Boombaland Privacy Policy

Effective date: 21 October 2026 Last updated: 2 November 2026

Boombaland is a bomb-blasting arcade game for iPhone, iPad and Android. This policy explains what information the game uses, why, who else sees it, and what you can do about it. We have tried to write it so that a parent and an older child can read it together.

The short version

• You do not need an account to play. We do not ask for your email, your phone number or your address. The game asks for your date of birth once, and it stays on your device (see The age question in section 4).
• Signing in is optional. You never have to sign in to play, and the game works fully without it. On its own, the game keeps a copy of every save slot (settings, progress, wallet and achievements, in the game's own encrypted format; never your date of birth) in your own cloud account: in iCloud on iPhone and iPad, when iCloud is on for the game, and in Google Play Games Saved Games on Android, when you are signed in to Google Play Games. That copy lets you carry on after reinstalling the game, or on a second device with the same account. Signing in under Settings › Account › Cloud save across devices (Sign in with Apple on iPhone and iPad, Google Play Games on Android) only adds cloud save across devices: a copy of your save, and a link to the account you signed in with, at Unity, so the same save can follow you to your other devices of the same kind. It is used for nothing else; Restore Purchases uses your App Store or Google Play account, not this sign-in (sections 2.5 and 2.8).
• Your progress is saved on your device, and can be copied to your own cloud. Your levels, coins, gems, settings and the player name you choose are saved in files on your phone or tablet. The game also keeps a copy in your iCloud (iPhone and iPad, when iCloud is on for the game) or your Google Play Games account (Android, when you are signed in to Google Play Games), so you get it back on a new device. If you turn on Cloud save across devices, a copy is also kept by Unity (section 2.8). We do not have a server of our own.
• The first time you play, the game asks when you were born (your date of birth, kept on your device). Players under 13, and players under 16 in Europe, get only non-personalised ads and are never asked to be tracked; every player's ads are suitable for all ages (section 4).
• The game can show video ads, but only if you choose to watch one. These "rewarded" ads give you something in the game, like energy. They come from Google AdMob. The game loads ads in advance each time it starts (unless you bought No Ads), so Google receives some technical information from your device to load and show ads, count them and stop fraud, even if you never watch one.
• Purchases are handled by Apple (App Store) or Google (Google Play). We never see your card details. The game keeps the store's transaction numbers so a purchase is delivered exactly once (section 2.5).
• You can delete your data in the game (Settings › Account › Delete my data), and the cloud copies also in your Apple or Google account settings (section 7.1).
• On iPhone and iPad, Game Center (Apple) can sign you in and record your achievements.
• We do not sell your information.

1. Who we are

Boombaland is made by DataSight (Tom de Bruijn) ("we", "us"), Tulameenpad 10, 1461 HN Zuidoostbeemster, the Netherlands. Chamber of Commerce (KvK) number 93353413, VAT (BTW) number NL005019445B05.

• Our contact details are in section 10.
• For the data the game itself handles, we are the "controller" under the EU General Data Protection Regulation (GDPR).
• Google, Apple and Unity are responsible for the data they collect under their own privacy policies (section 5).

2. What information is involved, and why

2.1 Information that stays on your device

The game saves these files in its own private storage on your device. They are not sent to us.

Tip for parents: the player name is only shown inside the game, on your own devices. It is not shared with other players, because Boombaland has no online play. Still, we suggest a nickname rather than a real name.

Your device's own backup (for example iCloud Backup or Android backup) may copy these files, as it does for most apps. On Android, the game asks Android's backup to copy your settings, progress, wallet and achievements files (in the game's own encrypted format) to your own Google account, so they come back on a new phone; your date of birth (age.json) is not included. The game also copies your save to your own cloud account itself (section 2.8). Nothing goes to us.

2.2 Rewarded ads (Google AdMob)

Each time the game starts, once you have answered the age question (section 4) and the questions in section 2.3, the game starts the Google Mobile Ads SDK and loads ads in advance, so one is ready when it can be offered. You choose whether to watch one, but the SDK receives the information below while it loads ads, even if you never watch one. If you have bought No Ads, the game never starts the ad SDK.

To show an ad, Google's SDK may collect and process, from your device:

• your device's IP address (which can show your rough location, such as your country or city);
• device and app information (device model, operating system, language, app version);
• identifiers: on Android, the Advertising ID; on iOS, the identifier for vendors (IDFV). On iOS the IDFA (Apple's advertising identifier) is available to the ad SDK only if you allow tracking in Apple's prompt (section 2.3); if you do not, it is not;
• ad interaction data (whether an ad loaded, was shown, was tapped or was watched to the end);
• diagnostic data about the ad SDK.

Why: to show the ad, give you your reward, measure that the ad was shown, prevent fraud, and keep the service working.

