Privacy Policy

1. Who We Are

Boolip is operated by Boolip Ltd, a company registered in Israel (company no. 517350443), David Saharov 3, Rishon LeZion, Israel (“Boolip”, “we”, “us”). Boolip is a social arcade: a curated feed of quick mobile games, friend-to-friend duels, matches played live in real time, and daily leaderboards. This Policy explains what we collect, why, and your rights.

2. What We Collect

Account data.

Your email address, display name, avatar, and any profile information you provide. When you sign in with a third party (Apple or Google), we receive the basic profile fields that provider returns — typically your name, email, and avatar.

Date of birth.

We ask for your date of birth when you create an account, and before you first play live without an account (then we keep only your age group, not the date). We use it to confirm you meet our minimum age of 13 and to apply the protections required for younger teens: if you are under 18, you can share a game in a private message only with accounts you follow. We store the date on your account and never show it to other users.

If you are under 18, anyone, including people without a Boolip account and adults you do not know, can see your profile — including your username, display name and avatar, the verified mark if your account has one, any bio and link you add, your play count, your followers and the accounts you follow, the games you play most, your rank, level, crowns and duel record (you can hide your duel win rate, record and streaks when you edit your profile), the colour, style or character you wear and how many badges you have earned, the clips and duel results you post, your reposts, your open challenges, how many open challenges you have beaten and the games you like. Other players can follow you, send you a game, challenge you to a duel, mention you, and like and comment on your clips and duels, as they can with any player. You can report or block any player at any time; blocking stops a player from contacting you, but it does not make your profile private, and anyone who is not signed in can still see it.

Activity & content data.

The comments you post, the likes and saves you give, the people you follow, the messages you send to other users, and any gameplay clips you choose to record and share. With each message we also keep who sent it, who received it, the game it shares, and when it was sent and read.

Gameplay data.

Scores, play durations, completion status, duel results, and leaderboard/coliseum progress. We collect this to power leaderboards, challenges, duels, and your own statistics. We generate a random identifier on your device and send it only to Boolip’s servers with gameplay records, including when you play without an account, to understand repeat play and improve games; we do not send this identifier to PostHog or advertising partners. In the Android app — and in the iOS app, only if you allow tracking (section 4) — we also record whether the app was installed from an ad and, if it was, which campaign and ad, next to that same random identifier on Boolip’s own servers, so we can see which campaigns bring players who keep playing. That record holds campaign and ad names and identifiers only — no name, email or account — and we do not share it, or the random identifier in it, with PostHog or advertising partners.

Your profile shows anyone, including people without a Boolip account, the five games you have played most and roughly how long you have played each. You can hide them from everyone else with “Hide most played games” when you edit your profile.

Safety & moderation data.

We log reports you file and reports filed against your content or profile, along with the moderation decision and reasoning. This data is used for safety, audit, and to improve our filters.

Technical data.

IP address, user agent, device type, approximate location (country and city, derived from IP), referrer, and usage telemetry (screens viewed, games shown, opened and played, load and start-up times, crashes and memory warnings), and how smoothly games ran on your device (frame timing, no content). We use this for security, abuse prevention, and product analytics.

Search queries.

When you type into a search box (to find games and players, someone to challenge or mention, or a name in a list of followers), the app sends what you type to our servers in the address of the request. We use it to return results; we do not save it to your account or to our database. Because it travels in that address, our hosting provider (Vercel) can record it in its request logs and our crash-reporting service (Sentry) in its error reports, where Sentry’s trail of recent app activity places it next to your pseudonymous user ID once you sign in (both are listed in section 4). We keep those records only to operate search and to diagnose errors, and for no longer than the server logs in section 6. The app also keeps your last few searches on your device so you can repeat them; you can clear them under Recent on the search screen.

Online play data.

