← Back to game

Privacy Notice

Last updated: May 28, 2026

1. Who we are

This service ("Classic Bubble Blast") is operated by XtraLynk Technologies LLC("we", "us", "our"), which acts as the data controller for personal data processed through the app.

2. Data we collect

  • Account data: email address, display name, avatar, authentication credentials.
  • Gameplay data: level progress, high scores, coin balance and transactions, power-up inventory, achievements/badges, daily login streaks, daily challenge results, duel history, post-duel reactions (preset emotes only), and tournament entries.
  • Leaderboard data: your display name and scores may be shown publicly on global, tournament, and duel leaderboards.
  • Support data: messages you send to support.
  • Technical data: IP address, device/browser identifiers, usage telemetry, log data, and anti-cheat signals.
  • Local device data: sound/music preferences, background animation intensity, language, and power-up inventory cached in your browser's local storage.

3. Purposes and legal basis

  • Providing the game, your account, and gameplay features such as levels, duels, tournaments, achievements, and daily streaks (contract performance).
  • Processing coin purchases and crediting balances via our Merchant of Record (contract performance).
  • Operating public leaderboards and matchmaking for duels (contract performance).
  • Security, fraud prevention, anti-cheat, and abuse detection (legitimate interests).
  • Improving the product and analytics (legitimate interests).
  • Responding to support requests (legitimate interests / contract).
  • Complying with legal obligations (legal obligation).

4. Sharing

We share personal data only with:

  • Service providers and subprocessors (hosting, database, analytics, customer support tooling).
  • Paddle.com Market Limited, our Merchant of Record, who handles all payments, subscription management, tax compliance, invoicing, and refund processing.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law.

5. International transfers

Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain personal data only for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is deleted or anonymised when the account is closed and any required retention period has expired.

7. Your rights

Subject to your local law, you have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with your supervisory authority. We aim to respond within one month.

8. Security

We implement appropriate technical and organisational measures (encryption in transit, access controls, least-privilege) to protect personal data.

9. Cookies

We use strictly necessary cookies and similar storage for authentication and session management, plus local browser storage to remember gameplay preferences (sound, music, background animation intensity, language) and your power-up inventory. We do not use advertising cookies and we do not sell personal data.

10. Children

Guest play is available to players of all ages and does not require an account. In guest mode we do not collect personal data — progress is stored only on your own device (in your browser's local storage) and is not transmitted to our servers.

Accounts are intended for users 13 and older (or the higher minimum age required in your country). We do not knowingly collect personal data from children under 13 through accounts. If you believe a child under 13 has created an account or provided us personal data, contact us and we will delete the account and associated data.

11. Account deletion

You can request deletion of your account and associated gameplay data at any time through the in-app support channel. Some records (e.g. payment records held by our Merchant of Record) may be retained where required by law.

12. Contact

Questions about this notice or your data: contact XtraLynk Technologies LLC through the in-app support channel.