Privacy Policy

Last updated:

This is a starting template; have it reviewed by a lawyer before launch.

This Privacy Policy explains how 4bqb, operated by [Your Company / Jurisdiction] (“4bqb”, “we”, “us”), collects, uses, and shares personal data when you use our browser-based co-op party games platform (the “Service”), and the rights you have over your data. For the purposes of the EU/UK General Data Protection Regulation (“GDPR”), 4bqb is the data controller of the personal data described here.

1.Data We Collect

We collect only what we need to run the Service, keep it fair, and bill subscriptions. Specifically:

Account and profile data

• Email address — used to sign you in (via email magic-link) and to send account and billing notices.
• OAuth profile — if you sign in with Google or Discord, we receive basic profile information such as your name and avatar and a provider account identifier. We do not receive your Google or Discord password.

Gameplay and session data

• Your display name, chosen cosmetics, the lobbies and games you join, and in-session activity needed to run real-time multiplayer (for example, your inputs and game state).
• Basic technical and session information, such as connection events and timestamps, used to operate and debug the Service.

Anti-fraud and free-tier data

• Salted hashes of your IP address and device fingerprint. To enforce free-tier limits and to detect abuse (such as evading limits or bans with multiple accounts), we compute a one-way, salted hash of your IP address and a device fingerprint. We do not store your raw IP address for this purpose; we keep only the irreversible hash.

Billing data

• When you subscribe to 4bqb Pro, payment is processed by Paddle as our merchant of record (see Section 4). We do not receive or store your full card number. We receive limited information from Paddle such as your subscription status, plan, renewal date, and the country/tax region used for the sale.

2.How We Use Your Data

• To provide, operate, and maintain the Service, including matchmaking and real-time gameplay;
• To create and secure your account and authenticate your sign-ins;
• To enforce free-tier limits, prevent fraud and abuse, and keep gameplay fair (using the salted IP/device hashes);
• To process 4bqb Pro subscriptions and send related billing and account communications;
• To respond to support requests at support@4bqb.com;
• To debug, improve, and secure the Service; and
• To comply with legal obligations and enforce our Terms of Service.

3.Legal Bases for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service you request, manage your account, and deliver and bill 4bqb Pro.
• Legitimate interests — to keep the Service secure and fair, prevent fraud and abuse, enforce free-tier limits (via salted IP/device hashes), and improve the Service. We balance these interests against your rights and freedoms.
• Consent — where required, for example for any non-essential cookies. You can withdraw consent at any time.
• Legal obligation — where we must process data to comply with the law (for example, tax and accounting records held by our payment processor).

4.Processors and Sub-processors

We share personal data with a limited set of service providers who process it on our behalf or as independent controllers for clearly defined purposes:

Because Paddle acts as the merchant of record, it is the seller for your subscription and is an independent controller of the payment data it collects; its handling of that data is governed by Paddle’s Privacy Policy. We do not sell your personal data.

5.Data Retention

We keep personal data only as long as needed for the purposes described here:

• Account and profile data — for as long as your account is active. When you delete your account, we delete or anonymize this data within a reasonable period, except where we must retain it by law.
• Gameplay/session data — for a limited period needed to operate and debug the Service, after which it is deleted or aggregated.
• Salted IP/device hashes — kept only as long as necessary to enforce free-tier limits and prevent abuse, then deleted.
• Billing records — Paddle retains transaction and tax records for the period required by applicable financial and tax law.

6.Your Rights

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — delete your account and associated personal data at any time using the “Delete account” button in your account settings, or by emailing us. This is your “right to be forgotten” / right to erasure.
• Portability — receive certain data you provided in a structured, commonly used, machine-readable format.
• Objection and restriction — object to, or ask us to restrict, processing based on our legitimate interests.
• Withdraw consent — where we rely on consent, withdraw it at any time.

GDPR (EU/UK): you may exercise the rights above and have the right to lodge a complaint with your local data protection authority. CCPA/CPRA (California): you have the right to know what personal information we collect, to request deletion, and to opt out of the “sale” or “sharing” of personal information — note that we do not sell or share your personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

To make a request, use the in-app “Delete account” button or contact us at support@4bqb.com. We may need to verify your identity before acting on a request.

7.Cookies

We use a small number of cookies, all of which are strictly necessary to run the Service. We do not use advertising or cross-site tracking cookies.

Because these cookies are essential to provide the Service you request, they do not require consent under most laws. You can block or delete cookies in your browser, but the Service may not function correctly without them.

8.Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us at support@4bqb.com and we will delete it.

9.International Data Transfers

We and our providers may process and store personal data in countries other than the one in which you live, including outside the European Economic Area. Where we transfer personal data across borders, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses or an adequacy decision — to protect your data in line with this policy and applicable law.

10.Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, hashing of sensitive anti-fraud identifiers, access controls, and delegating card processing to Paddle so that we never handle full card numbers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11.Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12.Contact and Data Requests

For privacy questions or to make a data request, contact us at support@4bqb.com. The data controller is [Your Company / Jurisdiction].