Personalised ads, consent and children. No ad is loaded before you have answered the age question (section 4). For players aged 16 and over in the European Economic Area, the United Kingdom and Switzerland, the game asks for your consent before Google may use your information for personalised ads, using Google's consent tool. If you do not consent, you may still see non-personalised ads. You can change your choice at any time in Settings › About › Privacy choices. Players under 16 there never see that form: the game tells Google they are under the age of consent and asks for non-personalised ads only. For players under 13, anywhere, the game never shows that form: it asks Google to treat every ad request as child-directed and asks for non-personalised ads only. For every player, ads are limited to content suitable for everyone ("G").

2.3 Tracking and personalised ads (App Tracking Transparency, and consent in Europe)

We only track you if you say yes. Before the game loads its first ad (which can be soon after you start the game, once you have answered the age question), it asks:

1. In the European Economic Area, the United Kingdom and Switzerland: Google's consent form first (section 2.2).
2. On iPhone and iPad (iOS 14.5 and later): then Apple's "Allow Boombaland to track your activity across other companies' apps and websites?" prompt. It explains: "Allow tracking so the ads you see can match your interests. Saying no still shows ads, just less personal ones." Apple shows it only once.

No ad is requested before you have answered both. Ads are personalised (chosen using information about you, such as the IDFA on iPhone) only when you said yes to every question that applies to you: "Allow" in Apple's prompt on iPhone and iPad, and consent to personalised ads in Google's form where it is shown. Otherwise every ad request asks Google for non-personalised ads, and on iPhone and iPad the IDFA is not available to the ad SDK (Apple hides it). The game itself never reads the IDFA.

You can change your mind at any time, and the next ad follows your new choice: on iPhone and iPad in iOS Settings › Privacy & Security › Tracking, and in Europe and the US states with privacy laws in Settings › About › Privacy choices.

Players under 13 are never tracked: they never see Apple's tracking prompt or Google's consent form, and their ads are child-directed and non-personalised (section 4). Players aged 13 to 15 in Europe are never tracked either: they see neither question and get non-personalised ads. The two questions above are for everyone else.

2.4 Game Center (iPhone and iPad)

At launch, the game asks Apple's Game Center to sign you in. If you are signed in:

• the game reads your Game Center nickname (alias) on your device, only to suggest it as your player name. You can change it or skip it. The suggestion is not sent to us;
• the game reports your achievements to Game Center.

Game Center is run by Apple under Apple's privacy policy. You can sign out in your device's Settings › Game Center.

Android: the game can sign you in to Google Play Games, to keep a copy of your save in your Play Games account (section 2.8). Google Play Games is run by Google under Google's privacy policy.

2.5 Purchases

Boombaland sells in-game purchases on both platforms: on Android through Google Play Billing (Google), and on iPhone and iPad through the App Store (Apple). The store takes your payment and handles your store account. We never receive your payment card or bank details, or your Apple or Google account details.

For each purchase, the store sends the game a purchase receipt with a transaction number (on Google Play, the receipt also carries Google's purchase token). The game checks the purchase has a receipt and has not been delivered before, gives you what you bought, and tells the store it was delivered. What we keep, and why:

• On your device (economy.json, section 2.1): the store's transaction number of each purchase and what it gave you (the item, or the coins, gems or energy), so a purchase is never given twice, a purchase that was interrupted is still delivered, and your wallet is correct. The receipt and the token themselves are not saved.
• In the Unity copy of your save, only if you turn on Cloud save across devices (section 2.8): the same wallet, with those transaction numbers, so your purchases are counted correctly on your other devices.

Permanent items such as No Ads and Unlimited Energy come back with Settings › Account › Restore Purchases, which asks the store what your Apple or Google account owns. Coins, gems and energy are used up when they are delivered and cannot be restored.

The game talks to the store through Unity In-App Purchasing (Unity Technologies), which also starts Unity's services. Unity's own disclosures say its purchasing service may process technical information such as device identifiers, a rough location from the IP address, purchase history and diagnostics, under Unity's privacy policy (section 5); we do not receive it. Apple and Google keep their own records of your purchases (section 6).

2.6 Diagnostic and technical data

• We have not added any analytics or crash-reporting service of our own, and we do not receive crash reports.
• The game is built with the Unity engine. Unity's hardware statistics and engine diagnostics are switched off in the project, and a phone build fails if either is switched back on.
• Google's ad SDK collects diagnostic data about itself (section 2.2).

To keep daily rewards fair, the game asks our website (hosted by GitHub) for the current time when it starts. Like any web request this sends your device's IP address to GitHub. Nothing else is sent, and we do not keep it.

2.7 What we do NOT collect

We do not collect your name, email address, phone number, postal address, photos, contacts, microphone, camera, precise location, health data, or messages. There is no chat and no online play with other players.

