1. Controller and contact
JK Bears Digital (trading as Board Bear), based in the Netherlands, is responsible for personal data processed to provide Board Bear. For privacy requests, contact info@jkbearsdigital.com.
2. Information we handle
- Account details: email address, login identifiers and the player name you provide. If you choose Google sign-in, authentication information shared by Google may include your name, email and profile picture. Passwords are handled by the authentication provider, not shown to other players.
- Game information: chosen avatar, scores, rank, ride mode, progress, virtual balances, unlocks and preferences. Public leaderboards may display your player name, chosen avatar and scores.
- Purchases: items purchased, transaction references, amounts, status and purchase history. Stripe processes web card payment information; we do not need your full card number. Google Play may process Android payments if billing is enabled in a future build.
- Support requests: your name, email, subject, message and any optional order number you provide. We send this to the helpdesk inbox and use your email to reply and send a receipt confirmation. Support messages remain in our email inbox as needed to resolve requests and meet applicable obligations.
- Device information necessary to operate, secure and troubleshoot the service, such as technical request and error data handled by hosting and service providers. Guest progress and settings are stored locally on your device.
3. Purposes and legal grounds
We use account and game information to provide your requested game service and saved progress (contract); process purchases and support requests (contract and, where relevant, legal obligation); protect accounts, prevent abuse and maintain reliability (legitimate interests); and meet applicable accounting and legal duties (legal obligation). Where consent is required for optional technologies, we will request it before using them. We do not currently add advertising or behavioral tracking scripts in the game.
4. Who receives data
Our hosting and authentication infrastructure processes the information needed to run accounts and the game. Google receives information when you choose Google sign-in. Stripe handles web payments and related transaction information. If Android billing becomes available, Google Play will handle those payments. These providers may process data under their own privacy notices. We do not sell player personal information or share it for cross-context behavioral advertising as part of the current game.
5. International transfers
Some service providers may process data outside the EU/EEA, including in the United States. Where required, international transfers must rely on an applicable legal mechanism, such as adequacy decisions or standard contractual clauses and supplementary safeguards where needed. Contact us for information about safeguards relevant to your data.
6. How long we keep data
Account, game and profile data are kept while your account is active and removed through the account-deletion feature, subject to applicable legal obligations and backup cycles. Guest data remains on your device until cleared. Transaction and provider records may be kept as long as required for financial, tax, dispute and fraud-prevention duties. We review retention based on the purpose and legal requirements rather than promising a single period for every record.
7. Your choices and rights
In the game’s account settings you can change your name and avatar, download your game data and delete your account. You can also request access, correction, deletion, restriction, portability or object to eligible processing by emailing us. EU/EEA residents may complain to their local supervisory authority, including the Dutch Autoriteit Persoonsgegevens. US residents may have additional rights under applicable state privacy laws, including access, correction, deletion and appeal; contact us to exercise them. Rights and exceptions vary by location. We will verify requests where necessary and respond under applicable timelines.
8. Children and security
Accounts are intended for players aged 13 or older. If we learn that an account was created by a child under 13, contact us to have it reviewed and deleted. Additional local parental-consent rules may apply to teenagers. We use account controls and service-provider safeguards, but no online service can guarantee absolute security.
9. Cookies, changes and questions
For browser storage details, see our Cookie Policy. We may update this policy when our practices change and will update the date above; significant changes will be communicated as required. Email info@jkbearsdigital.com with questions.