Privacy Notice

This notice explains the BOOOM44 website and game operated by BioDentCulture Limited, 207 Regent Street, Third Floor, Suite 8, London W1B 3HH, United Kingdom. Privacy contact: drschneider007@gmail.com.

Free play and local storage

Your Navy rank, harbor, settings and recent results are stored locally on this device so solo play can continue without a network. If you sign in, BOOOM44 also stores the progression fields needed to synchronize rank and harbor progress across your signed-in devices. The synchronization uses a random device identifier and account identifier; it does not use progress to grant paid equipment. Export your progress in Command to keep your own backup. We use browser storage for requested game functionality, not advertising.

Accounts and transactions

Supabase handles your account email, password authentication and session data. Passwords are sent over HTTPS to Supabase, not stored in game progress. Session tokens are held in your current browser session. The server records account identifiers, synchronized progression totals, a random per-device synchronization identifier, orders, payment references and equipment entitlements so we can preserve progress and deliver, restore or revoke the correct items. Payment details are entered on Stripe's hosted Checkout; BOOOM44 does not receive full card numbers. Stripe/Link handles the transaction as merchant of record and sends receipts. Resend sends account-confirmation and password-recovery emails from our verified domain; open and click tracking for that domain are disabled.

Private two-player play

Supabase Realtime relays encrypted mission state and controls between two browsers. The host runs the simulation. Invitations contain a random secret after #; anyone you give the invitation to can join or forward it. Messages are encrypted with AES-GCM in the browser. Providers still process connection metadata including IP addresses, timing and message sizes. There is no built-in public chat, voice recording, contact upload or location tracking. Paid loadout checks use short-lived room-bound encrypted permits; your partner does not receive your email, password or account token.

Diagnostics

Up to 300 diagnostic events are kept locally for mission starts/results, invitations and purchase attempts. These use limited source categories such as TikTok or direct, not invitation secrets or card information. This release sends no gameplay analytics to an analytics server and uses no advertising pixels. Providers may keep technical access and security logs. Signal Rescue feedback is game-task data, not an intelligence, brain-age, medical or therapeutic assessment.

Why data is processed

We process account and purchase data to provide the requested service and perform our contract, transaction records for applicable legal obligations, and proportionate logs/support correspondence for security, troubleshooting and our legitimate interest in operating a reliable service. No marketing email is sent merely because you create an account. Accounts and purchases are intended for adults 18 or older.

Providers and international processing

Netlify hosts the site; Supabase provides authentication, database, backend and Realtime; Resend sends account mail; Stripe/Link handles payments and transaction support. These providers may process data internationally under their applicable data-protection terms and safeguards, including contractual safeguards where required. Stripe/Link may act as an independent controller for transaction processing. We do not sell your personal data.

Retention and your controls

Local progress remains until you clear browser data or replace it. You can export it in Command. Signed-in cloud progression remains with your account until deletion or other applicable retention action. Account and purchase data are retained while needed to supply your account, restore purchases, handle disputes and meet legal recordkeeping requirements. Provider security and email-delivery logs have their own limited retention. You may request details of the retention applicable to your records.

Contact us from your account email to request access, correction, deletion, restriction or an export, or to object where applicable. We may verify ownership and may need to retain statutory transaction records. You may complain to the relevant data-protection authority, including the UK Information Commissioner's Office, Swiss FDPIC or your local EEA authority where applicable.

Provider notices: Supabase · Netlify · Resend · Stripe.

Offline play

Prepare the game online in Command before travelling. Solo missions and completed-mission progress are stored on this device. Purchase records are not inferred from progress files. Prepared purchased equipment has a signed offline pass valid for 30 days from preparation; renew it online at no extra charge. Purchase ownership remains permanent. New purchases, account recovery and online co-op require a connection. Refunds or revocations are applied when checked online; a disconnected device cannot receive them immediately. Clearing site data removes the offline copy. Signed-in progression synchronizes when connectivity returns; paid equipment ownership is verified separately and is never inferred from progression data.