Privacy Policy

Last updated: 25 October 2026

This Privacy Policy explains how Bopalu ("we", "us") handles information when you play our games (the "Games") or visit bopalu.com (the "Website"). We keep data collection to the minimum needed to run, improve and fund our Games.

Who we are

Bopalu is an independent game studio based in Malta and is the data controller for the information described here. You can contact us at support@bopalu.com. Further trader details are shown on our App Store product pages.

Information we collect

Information we don't collect

Our Games don't require an account, and we don't ask for your name, address, phone number or contacts.

Purchases

In-app purchases are processed entirely by Apple. We never see or store your payment card details. Apple tells us that a purchase was made so we can unlock content, and provides us with aggregated sales reports. Apple's handling of your data is covered by Apple's Privacy Policy.

Advertising

Some Games show ads, for example through Google AdMob. Ad providers may collect device information such as an advertising identifier, IP address, device model, operating system and ad interactions in order to show, measure and limit ads and to prevent fraud.

• We only allow personalised ads where you have agreed. On iOS, we ask for permission through Apple's App Tracking Transparency prompt, and, where required (for example in the EEA, UK and Switzerland), through a consent message.
• If you decline, you may still see non-personalised ads, which rely on limited data such as general location and the content of the app.
• You can change your choice at any time in your device's Settings or in the Game's settings.

See how Google uses information from apps that use its services.

Analytics and crash reports

We use analytics and crash-reporting services (for example Google Firebase Analytics and Crashlytics) to understand how the Games are played and to fix problems. This may include device and app information, approximate location derived from IP address, in-game events (such as levels started and completed), app version, and crash diagnostics. This data is not used to identify you personally.

Support emails

If you contact us, we receive your email address and whatever you include in your message. We use this only to help you.

The Website

The Website doesn't use cookies or tracking scripts. Our hosting provider, Cloudflare, processes technical data such as IP addresses to deliver and protect the site.

Why we use your information (legal bases)

• To provide the Games and deliver purchases — performance of our contract with you.
• Analytics, crash reporting, security and fraud prevention — our legitimate interest in running, fixing and improving the Games.
• Personalised advertising — your consent, which you can withdraw at any time.
• Non-personalised advertising — our legitimate interest in funding free Games.
• Answering support requests — our legitimate interest in helping players.
• Meeting legal obligations — for example tax and accounting records.

Who we share information with

We don't sell your personal information. We share it only with service providers who help us run the Games, such as Apple (purchases and distribution), Google (advertising, analytics and crash reporting) and Cloudflare (website hosting), and where the law requires it.

International transfers

Some of our providers process data outside the European Economic Area, including in the United States. Where this happens, transfers rely on safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep information

Analytics and crash data are kept for up to 14 months. Support emails are kept for up to 24 months after the conversation ends. Advertising providers retain data under their own policies. Records we're legally required to keep are retained for the required period.

Children

Our Games are designed for a general audience and are not directed at children under 13. We don't knowingly collect personal information from children under 13 (or the equivalent minimum age in your country). If you believe a child has provided us with personal information, please contact us and we'll delete it.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its use, and to withdraw consent. To exercise these rights, email support@bopalu.com. We'll respond within one month.

If you're in the EU, you can also complain to a data protection authority. In Malta, this is the Information and Data Protection Commissioner.

Security

We use reasonable technical and organisational measures to protect information, including encrypted connections and access controls at our service providers.

Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above and, for significant changes, let you know in the Games.

Contact

Questions about privacy? Email support@bopalu.com.