BombaDuel

Privacy Policy

Last updated: June 25, 2026

In brief: BombaDuel uses Firebase to handle sign-in, real-time matches, and a global leaderboard. We store your display name, rating, and match history. The App uses Firebase Analytics and Firebase Crashlytics for basic usage diagnostics and crash reporting. We do not sell your personal data. This release ships ad-free — the Google Mobile Ads SDK is not bundled in v1; if ads return in a future version, they will be served by Google AdMob and this policy will be updated to disclose them.

1. General Information

BombaDuel ("the App") is a real-time 1v1 minesweeper flags duel developed and published by IOCODO LLC ("we", "our", "us"). Players are paired with a random opponent and compete to claim more mines on a shared board across three board sizes (Classic, Large, Huge).

This Privacy Policy explains what information is collected, how it is used, and the choices available to you when you use the App.

2. Local Data Stored on Your Device

The App stores certain data locally on your device to keep settings between sessions and to remember your last preferences. Depending on how you use the App, this may include:

Your display name and last selected board preset
Audio and haptic preferences
A local cache of your most recent match results

Some of this data is also synchronized with Firebase backend services operated by Google LLC, as described below.

3. Account and Authentication

BombaDuel requires sign-in to play online ranked matches and appear on the leaderboard. Sign-in is handled through Firebase Authentication (Google LLC). You can sign in two ways:

Anonymous (guest) — Firebase assigns you a temporary user identifier; no email or password is required. Guest accounts can play vs the bot and casual matches but do not appear on the ranked leaderboard.
Email + password — Firebase Authentication processes the email address and a password you choose, and issues a secure session.

We store a minimal profile (display name, avatar seed, ELO rating, wins / losses / streak counters) associated with your account in Firebase Realtime Database.

4. Data Stored in Firebase Backend Services

The App uses the following Firebase services operated by Google LLC:

Firebase Authentication — sign-in and session management.
Firebase Realtime Database — stores your profile, ELO rating, match moves while a duel is in progress, the matchmaking queue, presence state, and leaderboard entries. The data lives in the europe-west1 region.

Data stored in Firebase is subject to Google LLC's data processing terms and privacy policies.

5. Matchmaking and In-Game Data

When you press "Find Match", your display name and chosen board preset are written to a public matchmaking queue so another waiting player can be paired with you. Once paired, both clients exchange moves through a shared real-time path; opponents can see your display name and your moves during the duel.

Match results — final scores, the opponent's user identifier, and the duration — are recorded so we can update the leaderboard. Aggregated win / loss counts are visible to other signed-in users via the leaderboard.

6. Analytics and Crash Reporting

BombaDuel uses Firebase Analytics (Google LLC) to log basic usage events such as app opens, and Firebase Crashlytics (Google LLC) to collect crash and diagnostic reports. We use this data to understand how the App is used and to find and fix bugs. This data is processed under Google LLC's terms. You can limit some of this collection through your device settings.

7. Advertising

This release does not serve ads and does not bundle the Google Mobile Ads SDK. No advertising identifiers are collected or shared. If a future release enables ads through Google AdMob (Google LLC), this policy will be updated to disclose what is collected, why, and how to opt out.

8. Network Requests and Third-Party Services

During normal operation the App communicates with:

Firebase Authentication (Google LLC) — sign-in
Firebase Realtime Database (Google LLC) — match data, profile, leaderboard
Firebase Analytics (Google LLC) — usage analytics
Firebase Crashlytics (Google LLC) — crash/diagnostic reporting
Google Fonts (Google LLC) — font assets loaded at runtime

Important: Each third-party service listed above processes data under its own privacy policy. Please review those policies directly for provider-specific details on data handling, retention, and your rights.

9. Data Sharing and Sale

We do not sell your personal data. We do not share your personal data with third parties except as required to operate the App — specifically, by transmitting data to Firebase as described above — or as required by law.

10. Your Choices and Account Deletion

You can request deletion of your account and associated data — including your profile, leaderboard entry, and match history — by emailing support@iocodo.com from the address linked to the account. We will process the request within 30 days.
You can also delete your account directly from inside the App: Settings → Account → Delete Account.
You can manage advertising and tracking preferences through your device settings and your Google account.
You can remove locally stored App data by uninstalling the App, subject to any device backup behavior controlled by Apple or Google.

11. Children

BombaDuel is rated 4+ / PEGI 3 — the gameplay is non-violent and family-friendly. The App is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact support@iocodo.com and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy, please contact:

IOCODO LLC
Email: support@iocodo.com
Website: iocodo.com