Hop 'n Bop ("the Game") is published by Snoring Cat LLC
("we", "us", "our"). This policy describes how we collect,
use, and protect your information.
1. Information We Collect
Account information: When you sign in
through a third-party provider the Game offers (currently
Google or Facebook), we receive your display name, profile
image URL, and a provider-specific user ID. The Game does
not ask sign-in providers for your email address, and we do
not keep it. If an earlier version of the Game received your
email address from Google, it is deleted the next time you
sign in, or sooner. We do not receive or store your
password.
Device identifier: If you play
anonymously, we generate a random device ID stored locally
on your device. When you use online features, we also store
it on our servers to identify your account.
Gameplay data: Match results, scores,
kills, deaths, and other in-game statistics.
Social data and settings: Your friends,
blocked players, parties, party chat messages, players you
recently played with, online status, in-game notifications
(such as friend requests and the details of matches you
join), and settings synced across your devices.
IP address: We receive your IP address
when the Game connects to our servers or to a game server.
When you look for a match, we store it with your account to
choose a game server near you, and delete it within two
hours.
Technical data: Game version, platform,
operating system, and crash reports. Crash reports contain
error messages and excerpts from the Game's logs, with
sign-in tokens and account identifiers removed. We do not
store your player ID, IP address, or device ID with crash
reports.
Consent records: When you accept our
Terms and Privacy Policy, the Game saves the date and time
and the legal document version you accepted. This record is
stored only on your device, not on our servers. It is removed
when you log out or delete your account. If the Game signs you
out on its own, for example because your session expired, the
record stays so you are not asked again. You are asked again
whenever these documents change.
2. How We Use Your Information
Authenticate your identity and maintain your account.
Track gameplay statistics and display leaderboards.
Show your display name and profile image to other players
in the Game.
Provide friends, parties, party chat, online status, and
settings sync.
Match you with other players and choose a game server
near you.
Diagnose crashes and improve the Game.
Keep our servers secure and working.
3. Information Sharing
We do not sell or rent your personal information. We share
it only as described below, with service providers that run
parts of the Game for us and with the sign-in providers you
choose to use. We comply with the EU General Data Protection
Regulation (GDPR) and the California Consumer Privacy Act
(CCPA).
Other players and the public: Other
players see your display name, profile image, and online
status in the Game. Public leaderboards, in the Game and at
hopnbop.net/leaderboard, show
anyone, without signing in, each listed player's rank,
display name, and best single-match score of all time. They
never show player IDs, usernames, profile images, device
IDs, IP addresses, email addresses, when a score was set, or
other match statistics. Only accounts with a display name
are listed: guest accounts have none and never appear, and
banned accounts and accounts being deleted are left out. If
you signed in with Google or Facebook, your display name is
the name on that account's profile, which may be your real
name, and it is the name shown on these public
leaderboards.
Hosting: Our backend runs on a cloud
server from Hetzner Online GmbH in Hillsboro, Oregon, United
States. That server stores your account and game data,
including your sign-in IDs, friends, online status,
settings, statistics, leaderboard entries, and party chat
messages.
Game servers: Edgegap runs a game server
for each match in a data center chosen to be near its
players, which may be outside your country. Edgegap receives
the players' IP addresses to choose the location, and their
player IDs so the server knows who may join. If everyone in
a match is in the United States or Canada, the match may run
on our own server instead. We check this with a DB-IP
country database on our server, so your IP address is not
sent to anyone else for that check. During a match, the game
server receives your IP address, player ID, display name,
profile image URL, and gameplay data.
Website and backups: Cloudflare hosts our
website and the browser version of the Game, and sees
visitors' IP addresses. It also stores our nightly database
backups. For Google sign-in, a small service we run on
Cloudflare exchanges Google's one-time code for your sign-in
token, and stores neither.
Sign-in: Google and Facebook are
contacted when you sign in or link an account, and receive
no gameplay data from us. When the Game shows a profile
image, it loads the image from Google's or Facebook's
servers, which can see the IP address of the device loading
it.
4. Data Retention
Gameplay data is retained for the lifetime of your account.
Consent records stay on your device until you log out or delete
your account. Your stored IP address is deleted within
two hours of being stored.
When you delete your account, we immediately delete your
profile details (display name, profile image URL, any email
address we hold, language, location, and time zone), your
stored IP address, friend code, friends and blocked players,
parties, party chat messages, notifications, leaderboard
entries, match history, settings, and other game data, and
remove you from other players' recent players lists. The public
leaderboard at hopnbop.net/leaderboard can take up to about a
minute to stop showing you, or longer only while our database is
down. We keep only what lets you sign back in to cancel the
deletion: your sign-in IDs (your device ID and the IDs of the
providers you signed in with). If you cancel, you keep your account, but the
data we deleted does not come back. Otherwise, your account and
sign-in IDs are permanently deleted after 30 days, along with
anything you add if you keep playing in the meantime. Deleted
data can remain in our database backups for up to 8 days after
it is deleted. Crash reports are deleted after 30 days. Server
logs, which can include IP addresses, are kept only as long as
needed for security and troubleshooting.
5. Your Rights
Access: Request a copy of your data
via in-game settings or email.
Portability/export: Download all the
data we store about you, in JSON format, via in-game
settings (Settings > Account > Export My Data). The
export holds your account details and sign-in IDs, any email
address we hold, your stored IP address, friend code,
friends and blocked players, parties, party chat messages,
notifications, leaderboard entries, match history, players
you recently played with, online status, settings, and
whether your account is scheduled for deletion. Crash
reports are not linked to your account, so they cannot be
included.
Deletion: Delete your account and all
associated data via in-game settings or email. See our
Data Deletion Policy.
Rectification: Request correction of
inaccurate data via email.
Restriction: Request we limit
processing of your data.
Objection: Object to processing of
your data.
Do not sell: We do not sell personal
information (CCPA).
To exercise any right, use the in-game Account settings
or email privacy@hopnbop.net.
California Residents
Under the CCPA, you have the right to know what data we
collect, request deletion, and opt out of the sale of personal
information. We do not sell personal information. To make a
request, email privacy@hopnbop.net or use the in-game Account
settings.
6. Children's Privacy
The Game is intended for players aged 13 and older. We do
not knowingly collect information from children under 13. If
we learn that we have collected data from a child under 13, we
will delete it promptly.
7. Security
We use industry-standard encryption (HTTPS/TLS) for our
website, for sign-in, and for data sent between the Game and
our backend server. Gameplay traffic during a match is not
always encrypted. Our database backups are encrypted at rest.
Access to player data is restricted to authorized systems.
8. Changes to This Policy
We may update this policy from time to time. The "Last
updated" date at the top will reflect the most recent revision.
Continued use of the Game after changes constitutes acceptance
of the revised policy.