Privacy Policy

Last updated: May 24, 2026

Bomb Rain ("we", "this site") respects your privacy. This policy explains what data we collect when you visit bambibucket.party, how it is used, and your rights. We comply with the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law (KVKK).

1. Data we collect

1.1 Collected automatically

• IP address — kept in server access logs temporarily (up to 30 days) for abuse detection and service health.
• Browser/device information — standard HTTP headers such as User-Agent and screen resolution.
• Session information — anonymous session ID for the WebSocket connection (cleared when the browser tab closes).

1.2 Provided by you

• Nickname — the alias you choose to enter the game. Stored only in server memory for the duration of your session; never persisted.

1.3 Ads and analytics (third-party)

• Google AdSense uses cookies for personalized ad serving. Details in §4.

2. How we use data

• To operate the game and resolve technical issues
• To detect abuse, cheating, and denial-of-service attempts
• For statistical and aggregate analysis (how many people played, peak hours)
• To meet legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes (except where legally required).

3. Third-party services

Bomb Rain relies on the following third-party infrastructure:

• Fly.io (server hosting) — has access to IP addresses and standard HTTP logs. Privacy policy
• Supabase (database and storage) — stores plane model records. Privacy policy
• Google AdSense (advertising) — personalized ads via cookies. Google privacy policy
• Cloudflare (DNS) — DNS lookup traffic. Privacy policy

4. Cookies and advertising

This site uses only essential cookies and the third-party cookies listed below.

4.1 Google AdSense disclosure

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this and/or other sites on the Internet.

Users may opt out of personalized advertising by visiting Ads Settings. Alternatively, users can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.

5. Children's privacy

Bomb Rain is not directed at children under 13. If we become aware that a child under 13 has provided personal data, we will delete it promptly. Parents may contact us with concerns.

6. Your rights (GDPR / KVKK)

Under applicable law you have the right to:

• Know what data is processed about you
• Request access to your data
• Request correction of inaccurate data
• Request deletion ("right to be forgotten")
• Object to processing
• Data portability

Send requests to the contact address in §9. We respond within 30 days.

7. Data retention

• Access logs: 30 days
• Game session data: only during the session (RAM, not persisted)
• Nicknames: only during the session

8. Security

All traffic is encrypted with HTTPS/WSS (TLS 1.3). Server logs and database access are restricted. No system is 100% secure; we take reasonable measures.

9. Contact

For privacy questions, GDPR/KVKK requests, or concerns:
Email: bambibucketparty@gmail.com

10. Changes

This policy may be updated. Material changes will be announced on the site and the "Last updated" date above will be revised.