Privacy Policy

Balloon Clash (“the app”) is a multiplayer game published by Rubilion LLC (“we”, “us”). This policy explains what data the app collects, why, and what you can do about it.

An account is required

Balloon Clash is an online game and it needs an account. The first time you open the app you are asked to sign in or to create one, and the game cannot be played without it. Creating an account needs a username, a display name and a password; we do not ask for an email address or a phone number.

What we collect

Account data. To play online you create an account. We store your username, your display name, the date the account was created, and a one-way cryptographic hash of your password. We never store your password itself and cannot recover it.

Progress and statistics. For a signed-in account we store your lifetime experience points, from which your level and rank are calculated, and per game mode figures: how many times you played it, your best and total score, how long you played, and how many matches you won, lost or drew. Each finished run is also recorded on its own with its score, its length and the experience it earned.

Game economy data. We store your in-game coin balance, the balloons and items you own, the one-off unlocks you hold, and a ledger of every movement of a coin or a balloon with the reason for it, such as a match result, a store purchase or a referral reward.

Invites. If you use the invite feature we store your invite code, which account invited you, and any reward you have earned but not yet claimed.

Session data. Signing in places a session token on your device so that you stay signed in. A hashed copy is kept on our server until the session expires or you sign out.

Technical data. Our server receives your device’s IP address whenever the app connects, as any internet service does. We use it only to limit abusive traffic, for example repeated password guessing, and it is not used to build a profile of you.

Settings and data on your device. Your language, sound and music choices, your selected balloon skin and slingshot kit, whether you have seen the intro, a local copy of your progress and your session token are stored on your device. They are removed when you uninstall the app.

What we do not collect

• No advertising and no advertising identifiers.
• No analytics or tracking SDKs.
• No location data.
• No contacts, photos, camera, microphone or files.
• No email address or phone number.
• No payment data. The app does not currently sell anything for real money; coins are earned in-game. If real-money purchases are added later, they will be handled by Google Play and this policy will be updated.

The app requests only the INTERNET permission, which it needs to reach the game server.

Why we process this data

• To create and authenticate your account.
• To run matches and keep your progress, balance and items consistent.
• To show levels, ranks and leaderboards.
• To operate the referral rewards feature.
• To protect the service against abuse and fraud.

Where the GDPR applies, our legal basis is the performance of our contract with you (providing the game) and our legitimate interest in keeping the service secure.

What other players see

Your display name is visible to other players in lobbies, matches and results. If your score or experience places you on a leaderboard, your display name, level and that score are shown to anyone using the app, including players who are not signed in. Nothing else about your account is published. Do not use a display name that reveals personal information about you.

Sharing

We do not sell your data and we do not share it with advertisers or data brokers. Data is stored on servers we operate for the sole purpose of running the game. We may disclose data if required by law.

Retention

Account, progress and economy data is kept for as long as your account exists. Session tokens expire automatically. If you ask us to delete your account, we delete the associated data.

Your rights

You can ask us to access, correct or delete your account and its data. Write to the address below from an address we can reach you at, telling us your username; we will respond within 30 days. Uninstalling the app removes local settings and local progress but does not by itself delete your online account.

Children

The app is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Security

Passwords are hashed, session tokens are stored hashed, and traffic to the game server is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your data.

Changes

If this policy changes, the updated version will be posted at this same address with a new “last updated” date.

Contact

Rubilion LLC
10 Shevchenko St, Building 46
Yerevan 0050, Armenia
support@rubilion.com