Privacy Policy

1. Introduction

Welcome to BoGaMo ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we handle data. This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Important: BoGaMo is designed to collect minimal personal information. We do not require user accounts, do not track users across the web, and do not sell or share data with third parties.

2. Data Controller Information

• Service Provider: bogamo.me
• Contact Email: privacy@bogamo.me
• Website: bogamo.me

For privacy-related inquiries, please contact us at: privacy@bogamo.me

3. What Data We Collect

3.1 Information You Provide

When you use BoGaMo, you directly provide:

• Player Nickname: A display name you choose when creating or joining a game (not required to be your real name)
• Transaction Amounts: The amounts you enter when paying, receiving, or transferring money
• Target Player Selection: When transferring money, you select which player receives it

3.2 Information We Generate

BoGaMo automatically generates:

• Game Code: A randomly generated 5-character code for your game session
• Player ID: A unique identifier assigned to you when you join a game
• Game ID: A unique identifier for each game session
• Transaction Records: Logs of in-game financial transactions and balance changes
• Transaction Descriptions: Automatic descriptions like "[Player] paid Bank 500"
• Timestamps: When games, players, and transactions are created

3.3 Automatically Collected Data

• Browser Session Data: Your browser stores your game session information locally using localStorage. This data remains on your device.
• Technical Data: Our hosting provider may collect standard server logs including IP addresses for security and performance.

3.4 Data We Do NOT Collect

We do NOT collect:

• Email addresses
• Real names (unless used as nickname)
• Phone numbers
• Payment information
• Location data (beyond derived from IP)
• Tracking cookies or analytics data
• Social media information
• Device identifiers

4. How We Use Your Data

4.1 Legal Basis for Processing (GDPR)

• Contract Performance (Art. 6(1)(b) GDPR): To provide the game functionality you've requested
• Legitimate Interest (Art. 6(1)(f) GDPR): To maintain security, prevent abuse, and ensure service stability

4.2 Purposes

We use collected data to:

• Enable multiplayer game sessions
• Display player balances and transaction history
• Maintain game state synchronization
• Prevent fraud and abuse

5. Data Storage and Security

5.1 Where Data is Stored

• Database: Neon (serverless Postgres) servers located in AWS Europe Central 1 (Frankfurt, Germany)
• Hosting: Vercel's infrastructure
• Local Storage: Your browser stores session information locally

All data is stored within the European Union.

5.2 Data Retention

• Active Games: Retained while active.
• Automatic Deletion: Deleted 48 hours after last activity (no new players AND no new transactions).
• Manual Deletion: Host can delete immediately.

6. Data Sharing and Third Parties

We use the following third-party services:

1. Neon (Database Hosting): Data storage (AWS Frankfurt). Privacy Policy
2. Vercel (Web Hosting): App hosting. Privacy Policy

We do NOT share, sell, or rent your data to advertisers, marketing companies, or data brokers.

7. Cookies and Tracking

BoGaMo uses minimal cookies (Next.js essential session cookies). We do NOT use advertising, analytics, or third-party tracking cookies.

We use browser localStorage to store your game session ID, which remains on your device.

8. Your Privacy Rights (GDPR)

You have the right to:

• Access: Export your data via the "Export Data" button.
• Rectification: Change nickname by re-joining.
• Erasure: Host can delete game immediately, or wait 48h for auto-deletion.
• Portability: Download JSON export.
• Lodge a Complaint: With your local data protection authority.

9. Children's Privacy

We do not knowingly collect data from children under 16 without parental consent. If discovered, we will delete it.

10. International Data Transfers

Data is stored in the EU (Frankfurt). Access from outside the EU crosses borders. We rely on Standard Contractual Clauses (SCCs) where applicable.

11. Changes to This Policy

We may update this policy. Continued use constitutes acceptance.

12. Contact Us

• Email: privacy@bogamo.me
• Website: bogamo.me