Privacy Policy

1. Introduction

BumpNames ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information.

Our service complies with applicable data protection laws including CCPA and other US privacy regulations.

2. Data We Collect

2.1 Account Information

When you register with Google OAuth:

• Name
• Email address
• Google profile picture (if available)
• Google account ID

2.2 Usage Data

Automatically collected:

• Game creation and participation information
• Name ratings (like/dislike/maybe)
• Matches with partner
• Session duration and activity

2.3 Payment Information

For Premium purchases, Paddle processes:

• Payment card information (we do not store this)
• Billing information
• Transaction ID and status

Important: All payments are final and non-refundable. We do not offer refunds.

3. How We Use Your Data

Your data is used to:

• Provide core service functionality
• Create and manage your account
• Synchronize games with partner
• Process payments and provide Premium access
• Send important notifications (matches, invites)
• Improve service quality
• Provide support

4. Data Sharing

We never sell your personal data. Data is shared only with:

4.1 Service Providers

• Google: Authentication
• Paddle: Payment processing
• Neon: Database services
• Vercel: Website hosting
• Resend: Email services

4.2 Your Partner

When playing together, your partner sees your name and shared matches.

5. Data Storage

Your data is stored:

• Database: Neon servers (USA)
• Storage duration: Until account deletion
• Inactive accounts: Retained to ensure data availability upon return

6. Cookies

We use only essential cookies:

• Session cookies: For authentication (NextAuth)
• Preferences: Language and theme settings

Google Analytics is currently disabled. If we enable it in the future, we will request your consent.

7. Your Rights

Under applicable privacy laws, you have the right to:

• Access: Request a copy of your data
• Correct: Update inaccurate information
• Delete: Request account and data deletion
• Restrict: Restrict data processing
• Port: Receive data in a structured format
• Object: Object to data processing

To exercise these rights, contact: support@bumpnames.com

8. Data Security

We protect your data with:

• SSL/TLS encryption for all communication
• Secure database access with encrypted connections
• Regular security audits
• Limited access to personal data
• OAuth 2.0 secure authentication

9. Children's Privacy

Our service is not intended for persons under 13 years of age. We do not knowingly collect data from children. If you learn that a child has provided us with personal data, please contact us.

10. International Data Transfers

Your data may be processed in:

• Neon database (USA) - with appropriate security measures
• Google OAuth (global) - compliant with privacy standards
• Vercel CDN (global) - with privacy compliance

11. Data Breaches

In case of a data breach:

• We will notify you within 72 hours
• Report to relevant authorities
• Take measures to mitigate risks

12. Privacy Policy Changes

We may update this policy. Material changes will be notified:

• By email to registered users
• Through in-app notification

13. Contact Information

For data protection inquiries:

• Email: support@bumpnames.com
• Website: bumpnames.com

Privacy Concerns:
If you have concerns about our data practices,
please contact us at the email above.