Privacy Policy

This policy describes what we collect when you play Broski Battle IO or use broskibattle.io, why we collect it, and the choices you have. In this policy, "we" means Conscious Innovations Inc., the data controller for the Service. We choose why and how your information is used.

We do not sell your data, and we do not use device fingerprinting. The website shows ads served by Google AdSense and, when live, our other ad partners; those partners use cookies, as described under Advertising below. If you do not agree with this policy, please do not use the Service. If you change your mind later, you may stop using the Service and exercise the rights described below.

Questions about our data practices, your rights, or complaints: email team@broskibattle.io.

Account data you provide

When you register or sign in, you give us an email address (used as your username), a password (we store only a one-way hash), and a display name. We also generate a friend code so other players can find you. We process this to create and maintain your account. Basis: performance of our contract with you.

Data generated when you play

Match outcomes (wins, losses, rank), per-character stats (kills, damage dealt/taken), unlocks you've earned, rounds played. We use this to run leaderboards, progression, and matchmaking. Basis: performance of our contract with you.

Data you create in social features

Friend requests and the contents of private messages you send to other players. Basis: performance of our contract with you.

Device data needed to keep you signed in

A signed session token and, for guest play, a resume token, stored locally on your device. These are strictly necessary to operate the service you requested.

Operational data we generate server-side

Aggregate usage counters (daily rounds played, peak concurrent players, character popularity), per-day activity indicators linked to your account, server logs (account events, errors), and the country derived from your connection (we do not store your raw IP). We use this to keep the service running, secure it, prevent abuse, and report aggregate traffic to ad networks. Basis: our legitimate interests.

Sources. We collect Service Data from you (information you submit at registration and during play, and the contents of messages you send), from your device (only the strictly-necessary session and resume tokens described above), and from our own servers (operational and aggregate records generated by your use).

Recipients. We share Service Data only with the processors we need to operate the Service:

• hosting and infrastructure providers that run our servers and the website (including our CDN provider, currently Cloudflare);
• when live, our rewarded-ad network (planned: AdinPlay), which collects its own data under its own privacy policy and consent tool — we receive back only a count of ads you watched.

These providers process data on our behalf under contract and may not use it for their own purposes. We do not sell Service Data. We do not share Service Data for cross-context behavioral advertising. We may disclose Service Data where required by law, to protect the safety of users or the Service, or in connection with a merger, acquisition, or sale of assets.

When advertising is live, the Service shows ads to keep it free to play.

• Website ads (Google AdSense). Ads on broskibattle.io are served by Google and its partners. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads based on your visits to this site and other sites on the internet.
• In-game ads. Interstitial ads between rounds are contextual only — they are not personalized or targeted to you. Rewarded ads (watching an ad to earn an in-game reward) are elective: you choose to watch. The ad network collects its own data under its own privacy policy and consent tool; we receive only a count of ads watched and credit it to your account.
• Your choices. You can opt out of personalized advertising from Google at Google Ads Settings, and out of many third-party vendors' cookies at www.aboutads.info. If you have not opted out, other third-party vendors' cookies may also be used to serve ads.
• We ourselves do not build advertising profiles of you, and we do not give our ad partners your account details.

Where consent is required (for example, for players in the EEA, UK, or Switzerland), a consent tool will ask for your choices before any advertising data is collected.

We use a small number of cookies and local-storage entries:

• Strictly necessary: session and guest-resume tokens that keep you signed in and your progress saved. These cannot be disabled without breaking the Service.
• Advertising: set by Google AdSense and our other ad partners on the website to serve ads, measure them, and limit how often you see the same ad. See Advertising above for what they do and how to opt out.

You can disable cookies in your browser at any time; disabling strictly-necessary cookies will stop the Service from working.

Your Service Data may be processed by us and our service providers in countries other than your own, including the United States, Canada, and Australia. Where this involves a transfer out of the EEA, UK, or Switzerland, we rely on adequacy decisions or standard contractual clauses.

• Account data and gameplay history: kept until you delete your account.
• Private messages: rolling 90 days.
• Server logs: rolling 30 days.
• Per-day activity records: aggregated after 24 months, originals deleted.
• Banned accounts and abuse evidence: kept as long as needed to prevent re-abuse.
• Aggregate statistics: kept indefinitely.

We protect Service Data with TLS in transit, one-way hashing for passwords and resume tokens, signed session tokens, and access controls on administrative functions. No method is fully secure; we aim for industry-standard practice.

If you are in the EEA, UK, or a jurisdiction with similar laws, you can request access to, correction of, deletion of, or a copy of your data, and you can object to certain processing based on our legitimate interests.

To exercise any right, email team@broskibattle.io. We will respond within one month. If you are not satisfied, you may lodge a complaint with your local data protection authority. We do not make automated decisions about you.

California residents have the right to: know what personal information we collect and how it is used; delete their personal information; correct incorrect personal information; and limit the use of sensitive personal information.

Over the past 12 months we may have collected: identifiers (email address, display name, friend code); and account and gameplay records. This information comes from you, your device, and our own servers. We do not collect sensitive personal information as defined by California law.

We do not sell personal information. Advertising cookies set by our ad partners on the website may count as "sharing" for cross-context behavioral advertising under California law; you can opt out through the links in the Advertising section, or by emailing team@broskibattle.io.

To exercise these rights, email team@broskibattle.io — we will respond within 45 days. We will verify requests by matching identifying information you provide (such as your email, display name, or friend code) against our records. You may authorize an agent to make a request on your behalf; we will verify the authorization. We do not discriminate against users who exercise these rights.

We do not respond to Do Not Track browser signals, as there is no accepted standard for doing so; use the opt-outs in the Advertising section instead.

The Service is not directed to anyone under 16, or the age of digital consent in their jurisdiction, whichever is higher. We do not knowingly collect personal information from children. If you believe a person under that age has registered, contact us and we will delete the account. Parents or guardians who believe we have collected information from a child under 13 without verifiable parental consent may contact us to request deletion.

We may update this policy. Material changes will be posted here with a new date, and we will notify you through the website or in-game where significant.

Controller: Conscious Innovations Inc. Questions? Email team@broskibattle.io.