Wersja polska: Polityka prywatności
Bimbalo privacy policy
Effective from 10 November 2026. Covers the Bimbalo game for Android and the bimbalo.pl website.
In short
- The game needs no account and shows no ads.
- We send game statistics and level ratings only if you agree. You can withdraw your consent at any time in the game settings.
- The game does not collect your name, e-mail address, phone number or location. Statistics that are sent are marked with a random statistics number, created only when you give consent.
- The game asks for your year of birth; the year stays on your phone. Below the age threshold of your country (16 in Poland) the game does not ask for consent and sends no statistics (section 7). Without consent the game works the same.
- The bimbalo.pl website uses no cookies and no analytics tools.
1. Who is responsible for your data
The controller of your data is ELIPSA Krzysztof Popielarski, tax ID (NIP) 6472193742, ul. 26 Marca 7, 44-300 Wodzisław Śląski, Poland.
For anything about personal data, write to privacy@bimbalo.pl.
2. State of the game — what is not there yet
The game is being tested. This policy describes how the game works today. What it does not have yet:
- Google Play. The game is not available in the Google Play Store yet; we distribute it as a test version. When it reaches the store, we will update this policy.
- Parental consent. Below the age threshold the game collects no statistics; there is no way in the game for a parent to give consent.
- Automatic deletion of statistics. When the retention period ends (section 4), we delete them manually.
3. Data stored only on your phone
The game stores on your phone your settings, scores and unlocked levels, statistics of your attempts and your year of birth if you give it. It stores the statistics even if you do not agree to sending. Level ratings are not stored on the phone — they only wait there to be sent while sending is on.
Statistics number. The random number the game attaches to the statistics it sends is created only when you agree to sending (section 4). It disappears when you withdraw consent; if you agree again, the game creates a new number. You can see the first 8 characters of the number on the “About” screen (in the settings: “About and licenses”).
To set the age threshold, the game reads the country of your SIM card and the country in your phone settings. It does not store or send it.
This data does not reach us. The exception is statistics and ratings sent with your consent (section 4).
Android backup includes settings, scores, unlocked levels and the statistics stored on the phone. Consent, year of birth and the statistics number are not backed up — after restoring a backup on a new phone the game asks again. Uninstalling the game removes the data from the phone.
The game uses only two permissions: vibration and internet (internet is used only to send statistics). It has no access to your location, contacts, camera, microphone or files.
4. Statistics and ratings sent with your consent
After your first attempt at a level (completed or not) the game asks for your year of birth. If you have reached the age required in your country (section 7), it asks whether it may send game statistics and your level ratings to its author. You can skip the year question or answer “No” — the game works the same. Nothing is sent before you agree.
| What we send | For each attempt at a level: the time, level number and game version, the result (completed, game over, quit), duration, points by source, causes of losing the ball, lives lost, bonuses collected, use of the shield and smash skills, smoothness (frame times) and game settings (including sensitivity, sound, vibration, scaling, look, ball skin). Your level ratings: number of stars, the level, whether it was completed, and an optional comment. Also: the statistics number (section 3), phone maker and model, Android version, screen size and refresh rate, whether the phone has a gravity sensor and whether it can adjust vibration strength. |
|---|---|
| What we do not send | Your name, e-mail address, phone number, location, contacts, advertising ID, year of birth or country. |
| Rating comments | You write the comment yourself. Please do not include personal data in it — if you do, it reaches us together with the rating. |
| Why | To tune the difficulty of the levels and to find problems with how the game runs on different phones. |
| Legal basis | Your consent (Article 6(1)(a) GDPR). |
| Withdrawing consent | In the game settings: “Send statistics: off”. The game stops sending, deletes what was waiting on the phone and removes the statistics number. Withdrawing consent does not affect the lawfulness of what was sent before; you can have that data deleted — section 8. Send your deletion request before you withdraw consent. |
| Where it goes | To a Google spreadsheet (Google Sheets), through a Google Apps Script, in the controller's Google account. These services are provided by Google, which stores data on its servers, including outside the European Economic Area (for example in the USA). Google LLC participates in the EU-U.S. Data Privacy Framework, for which the European Commission found an adequate level of protection (decision of 10 July 2023). When data is sent, Google sees the IP address of your connection; we do not receive it. |
| How long | Until we finish tuning the difficulty of the levels, at most 24 months from receiving the data. |
5. E-mails and test sign-ups
When you write to an address in the bimbalo.pl domain (for example support@, contact@, privacy@, beta@), we process your e-mail address, the content of your message and attachments.