2.8 Cloud saves

Your own iCloud or Google Play Games account. On iPhone and iPad, when iCloud is on for the game, the game keeps a copy of every save slot (settings, progress, wallet and achievements, in the game's own encrypted format; never your date of birth) in your iCloud account. On Android, when you are signed in to Google Play Games, it keeps the same copy in Google Play Games Saved Games. This lets you carry on after reinstalling the game, or on a second device with the same account. The copy is stored by Apple or Google under their privacy policies; we do not receive it.

Cloud save across devices (Unity). This is optional. You do not need it to play, the game works fully without it, and the copy in your own iCloud or Google Play Games account above does not depend on this sign-in. The sign-in here is used only for this feature; Restore Purchases uses your App Store or Google Play account instead (section 2.5). To keep the same save on your other devices, you can open Settings › Account › Cloud save across devices and sign in with the account your device already has: Sign in with Apple on iPhone and iPad, Google Play Games on Android. Sign in the same way on each device. This shares a save between devices of the same kind (iPhone and iPad with each other, Android devices with each other), not between an iPhone and an Android device. Then a copy of your save (progress, wallet with the store transaction numbers of your purchases, settings, achievements and save slots; never your date of birth) and a link to the account you signed in with are stored by Unity Technologies (Unity Gaming Services). Sign in with Apple gives the game no name and no email address; Google Play Games gives Unity a one-time code for your Play Games account. The game does not ask for an email address.

Each time the game starts, it signs in to Unity anonymously (for players under 13, only with a parent's permission: section 4): Unity creates a random player ID and Unity's software receives technical information about your device and session, including your IP address (which can show your rough location). No save data is sent to Unity until you sign in.

Delete my data (Settings › Account) deletes the save you are playing from your device and from these cloud copies. When it deletes all your data (no other save left), it also deletes the Unity copy and your Unity player account.

3. Legal bases (GDPR)

4. Children

Boombaland is designed to be fun and safe for players of all ages, including children.

• We do not knowingly collect personal information from children, and we do not ask for any.
• The game has no chat, no online play and no way to share content with other players.
• A child's progress and player name stay on the device, and in the family's own iCloud or Google Play Games account when that is on (section 2.8).
• Cloud save across devices (Unity) for players under 13. For a player who said they are under 13, the game does not sign in to Unity and does not use Unity Cloud Save unless a parent gives permission through the parent check in the game. Without that permission it stays off; it can be turned on later in Settings › Account › Cloud save across devices. The copy in the player's own iCloud or Google Play Games account (section 2.8) is not affected.
• Purchases are protected by the parental controls of Apple (Ask to Buy, Screen Time) and Google (Family Link, purchase authentication). Please use them.
• The age question. The first time the game starts (and again after Delete my data), before any ad, consent form or tracking prompt, it asks "What is your date of birth?" with a list each for the year, the month and the day. Nothing is chosen in advance and nothing says what an answer changes. Only the date of birth is kept, in a file on the device; it is never sent to us or to anyone else, and Settings › Account › Delete my data erases it. The game uses it only to work out the player's age from the device's date, which decides how ads are shown (below). A player who answered an earlier version that asked only for the year is treated as born on 31 December of that year, and is not asked again.
• Players under 13 never see Apple's tracking prompt or Google's consent form. Every ad request for them is child-directed (Google's child treatment) and non-personalised. The game never reads the advertising identifier, and it has no analytics of its own.
• Players aged 13 to 15 in the European Economic Area, the United Kingdom and Switzerland are under the digital age of consent (16 in the Netherlands): they never see Apple's tracking prompt or Google's consent form, every ad request tells Google they are under the age of consent, and their ads are non-personalised. If we cannot tell whether a player is in that area, we treat them as if they were.
• Players 13 to 15 elsewhere, and players 16 and over, choose for themselves whether ads may be personalised (section 2.3).
• Every player's ads are limited to content suitable for all ages ("G").

Who Boombaland is for. Boombaland is for a general audience, children included; it is not made only for children and is not in Apple's Kids category.

United States (COPPA). For players who say they are under 13, we do not collect personal information except what is necessary to show non-personalised, contextual ads, which is permitted under COPPA's "support for internal operations" exception, and we tell Google to treat those requests as child-directed. The game does not sign them in to Unity or use Unity Cloud Save unless a parent gives permission in the game (section 2.8).

EU (GDPR Article 8). In the Netherlands, a child under 16 needs a parent's consent before an online service may rely on consent to process their data. We therefore never ask a player under 16 in the EEA, the UK or Switzerland for consent: they are never tracked and never shown personalised ads, and Google is told they are under the age of consent.

Parents: you can delete your child's data at any time in the game (Settings › Account › Delete my data; section 7.1). Our contact details are in section 10.

5. Who else receives information

We do not sell personal information, and we do not share it for money.