When you play a game online — a live race, a real-time match, or a party game with several players — our realtime match service receives your IP address and connection metadata (so the connection can be made and abuse can be blocked), your account id and username (or, when you play without an account, the random guest identifier we give you), the display name, avatar and rank tier the other players see, your age group, whether you may be shown online (every account aged 13 or over is; accounts whose age we do not know never are) and the accounts you follow and have blocked (so the friends, age and block rules can be applied), and the gameplay of that match: your inputs or position during play, when it starts and ends, your place, finish time or score, and whether you disconnected, left or forfeited. We keep these realtime service records for 30 days. The result itself (who played, who won, the places) is kept with your gameplay data and can count toward your online wins and your online rank, though not every round counts (see our Terms of Service). When no one is free, you may be matched with a computer-controlled opponent instead. No other person takes part in that round or sees your play in it, and its result can be kept and counted like any other. There is no chat and no voice in online play: other players see your name (your username or display name), avatar and play, and the only thing a player sees that another player typed is a name, so no message content exists to collect.

Playing live without an account.

You can play live games without creating an account. Before you first play live, we ask for your date of birth. If you are under 13, we refuse, keep nothing you entered, and live play without an account can no longer be opened on that device. If you are 13 or over, we give you a random guest identifier, which the app keeps on your device with a key that proves it is yours; on our servers we keep the identifier and only a one-way hash of that key. With it we keep your age group (13 to 17, or 18 and over) and when you gave it, but never the date you entered; which versions of our Terms and this Policy you agreed to, and when; when you last played a live round; the results of your live rounds and the rank records described under “Rank and seasons in online play” below; the players you block; any suspension of your live play; and the reports you file and that other players file about your play. Other players see you only as “Guest”, with a default picture and the guest badge: you are never shown online, cannot be sent an invite in the app and never appear on a leaderboard, and your rank progress is not shown to anyone else. The guest identifier is not linked to our gameplay installation identifier or to the guest notification record, and we do not send it to our analytics or advertising partners.

If you create a new account on this device and finish signing up within a day, we move these records to it, the reports and your blocks included (a block between your guest identifier and another account becomes a block between that account and yours), and delete our record of the guest identifier within two days. Your new account asks for its own date of birth, and signing in to an account you already had moves nothing. Otherwise we delete these records within 91 days of your last live round, or of giving your age if you never played one. You can delete them sooner with “Delete my guest data” on the sign-in screen, or by contacting us at support@boolip.com. When we delete them, we keep only limited records we are legally required to retain, such as the reports you filed and that were filed about your play (section 6). Other players’ own records, such as the rounds they played with you and their count of different opponents, can keep the guest identifier; within 30 days of a move or a deletion, once our realtime service records have expired, nothing else we keep connects it to you.

Rooms, invites and “Online now”. Your room keeps the same code, which we keep for as long as your account exists. To run a room, a party lobby or an invite we keep who is in it and who invited whom only while it is in use: room membership for up to an hour after your last visit, a room’s game and round for six hours, a party lobby for two minutes (once it starts a match, its players for fifteen minutes, so they can rejoin), an invite link for ten minutes, an invite you missed for thirty minutes, a note that a member left, that a round could not start or that the owner closed the room for ten minutes (up to an hour for a member not yet told the room closed), and a game a member suggests to the owner for two minutes. So that you can rejoin a match after the app restarts, we also remember for fifteen minutes, for each online game, which of our online-play servers your account’s last search for a stranger to play against went to. Without an account, we remember the same for your guest identifier. Members of a room also see whether each other member is ready for the next round, free, busy in another game, joining or sitting a round out, and when the owner is choosing the next game. An invite you receive also appears in your in-app notifications, which keep who invited you and to which game for up to two hours after it was sent. While you are signed in with the app open, other players can see that you are online and invite you; players aged 13 to 17 are shown online, invited and matched with other players exactly as adults are, and accounts whose age we do not know are never shown online and are never matched with strangers. Players without an account play live only after telling us their age; they are never shown online and cannot be sent an invite in the app, and they join a room or a friend’s match only with a code or link someone gave them. The one exception to who can tell that you are online: for two minutes after a live race or match ends, the one player you just played — and no one else — can send you a Race again request, and whether it reaches you can tell that player you are still in the app; this holds whatever your age, and accounts whose age we do not know receive it only while the two of you still follow each other. When you block someone, the two of you are not matched, invited or shown online to each other.

