to our server. We do not store IP addresses: we keep only a salted, one-way hash for a short time to stop floods and abuse. | Not stored. |
What other players see: your player name and your Bumpling (colour, hat, face, skin) in matches, and on the TOP BUMPERS leaderboard together with your trophies, wins and stars if you have won. Nothing else.
On your device the game stores its settings, your name and look, and the device key in the browser's or app's local storage. Clearing the browser's data or uninstalling the app removes them.
Ads in the apps
The free BUMP! apps for Android and iOS show ads from Google AdMob: a banner on the title screen, a full-screen ad now and then between matches, and an optional video ad a player can choose to watch to double their stars. Ads never appear while a match is being played. The web game has no ads.
- Every ad request is tagged as child-directed (for the US COPPA law) and as from a user under the age of consent (for European law).
- Ads are non-personalised: no interest-based advertising, no remarketing, and only ads rated G (general audiences).
- On Android the app does not ask for the advertising ID.
- To show an ad, Google receives technical information such as the device model, operating system, app version and IP address, and uses it to deliver the ad, measure it and prevent fraud. See how Google uses information from apps that use its services and Google's Privacy Policy.
Who else handles data
- Google: AdMob ads in the apps; and Google Sign-In, only if a player chooses to sign in.
- Our hosting and database providers, who run our game server and store the records above on our behalf.
We do not sell personal information, and we do not share it with anyone else unless the law requires it.
What we never do
- No text chat, voice chat, direct messages, friend requests or user-uploaded pictures.
- No collection of real names, emails, phone numbers, birthdays, addresses, photos, contacts or precise location.
- No analytics or tracking tools other than the bug reports described above.
- No in-app purchases. Stars are earned by playing and have no money value.
Your choices and rights
- Delete your profile: in the game open MY BUMPLING → STATS → DELETE MY BUMPLING. This deletes the profile and its stars, wins, trophies, looks, match records and link to Google, straight away and for good. Other ways are on the Delete account page.
- Stop bug reports: Settings → BUG REPORTS: OFF.
- Ask us what we hold about a player, or to correct or delete it: email yaviralatwork@gmail.com with the player name and, if you can, the PLAYER ID shown under MY BUMPLING → STATS. We reply within 30 days.
Depending on where you live (for example under the GDPR in Europe and the UK, the DPDP Act in India, COPPA or state laws in the US), you or your child's parent or guardian may have more rights, such as to access, correct, delete or object to how data is used. Email us to use them. We rely on running the game you asked to play, and on our legitimate interest in keeping it fair, safe and working, as the legal basis for the records above.
Security
Connections to our server are encrypted (HTTPS). Device keys are stored only as hashes, and IP addresses only as salted hashes. No system is perfectly secure, but we keep as little as possible so there is little to lose.
Changes to this policy
If we change this policy we will update the date at the top of this page. If a change matters (for example, collecting something new), we will say so in the game before it takes effect.