๐Ÿƒ Privacy Policy

BluffArena is committed to protecting your data.
We collect only what's needed to run the game.

Effective: June 1, 2025 Last Updated: June 1, 2025

01 Overview

BluffArena ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BluffArena mobile application and related services (the "Service").

By using BluffArena, you agree to the practices described here. If you do not agree, please discontinue use of the Service.

โšก Key Principle
We collect only what is necessary to operate the Service. Your data is never sold to third parties or used for advertising.

02 Data We Collect

Every category of data we collect, why we collect it, and whether it leaves your device:

Data Type Purpose Shared
Email address Account UID, 2FA OTP delivery No
Hashed password Authentication โ€” stored as secure hash only No
Profile image Stored in cloud; displayed in-app only No
Voice / audio (WebRTC) Real-time voice chat; never recorded or stored No
WebSocket game data Real-time game state sync; session-only No
Network state Connectivity checks for stable gameplay No
Device/crash logs Debugging and service improvement No

03 Account & Authentication

Email Address. Your email is used solely as a unique identifier (UID) for your account and as a delivery channel for one-time passwords (OTP) during two-factor authentication. We do not use your email for marketing or promotional content.

โœ… No Marketing Emails
System emails are limited to: account verification, 2FA OTP codes, and critical security notices. Nothing else.

Password. Passwords are never stored in plain text. We use industry-standard hashing (e.g. bcrypt). We do not have access to your raw password.

Two-Factor Authentication (2FA). OTPs sent to your email are single-use, time-limited, and invalidated immediately after use or expiry.

04 Voice & Microphone

BluffArena uses your device microphone exclusively for real-time voice chat during active game sessions via WebRTC โ€” a peer-to-peer technology.

๐ŸŽ™๏ธ Audio is Never Recorded
Voice audio is transmitted in real time and is never recorded, stored, logged, or analysed by us or any third party. Audio data exists only in memory for the duration of an active session.

Bluetooth permissions (BLUETOOTH, BLUETOOTH_CONNECT) are requested solely to route audio to connected Bluetooth headsets during voice sessions. No Bluetooth data is collected.

You may revoke microphone permission at any time in device settings. This disables voice chat but does not affect other features.

05 Real-Time Gameplay

Game state โ€” player actions, turn info, match results โ€” is transmitted over an encrypted WebSocket connection for real-time synchronisation between players.

This data is used exclusively to run the game session.

06 Data Storage & Security

Account data and profile images are stored on secure cloud infrastructure with the following safeguards:

TLS/HTTPSAll data in transit is encrypted end-to-end.
Encryption at restStored data and profile images are encrypted on our cloud provider.
Access controlsServer access is restricted to authorised personnel only.
Password hashingOne-way hash algorithm โ€” we never store plain-text passwords.

Profile Images. Images you upload are stored in cloud storage and used only for display within the app. They are not processed, analysed, sold, or shared with any third party.

โš ๏ธ Security Notice
No electronic storage method is 100% secure. We encourage you to use a strong, unique password and keep 2FA enabled.

07 App Permissions Explained

Every Android permission BluffArena requests and exactly why:

INTERNETAll server communication: authentication, game sessions, WebSocket connections.
RECORD_AUDIOIn-game voice chat via WebRTC. Audio is never recorded or stored.
WAKE_LOCKKeeps device awake during active gameplay to prevent mid-session disconnection.
BLUETOOTH / BLUETOOTH_ADMIN / BLUETOOTH_CONNECTRoutes audio to Bluetooth headsets during voice chat. No Bluetooth data is collected.
ACCESS_NETWORK_STATEChecks network availability to manage WebSocket and WebRTC connections gracefully.
CHANGE_NETWORK_STATEMay switch network interfaces for optimal connectivity during gameplay.
MODIFY_AUDIO_SETTINGSAdjusts audio focus and routing during voice chat to ensure proper output.

08 Third-Party Services

BluffArena uses third-party cloud infrastructure providers for hosting and storage. These providers act as data processors and are contractually bound to protect your data and use it only to provide services to us.

๐Ÿšซ No Ads. Ever.
We do not integrate advertising SDKs, individual-level analytics platforms, or data broker services. Your email and usage data are never monetised or sold.

09 Children's Privacy

BluffArena is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete that data.

10 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

AccessRequest a copy of the personal data we hold about you.
CorrectionRequest correction of inaccurate or incomplete data.
DeletionRequest deletion of your account and associated personal data.
PortabilityRequest your data in a portable, machine-readable format.
ObjectionObject to processing of your data in certain circumstances.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

11 Data Retention

Data Retention Period
Account data (email, password hash) Until account deletion is requested
Profile image Until account deletion or image is replaced
Voice / audio streams Never stored โ€” real-time only
WebSocket game session data Session duration only; not persisted
OTP codes Minutes โ€” expire after use or timeout

Upon account deletion, personal data is removed from active systems within 30 days. Anonymised statistics may be retained as they cannot identify you.

12 Contact Us

Questions, concerns, or data requests? Reach out to our privacy team:

BluffArena โ€” Privacy Team

โœ‰๏ธ akshatmalik18t@gmail.com

We aim to respond to all privacy-related enquiries within 30 days.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Continued use of BluffArena after changes constitutes acceptance of the revised policy.