Rank and seasons in online play.

Online play has a rank that runs in seasons of about eight weeks. For each online game we keep a hidden skill level, which we use to work out your rank and how many rank points a round can win or lose you; we never show it as a number. For each season we keep your rank points and the rank they give you (a tier and a step, such as Pro II), your best rank that season and ever, your wins and losses, the points each round won or lost you, and the opponents you met. We keep the list of different opponents you met each season only to count them, and only you see that count. For each game we also keep your wins and points that season. A round against the computer-controlled opponent can be kept and counted toward all of these like any other. When a season ends, we record your result: your best rank, your place if you finished in its top 100, and the season rewards you earned, such as a season badge and avatar frame.

Your rank is public. Anyone, including people without a Boolip account, can see on your profile your rank this season and its points (or, before your rank is shown, how many rounds are left), your best rank this season and ever, each season you have finished with your best rank, your place if you finished in its top 100, and the rewards you earned, and the three online games where your level is highest, each shown as a rank (such as Pro II). “Hide most played games” also hides those three games from everyone else. If you are in the top 100 of a season’s board, for all games or for one game, anyone can see your place, your rank and your rank points, and on a game’s board also your wins in that game that season. Your rank is also shown next to your name on the online boards and on your comments, and, to signed-in players, in rooms, on a round’s results, in the list of who is online and on the invites you send.

When a round lifts you into Master or a higher tier of the season’s ranks, or, as a Legend, into its top 100, people who follow you can get a note about it in the app, with your name, picture and the rank you reached, and you can get the same note when a player you follow does. These notes are never sent as push notifications and never reach a player you have blocked or who has blocked you. We delete them within 61 days of being sent.

When a round shows you before it starts how many rank points you would win or lose, we keep those numbers and what they were worked out from, such as your rank points and your level and your opponent’s level in that game, so that the round is settled as shown. We delete them within seven days.

Purchase history.

If you buy virtual items (Boolip Coins), we receive from the App Store or Google Play a record of the transaction: the product you bought, the store’s transaction identifier and receipt, the date, and later refund or revocation events. We use it to credit your balance, to honour refunds, and to prevent fraud. It is linked to your account. We never receive your card number, bank details, or payment-account credentials — the store handles the payment and tells us only that it succeeded.

Character Box openings.

When you open a Character Box, we record which character you received, its rarity, whether the box was free, the odds that were shown to you before you opened it, and the time. We use this record to show your collection, to be able to prove the odds we displayed, and to answer support and refund questions. It is linked to your account.

Boolip Coins balance and history.

We keep your Boolip Coins balance and a record of every Coin you earn, buy or spend: how many, what for, and when. We use it to show your balance, to keep it correct, and to answer refund and support questions. It is linked to your account.

Notifications.

If you enable push notifications, we store a device push token, plus the app version of that device (so an invite is only sent to a device that can open it), so we can send you duel and online-game invites, leaderboard updates, and important account notices. Leaderboard updates include a note when another player passes you on the day’s Arena board. You can turn notifications off at any time in your device settings.

Guest notifications.

If you enable notifications without creating an account, we store your device’s push token, language, app version, registration and last-seen times, and whether and when we tried to send each reminder. We use this to send up to two score-to-beat reminders about a Boolip game: one a few hours after you allow notifications, and one around 24 hours after. We also store the country your device registered from, to keep the first reminder out of the night. For each reminder, and when that device later signs up for an account, we keep a record of the platform, country, app version, when the device allowed notifications, which reminder it was and the outcome (with the reason, when a reminder could not be delivered), without your token. This guest record is not linked to a Boolip account or our gameplay installation identifier. You can stop notifications in your device settings.

