YEET BOMB: Privacy Policy

Last updated: 17 October 2026

This policy explains what information the YEET BOMB mobile game ("the app", "we", "us") collects, how it is used, and the choices you have. YEET BOMB is published by Blank Canvas Software. Contact: softwareblankcanvas@gmail.com.

Summary

Information we collect

DataWhat it isWhy
Anonymous player IDA random ID created when you first go online. It is not linked to your name, email or phone number.To keep your progress, bombs and scores, and to stop abuse.
NicknameThe name you choose in the game. It is shown publicly to other players.To show who armed, passed or defused a bomb, and on leaderboards.
Gameplay contentTraps you build, replays of your runs (taps and timings), taunt messages, scores and bomb history.To run the game: other players play your traps and can watch replays.
CountryYour country or region, taken from your device's language and region settings (not GPS).To show which countries a bomb has visited on the world leaderboard.
Game activity eventsSimple events such as "tutorial finished", "bomb armed" or "daily bomb played", with your anonymous player ID, the app version and a random test group number. No names, contacts or location.To understand which features players use and to test improvements to the game.
Age groupThe age group you pick when you first open the game (under 13, 13-17, or 18+). We never ask for or store your birth date.To keep under-13s out, to show teens only pre-written taunts, and to keep ads age-appropriate (non-personalised for everyone under 18).
Terms acceptanceThe time you accepted the Terms of Use.To show that the rules were agreed (Google Play requirement for user content).
BlocksPlayers you block.So they can't send you bombs and you don't see their messages.
Push tokenIf you turn notifications on, a device token from Firebase Cloud Messaging (Google).To send the notifications you asked for. Turn them off any time in Settings.
PurchasesIf you buy the supporter pack, the Google Play purchase token and product.To check the purchase with Google Play and unlock the cosmetic items.
Rewarded-ad confirmationsGoogle AdMob's confirmation that you watched a rewarded ad (a transaction id and your anonymous player ID).To give the reward only for ads that really finished.
Google Play Games achievements and scoresIf you're signed in to Google Play Games on your device, the game sends the achievements you unlock and your Practice Streak, Daily Bomb, Chain Points and Players Scorched scores to Google Play Games. The game reads your Play Games name and player ID on your device to show that you're signed in; we don't store them on our servers.To show achievements and Google Play leaderboards.
Invite link opensWhen an invite link page is opened: the bomb code and a time. No IP address or player ID is stored by us.To count how many invites get opened.
Votes and rankingsYour likes and boos on traps you played, daily bomb scores and weekly league points.To feature popular traps and show leaderboards.
ReportsIf you report a nickname or message, the report and its reason.Moderation and safety.
Technical logsOur backend provider may log IP addresses and request times automatically.Security, preventing abuse and keeping the service running.

Some settings, such as sound preferences, XP, skins and offline practice progress, are stored only on your device.

To open bomb invites, the app checks your clipboard on your device for a bomb code (like BOMB-7F3K9Q) when you open it. Clipboard contents are never sent to us; only a code you choose to open is looked up.

Public content

Your nickname, traps, taunts, replays and scores are visible to other players, and you may share replays and bomb codes yourself. Do not put personal information in your nickname or taunts. Offensive text is filtered automatically, and players can report nicknames and messages. Reported content may be hidden, and nicknames may be reset or locked. On Google Play Games leaderboards, who can see your Play Games name and scores depends on your Play Games profile visibility settings.

Advertising

YEET BOMB uses Google AdMob to show optional rewarded ads (for example, "watch an ad to retry"). When an ad is requested, the Google Mobile Ads SDK may collect and share with Google your device's advertising ID, IP address, approximate location derived from it, device and app information, and ad interactions. This is used to deliver and measure ads, prevent fraud and, where you have consented, personalize ads. See Google's Privacy Policy and how Google uses data from partner apps.

If you are in the EEA, the UK or Switzerland, the app asks for your consent through Google's consent form before showing personalized ads. You can change your choice at any time from Credits → Ad Privacy Choices. You can also reset or delete your advertising ID in your Android settings (Settings → Privacy → Ads). Ads are limited to content suitable for teens.

Service providers

Game data is stored with Supabase, our database and authentication provider, which processes it on our behalf. Data may be processed in countries other than your own. Ads are provided by Google AdMob, as described above. Achievements and Google Play leaderboards are provided by Google Play Games services when you're signed in to Play Games. We do not share your data with any other third party, except where required by law.

Security

All data is sent over encrypted connections (HTTPS). Access to the database is restricted by row-level security, so players can only change their own data through controlled server functions.

Retention and deletion

We keep game data for as long as it is needed to run the game, for example bomb histories and leaderboards. Activity events are deleted after 120 days. You can delete your account in the app: Settings → Delete my account. This removes your name, messages, scores, blocks, tokens and events right away; traps you built stay in other players' chains without your name or text. You can also follow the steps on our data deletion page or email softwareblankcanvas@gmail.com with your nickname. If you can, include a bomb code you played. We will delete or anonymize your player record and the content linked to it within 30 days. Uninstalling the app removes data stored on your device. Achievements and scores sent to Google Play Games are kept by Google under your Play Games profile, and deleting your YEET BOMB account doesn't remove them; you can delete them from your Play Games profile settings or your Google Account.

Children

YEET BOMB is for users aged 13 and over. The game asks for an age group before anything else, and players who say they are under 13 cannot play. Players under 18 can only send pre-written taunts and forfeits, never free text, and get non-personalised ads limited to teen-appropriate content. If you believe a child under 13 has provided us data, contact us and we will delete it.

Legal bases

We process game data to provide the game you asked for (performance of a contract), activity events and invite counts for our legitimate interest in improving the game, and personalised ads only with your consent (adults in the EEA/UK, through Google's consent form). Push notifications are only sent if you turn them on.

Your rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, delete or object to the processing of your data. To use these rights, contact us at the email above. You can also complain to your data protection authority; in Spain this is the Agencia Española de Protección de Datos (aepd.es).

Changes

If we change how we collect or use data, we will update this policy and the "Last updated" date before those changes take effect.