| Why | To reply and deal with your matter. |
|---|---|
| Legal basis | Our legitimate interest in replying to your message (Article 6(1)(f) GDPR); for personal data requests — a legal obligation (Article 6(1)(c) GDPR together with Articles 12–22 GDPR). |
| Who handles it | OVH — operator of the bimbalo.pl domain and its mailbox (servers in the EU). From that mailbox, mail is collected by the controller's server in Poland. |
| How long | Until your matter is dealt with, then at most 12 months. |
Signing up for testing (beta@bimbalo.pl)
| What | The e-mail address you write from, the Google account address you give in the sign-up, and whether you are at least 16 or are being signed up by a parent or guardian. |
|---|---|
| Why | To invite you to test the game. When testing opens on Google Play, we will add your Google account address to the tester list in Google Play Console (a Google service) and send you a link to the test. |
| Legal basis | Your consent (Article 6(1)(a) GDPR), given by sending the sign-up. You can withdraw it by writing to beta@bimbalo.pl — we will delete your sign-up and remove your address from the tester list. |
| Age | You can sign up yourself from the age of 16. For younger people, a parent or guardian sends the sign-up. |
| How long | Until testing ends; then we delete the sign-up and remove the address from the tester list. |
6. The bimbalo.pl website
The website uses no cookies, stores nothing in your browser and uses no analytics tools or resources from other servers (fonts, scripts, images).
The website is hosted by OVHcloud on servers in the European Union. Like every server, it keeps logs: IP address, date and time, the page address and the browser name. They are used to keep the website running and secure (our legitimate interest, Article 6(1)(f) GDPR). OVH keeps these logs for a period it sets itself; we do not download or analyse them.
7. Children and teenagers
The game is intended for people aged 13 and over.
You can agree to sending statistics on your own only if you have reached the age required in your country: in Poland — 16 (Article 8 GDPR); in other EU countries between 13 and 16; elsewhere it varies.
The game sets the threshold from the country of your SIM card or, without a card, the country in your phone settings. If they point to different countries, it uses the higher threshold; if it does not know the country or the country is not in its table — 18. It counts your age from the year of birth cautiously, as if this year's birthday has not happened yet. Below the threshold the game does not ask for consent, sends no statistics and deletes anything waiting to be sent. The game checks the threshold at every start; if it turns out higher than your age (e.g. after changing the SIM card), it withdraws consent, deletes what was waiting to be sent and removes the statistics number.
The game cannot check whether the year given is true. Parents: if your child below the threshold gave a different year and agreed to sending, first send the “Delete my data” request from the “About” screen, then turn sending off in the game settings (“Send statistics: off”) — section 8.
8. Your rights
You have the right to:
- access your data and receive a copy (Article 15 GDPR),
- have your data corrected (Article 16),
- have your data deleted (Article 17),
- restrict processing (Article 18),
- data portability for data processed on the basis of consent (Article 20),
- object to processing based on legitimate interest (Article 21),
- withdraw consent at any time (Article 7(3)),
- lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or with the authority in your own country.
How to identify your statistics. The statistics we receive do not include your name or e-mail — we recognise them by the statistics number. Send a request to access or delete your data with the “Delete my data” link on the “About” screen in the game: it opens a message to privacy@bimbalo.pl with the full number (if you want a copy of your data rather than deletion, say so in the message).
Send your request before you withdraw consent — after that the number disappears and your data can no longer be identified. If you no longer have the number, write to privacy@bimbalo.pl and give your phone model and the approximate dates you played; if this is not enough to identify your data with certainty, we will tell you (Article 11(2) GDPR).
We do not make automated decisions about you and do not profile you.
Providing data is voluntary. Without consent to sending statistics, the game works the same.
9. Changes to this policy
The current version is always at bimbalo.pl/privacy (in Polish: bimbalo.pl/pl/privacy), and the date it took effect is at the top of the page.