3. How We Use Your Data

• To provide and operate the Service (create your account, serve games, host your content);
• To power social features — leaderboards, duels, follows, and messages;
• To run online play — pairing players, keeping every side in sync, deciding the result, and running rooms, invites and who is online, and keeping the online rank and its seasons;
• To process purchases of virtual items, credit balances, and handle refunds and chargebacks;
• To moderate content and enforce our Terms (reports, review, enforcement actions);
• To prevent fraud, abuse, and unauthorized access (rate limits, anomaly detection);
• To communicate with you about your account, safety reports, or material policy changes;
• To open the app on the game a Boolip link shows: when you open a boolip.com game link on your phone, we add one to an hourly count of opens of that game in your country. The country is read from your IP address at that moment; the address itself is kept only for our usual rate limit and is dropped within an hour. While one game clearly leads those counts, a new install of the Boolip app in that country may start on it. The count holds no address, device or account, and is never used for advertising;
• To improve the Service (which games people enjoy, where the app can be faster or clearer).

4. Third-Party Processors

We share specific data with the following processors strictly to operate the Service. Every processor in the table below is bound by an agreement to protect your data at least as this Policy does. We do not sell your personal data and we do not track you across other companies’ apps or websites. The one exception is install attribution in the Boolip apps, to know which ad brought a new player. The Android app shares the Android advertising ID and install details with AppsFlyer and, for installs that came from a Meta ad, with Meta Platforms. In the European Economic Area, the United Kingdom and Switzerland it does so only after you turn on usage analytics in Settings → Account → Privacy. The iOS app does the same with Apple’s advertising identifier only if you tap “Allow” when iOS asks, through App Tracking Transparency, whether Boolip may track you: until you answer, and if you choose “Ask App Not to Track”, the iOS app sends nothing to AppsFlyer. Apple’s own SKAdNetwork can still report an install to the ad network that showed the ad, in aggregate and without any identifier, and send AppsFlyer a copy of that report. See the AppsFlyer row below. Meta receives install data from AppsFlyer only as that row describes, and uses it under the Meta Business Tools Terms and its own policy.

5. Where Your Data Lives

Our primary database (Neon) is hosted in EU regions. Media and assets are stored on Vercel (multi-region with EU presence). The realtime match service that runs online play is hosted in New York, USA, Frankfurt, Germany and Singapore (DigitalOcean); each match runs in one of these places, chosen by where its players are. Some processors may process limited data outside the EEA; where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

