Privacy Policy
Last updated: 18 October 2026
BOSS BOUNTY ("the game", "we") is a mobile game for iOS and Android in which players around the world fight the same boss together. This policy explains what data the game collects, why, and what you can do about it. We do not show ads, do not track you across other apps or websites, and do not sell your data.
What we collect
- Your account: a random user ID, the username and avatar you choose, and your password (stored only as a secure hash by our backend provider). The game also creates a technical sign-in address of the form <user id>@liveboss.invalid; it is never used to contact you. We do not ask for your real name, e-mail address or phone number.
- Gameplay data: your level, experience, coins, attacks and cosmetics, damage dealt, hits, combos, badges, challenges, duels and their results, daily rewards and leaderboard positions.
- Push notification token: if you allow notifications, a device token so we can tell you when a new boss arrives, an event starts or someone challenges you. You can turn notifications off in the game's settings or in your phone's settings (iOS or Android) at any time.
- Technical data: our servers keep short-lived technical logs (for example request times and errors) to keep the game running and secure.
Why we use it
- To run the game: your account, progress, rewards and the shared boss fight.
- To show your username, avatar, level and game statistics to other players (leaderboards, the live activity feed, player profiles, duels). Do not use your real name as your username.
- To send the notifications you allowed.
- To prevent cheating and abuse.
Who processes it
- Supabase (database, sign-in and servers, hosted in the European Union - Frankfurt, Germany).
- Google Firebase Cloud Messaging, together with Apple Push Notification service on iPhone (delivery of push notifications, only if you allow them).
We do not share your data with anyone else, except where the law requires it.
Other players and computer-controlled players
What other players see about you is limited to your username, avatar, level and game statistics. The game may include computer-controlled players that take part in fights and duels.
Coins and games of chance
Coins, the BONUS SPIN slot machine and the roulette are part of the game only. Coins cannot be bought with or exchanged for real money, and nothing in the game has real-world value.
How long we keep it
We keep your account and gameplay data for as long as your account exists. You can delete your account at any time in the game: Settings → Account → Delete account (see how). This permanently deletes your account and the data linked to it. Short-lived technical logs are removed automatically.
Your rights
Depending on where you live (for example under the EU GDPR), you may have the right to access, correct, delete or export your data, and to object to or restrict its processing. You can delete your account in the game yourself; for anything else, contact us at the address below. You also have the right to complain to your data protection authority.
Children
The game is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Changes
We may update this policy. The date at the top shows the latest version; important changes will be announced in the game.
Contact
E-mail: [email protected]
Help and account questions: bossbounty.com/support