International transfers. Google, Apple and Unity may process data outside the EEA, including in the United States. They rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

6. How long information is kept

• On your device: until you delete it in the game (Settings › Account › Delete my data) or delete the game. Either removes the game's files from your device.
• Google (ads): under Google's retention policy. See https://policies.google.com/technologies/retention.
• Apple / Google (purchases): as their policies and tax law require.
• Your cloud copies: in your iCloud or Google Play Games account until you delete them (Settings › Account › Delete my data) or delete them in your Apple or Google account settings. Unity: until you delete your data in the game, which also deletes your Unity player account. An anonymous Unity player that was never linked is kept under Unity's retention policy (https://unity.com/legal/game-player-and-app-user-privacy-policy).
• We keep no player data of our own; the Unity copy above is kept by Unity for the game. A deletion request sent to us (section 7.1) is kept as long as we need it to handle the request, and at most 2 years.

7. Your rights

Under the GDPR you have the right to access, correct, delete and port your data, to object to processing, to restrict it, and to withdraw consent at any time. Because the game's data stays on your device and in the cloud copies you turn on, you control it directly:

• Delete it: Settings › Account › Delete my data deletes your progress, settings, coins and gems from your device and starts the game over. Coins and gems you bought are lost too; permanent purchases (No Ads, Unlimited Energy) can be restored with Settings › Account › Restore Purchases. It also deletes the copies in your iCloud or Google Play Games account and at Unity, and your Unity player account (section 2.8). While you have more than one save, it deletes the save you are playing; delete each save to delete everything. Uninstalling Boombaland deletes everything on the device, but not your cloud copies. (section 7.1 says how to delete those).
• Withdraw ad consent or opt out of ad data sharing: Settings › About › Privacy choices (shown where Google's consent tool applies: the EEA, the UK, Switzerland and US states with privacy laws).
• Google's data: see Google's controls at https://myadcenter.google.com and on Android, Settings › Google › Ads (reset or delete your Advertising ID).
• Anything else: use the contact details in section 10. We answer within one month.

You also have the right to complain to a data-protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl). You can also complain to the authority where you live.

California and other US states. We do not sell personal information. Google may use information from your device for personalised ads, which some US state laws call "sharing": on iPhone and iPad only if you allow tracking (section 2.3), and on Android unless you turn it off. You can stop it at any time: on iPhone and iPad in iOS Settings › Privacy & Security › Tracking, and on Android by deleting your advertising ID in Settings › Google › Ads. The next ad is then non-personalised. Players under 13 are never tracked.

7.1 Delete your account and data

In the game: open Settings › Account › Delete my data, then confirm twice. While you have more than one save, this deletes the save you are playing; delete each save to delete everything. When no save is left, it deletes:

• on your device: your progress, settings, wallet (coins, gems, energy and the transaction numbers of your purchases), achievements, player name and date of birth;
• your cloud copy in your iCloud (iPhone and iPad) or Google Play Games Saved Games (Android);
• at Unity: the Unity Cloud Save copy of your save and your Unity player account (the player ID and its link to the Apple ID or Google Play Games account you signed in with).

The device needs an internet connection for the cloud copies. If the Unity copy cannot be deleted at that moment, it stays with Unity until you sign in again in the game and delete your data again.

In your Apple or Google account: delete the game's iCloud data in iOS Settings › [your name] › iCloud, and stop using your Apple ID with the game in iOS Settings › [your name] › Sign in with Apple; on Android, delete the game's Play Games data in the Google Play Games settings. Uninstalling the game removes its files from the device.

If you no longer have the game: reinstall it, sign in with the same Apple or Google account and use Delete my data. Google Play also requires a way to ask without the game: send "Delete my data" to support@boombaland.com and we delete the Unity copy and Unity player we can identify from what you tell us, within 30 days. We have no access to your device, your iCloud or your Google account.

What is kept, and why:

• Purchase records held by Apple and Google. The stores keep their own record of what you bought, under their policies and tax law; we cannot delete them. That record is also what lets Restore Purchases give back permanent items such as No Ads. Coins and gems you bought are lost when your data is deleted.
• Your Apple ID and your Google account are Apple's and Google's, not ours; deleting your data deletes the game's player and save, not those accounts.
• Google's advertising data is kept under Google's policy (section 6); see https://myadcenter.google.com.
• A deletion request sent to us is kept as long as we need it to handle it, and at most 2 years (section 6).

8. Security

The game's files live in the app's private storage on your device, protected by your device's security. Connections to Google, Apple and Unity are encrypted (HTTPS).

9. Changes to this policy

If we change this policy, we will update the "Last updated" date above and post the new version at https://www.boombaland.com/privacy/. If a change is important, we will also tell you in the game.

10. Contact

DataSight (Tom de Bruijn), Tulameenpad 10, 1461 HN Zuidoostbeemster, the Netherlands, support@boombaland.com