Privacy Policy
Last updated 15 November 2026
The short version. You can play the Adventure and local Wi-Fi battles without an online account. If you go online, we store your player name, a device identifier, your friends, chat messages, stats and the items you own, and we use them only to run the game. Ads are shown by Google AdMob, and you choose whether they may be personalised. Payments go through Apple or Google; we never see your card details. You can delete your online account in the game at any time.
1. Who we are
Kaboom Crew (the "game") is made and run by Lea Isabel Fröhlich, an individual developer based in Spain ("we", "us"). We are the controller of the personal data described here. Contact: leaisabelfroehlich@gmail.com.
2. What we collect and why
Playing offline
Adventure progress, settings, your chosen bomber and similar preferences are saved only on your device. We don't receive them. Local Wi-Fi battles connect devices on the same network directly, and that data never reaches our servers.
Your online account
When you go online for the first time you choose a player name, and the game creates an account linked to your device.
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Player name | Shown to other players in matches, friends lists, chat and the leaderboard | Contract (providing the online game) |
| Device identifier (the identifier your phone gives this app, or a random one the game makes) and a sign-in token | To sign you back in to your account without a password | Contract |
| Friends, friend requests, parties and blocked players | Social features you choose to use | Contract |
| Chat messages | Delivering world, party and friend chat. We keep the last 40 messages of each world or friend conversation. Party chat isn't stored. | Contract |
| Match results, wins, games played | Your stats and the wins leaderboard | Contract |
| Gems, items you own, your bomber's look | Your shop wallet and how you appear to others | Contract |
| In-game purchase records (store transaction id, product, gems credited, date) | Crediting your gems and stopping the same purchase being used twice | Contract; legal obligations (accounting) |
| Reports and moderation data (who reported whom, the reason, and the reported player's recent chat messages) | Keeping the game safe and acting on abuse | Legitimate interest (a safe community) |
| Your IP address and technical connection data | Connecting your device to the game server, security and troubleshooting. We don't store IP addresses in our game database; our hosting provider may keep them in short-term technical logs. | Legitimate interest (running a secure service) |
We don't ask for your real name, email, phone number, contacts, location or photos, and we don't sell your data.
Purchases
Gems are bought through the Apple App Store or Google Play. Apple or Google handles the payment and your payment details; we only receive a signed proof of purchase that we check before crediting your gems. The one-time No Ads purchase never reaches our server: the game asks the store whether you own it and remembers that on your device. Their privacy policies apply to the payment: Apple, Google.
Advertising
The free game shows full-screen ads in the Adventure, served by Google AdMob (Google Ireland Limited). AdMob collects information such as your device's advertising identifier, IP address, device and app information and how you interact with ads, to show, limit and measure ads and to prevent fraud. Once you've bought No Ads, the game no longer starts AdMob, so none of this happens.
- In the EEA, the UK and Switzerland, a consent screen (Google's consent tool) asks before ads may be personalised. Without consent you still see ads, but they aren't personalised. You can change your choice at any time under Settings → Ad choices in the game.
- On iPhone and iPad, iOS asks for permission before the advertising identifier can be used for tracking. You can change this in iOS Settings → Privacy & Security → Tracking.
- On Android you can reset or delete your advertising ID in your device settings.
Legal basis: your consent for personalised ads; our legitimate interest (funding a free game) for non-personalised ads. More: how Google uses data from apps that use its services.
3. Who else processes your data
- OVH SAS (France) hosts our game server and database in the European Union.
- Google (AdMob ads; Google Play purchases and verification) and Apple (App Store purchases and verification).
- Cloudflare serves this website.
- Other players see your player name, your bomber's look, your stats on the leaderboard and the chat messages you send.
Some of these companies may process data outside the European Economic Area. Where they do, the transfer is protected by the EU Commission's adequacy decision for the EU-U.S. Data Privacy Framework or by standard contractual clauses.
4. How long we keep data
- Your online account and everything linked to it: until you delete the account, or until we close it for serious or repeated breaches of the Terms.
- Chat: only the last 40 messages per world or friend conversation; older messages are deleted automatically.
- Reports: until they've been handled, and at most 12 months.
- Purchase records: the store transaction id is kept after you delete your account so the same purchase can't be used again, but it's no longer linked to you. Records we must keep by law are kept for the legally required period.
5. Deleting your account
Open Settings → Account → Delete account in the game. Your account is deleted immediately along with your friends, chat messages, stats, gems and items. See Delete account for details and what to do if you no longer have the game installed.
6. Your rights
Under the GDPR you have the right to access your data, to correct it, to have it erased, to restrict or object to processing, to data portability, and to withdraw consent at any time (this doesn't affect processing that has already happened). To use these rights, email leaisabelfroehlich@gmail.com with your player name. We answer within one month.
You can also complain to a data protection authority. In Spain that is the Agencia Española de Protección de Datos (AEPD). You can also contact the authority where you live.
7. Children
Kaboom Crew isn't directed at children under 13, and online features aren't intended for them. In Spain, players under 14 (or under the age your country sets for digital consent) need a parent's or guardian's consent to use the online features. If you believe a child has created an account without that consent, email us and we'll delete it.
8. Security
Connections between the game and our server are encrypted (HTTPS/TLS). Sign-in tokens are stored on the server only as one-way hashes. Access to the server is restricted to the operator.
9. Changes
If this policy changes, we'll update the date at the top and, for important changes, tell you in the game.