1. Who is responsible
BrightBit Solutions, LLC, New Castle, Delaware, United States, operates PlaysBuzz at playsbuzz.one and is responsible for the personal data described in this policy. Contact us about privacy at info@playsbuzz.one.
This policy explains the information used by our website, accounts, games, purchases and support. It does not cover independent services you visit through external links. You can play our free levels without creating an account.
2. Information we process
- Account information: your display name, email address, account identifier, account creation date and a salted password hash. We do not store readable passwords.
- Progress and access: your purchased access tier, completed game and level identifiers, and your best submitted score for each completed level.
- Order records: an internal order identifier, pack, amount, currency, payment status and checkout or payment-event identifiers. Stripe handles payment details. We do not receive or store full card numbers or security codes.
- Support: the messages and attachments you choose to email us, your contact information, and the information needed to resolve the request.
- Technical information: IP addresses and request information processed to deliver the site, limit abusive requests and investigate faults. Infrastructure providers may process standard access and security logs.
- On-device information: game progress, completion times, favourites and audio or motion preferences stored in your browser. Guest progress may be copied to your account when you sign in, so it can be synchronised.
We do not request precise location, contacts, camera or microphone access. There is no public profile, chat, advertising network or third-party analytics in this version. We do not sell personal data or share it for cross-context behavioural advertising.
3. Why we use it
| Purpose | Information | Basis, where required |
|---|---|---|
| Provide accounts, games, purchases and progress sync | Account, session, order and progress data | Performance of our contract with you |
| Answer support and refund requests | Contact details, messages and relevant order records | Contract, legal obligation, or legitimate interest in helping users |
| Prevent fraud, protect accounts and maintain reliability | Technical, account and payment-event data | Legitimate interest in a secure and reliable service |
| Maintain required financial records and respond to valid legal requests | Necessary transaction and identification records | Legal obligation |
| Remember optional preferences on your device | Sound, music, motion and favourites | Your requested preference or consent, where required |
We do not use account information for unsolicited marketing. We do not make solely automated decisions producing legal or similarly significant effects. Access is granted according to confirmed purchases; contact us if you believe an access decision is incorrect.
4. Cookies and browser storage
We use the following first-party storage to provide the features you choose:
| Name | Purpose | Duration |
|---|---|---|
| pb_session | Secure, HTTP-only account session cookie | Up to 30 days; removed on sign-out |
| pb_settings | Music, sound volume and motion preferences in local storage | Until you clear browser data |
| pb_favorites | Your favourite games in local storage | Until you remove them or clear browser data |
| pb_progress and account-specific progress keys | Locally saved level completions | Until you clear browser data |
You can adjust audio and motion in Settings, sign out to remove your session, or clear site data through your browser. Blocking essential storage may prevent sign-in and saving progress. We do not use advertising or analytics cookies. Stripe may use its own storage when you visit its checkout; see Stripe's Privacy Policy.
6. How long we keep information
We retain account and saved progress information while your account is active, or until you request deletion. Active sessions expire within 30 days and expired session records are regularly removed. Rate-limiting identifiers are held in application memory for up to 15 minutes after the relevant window, unless an incident requires a separate investigation.
Support correspondence is normally retained for up to 24 months after the last interaction. Purchase and refund records may be retained for up to 7 years to meet accounting, tax, dispute and fraud-prevention obligations. A valid legal preservation requirement may require longer retention of relevant records.
When an account deletion request is verified, we aim to remove account and gameplay data from active systems within 30 days, subject to required exceptions. Limited financial records may be retained without retaining gameplay data. Backup copies are rotated out according to the backup schedule and are not restored for ordinary use after deletion. Local browser data must be cleared on each device by you.
7. International users
We are based in the United States. Depending on the hosting and payment services used, information may be processed in the United States or other countries with different privacy rules. Where the law requires safeguards for an international transfer, we use the applicable lawful mechanism, such as an adequacy decision or appropriate contractual safeguards. You can request information about relevant safeguards by email.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, receive a portable copy of, restrict or object to certain uses of your personal data. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. You can export account information from your account panel. For other requests, email us from your account address and explain what you need.
We may reasonably verify identity before acting on a request. We will respond within the applicable legal timeframe and explain any lawful exception. We do not discriminate against users who exercise privacy rights. Where available, an authorised agent may submit a request with evidence of authority, and you may appeal a decision by replying with “Privacy appeal.”
EEA and UK residents may also complain to their local data protection authority. Other residents may contact the privacy regulator or attorney general in their jurisdiction. Our policy is not to sell or share personal information for targeted advertising, so no such sale or sharing takes place regardless of a browser's opt-out signal.
9. Children and young players
PlaysBuzz is not directed to children under 13, and we do not knowingly collect their account information. Users aged 13 to the age of legal majority need a parent or guardian's permission. Where local law requires a higher minimum age or specific consent, that requirement applies. Purchases are for adults.
If you believe a child under the permitted age has provided personal information, contact us. We will investigate and remove information that we are not authorised to retain.
10. Keeping information safe
We use measures designed to protect account data, including password hashing, HTTP-only sessions, server-side access checks and payment signature verification. The published Service uses encrypted HTTPS connections. No internet service or storage system can be guaranteed completely secure. Use a unique password and contact us if you notice suspicious activity.
11. Policy changes and contact
We may update this policy when our practices or obligations change. We will update the date and provide additional notice for material changes when required. Contact info@playsbuzz.one for privacy questions, a data request or information about our providers.
BrightBit Solutions, LLC
New Castle, Delaware, United States