6. Retention

• Account data: while your account is active, plus up to 30 days after a deletion request.
• After a deletion, an anonymous account record stays, with no email address, name, handle, password or date of birth, so the plays, scores and duel results it took part in stay correct for other players.
• Usage analytics: when you delete your account, we delete your analytics profile and its events at our analytics service (PostHog) within 30 days.
• When you delete your account, we remove installation identifiers from gameplay records linked to that account or the same installations; gameplay statistics remain without that installation link.
• Content you publish (comments, clips): retained while published; removed on takedown and hard-deleted within 30 days.
• Safety & moderation logs and reports: retained 24 months for safety and audit.
• Realtime match service records (IP address, connection metadata, in-match events): retained 30 days.
• Online rooms, party lobbies and invites: kept only while in use, at most six hours (an invite also stays in the recipient’s notifications for up to two hours); your room’s code: while your account exists; which online-play server your last search for a stranger went to: fifteen minutes.
• Your rank records in online play (your level in each online game, your rank points, ranks and best ranks, your wins and losses, the points each round won or lost you, the opponents you met in each season, kept only to count them, and each season’s result and rewards): retained while your account is active, and after a deletion kept with the anonymous account record, so other players’ boards and seasons stay correct; a deleted account’s rank is no longer shown on any board or profile, or next to any name.
• The numbers behind the rank points a round shows before it starts: deleted within seven days.
• Notes that a player you follow reached Master or a higher tier: deleted within 61 days of being sent. Deleting your account deletes the notes you received and removes your name and picture from the notes about you.
• Live play without an account (the guest identifier and the hash of its key, the age group, which Terms and Policy were agreed to and when, the time of the last live round, live results and rank records, the players blocked and any suspension): moved to the new account when one is created on that device and its sign-up is finished within a day, and our record of the guest identifier deleted within two days of the move; otherwise deleted within 91 days of the last live round (or of the age step, if no round was played), or sooner with “Delete my guest data”. Reports are kept as safety and moderation records (above).
• Purchase records (product, transaction identifier, date, refund events): retained while your account is active and for as long as tax and accounting law requires.
• Character Box records (character received, rarity, odds shown, time): retained while your account is active, and after a deletion kept with the purchase records under the anonymous account record.
• Boolip Coins records (your balance, and every Coin you earned, bought or spent, free Coins such as a sign-up bonus or a streak reward included): retained while your account is active, and after a deletion kept with the anonymous account record.
• Your play-streak record (such as your longest streak and any streak freezes): retained while your account is active, and after a deletion kept with the anonymous account record.
• Guest notifications: we retain the token record to prevent repeated score reminders. We remove it when the same token is registered to an account or the platform’s push service (Firebase on Android, Apple on iOS) reports that it is invalid during a delivery attempt. Turning notifications off does not automatically delete this record. You may request deletion using the contact details below.
• Guest reminder records (one for each reminder and for a later sign-up, without the token): deleted after 180 days.
• Game-link counts (country, game, number of opens): deleted within three hours.
• Server logs: retained up to 90 days for security and debugging.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to processing, or to lodge a complaint with a supervisory authority. EU residents may exercise rights under the GDPR; California residents may exercise rights under the CCPA. To exercise any right, email support@boolip.com. We respond within 30 days.

Deleting your account.

You can delete your Boolip account and its associated personal data at any time from within the app (Profile → Settings → Account → Delete my account), or by emailing support@boolip.com from your registered address. When you delete your account, we erase your personal data within 30 days, except limited records we are legally required to retain (such as safety logs or fraud-prevention data) as described in Retention above.

8. Cookies & Local Storage

We use a session cookie to keep you signed in, and local-storage entries on your device to remember preferences and app state (for example theme, last-viewed feed position and your last few searches), to keep the random gameplay identifier described in section 2, to count your visits and play days for analytics, and to hold install-measurement events until our analytics service confirms receipt. Once you agree to this Policy (and, in the European Economic Area, the United Kingdom and Switzerland, once you turn usage analytics on), our analytics service (PostHog) also keeps an analytics identifier in a first-party cookie and in local storage on your device. We do not use third-party advertising cookies. Our analytics are first-party and do not identify you across other companies’ sites or apps. In the European Economic Area, the United Kingdom and Switzerland, the visit and play-day counts and install-measurement events are not stored on your device, and our analytics service keeps no identifier there, until you turn on usage analytics in Settings → Account → Privacy.

9. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. In the European Economic Area, the United Kingdom and Switzerland, usage analytics beyond the limited list in section 4 run only with the account holder’s separate consent, which users below the age of digital consent in their country (between 13 and 16) cannot give. If you believe a child has provided us with personal information, contact support@boolip.com and we will delete it.

If someone tells us they are under 13 before playing live without an account, we refuse, keep nothing they entered, and live play without an account can no longer be opened on that device.

10. Security

We use industry-standard safeguards: encryption in transit (HTTPS/TLS), encryption at rest for our database, strong password hashing, principle-of-least-privilege internal access, automated security monitoring, and regular review of our infrastructure. No method of transmission or storage is 100% secure; we work to continuously improve.

11. Changes to This Policy

We may update this Policy. When we make material changes, we update the “Updated” date above and, where the law requires it, ask you to accept them again.

12. Contact

Privacy questions, data-rights requests, or general support: support@boolip.com.