Privacy Policy
Last updated: July 22, 2026
This policy explains what bbBinge collects, why, and what you can do about it. It covers bbbinge.com and the bbBinge game and membership, operated by [LEGAL ENTITY — to be confirmed] ("bbBinge," "we," "us").
The short version. We collect your email, your password in scrambled form, and how you did in the games. Payments are handled by Stripe and we never see your card number. We do not sell your information. You can ask us to delete everything and we will.
1. What we collect
- Your email address — this is how you sign in and how we send you receipts and billing notices.
- Your password, scrambled — we store a one-way scrambled version (PBKDF2), never the password itself. We cannot read it and neither can anyone who obtained the file.
- How you play — your streak, your scores, your rank, your progress and your results. This is what makes your account worth having; it is why your streak survives you changing phones.
- Billing status — whether you are a member, which plan, and when the period ends. Stripe holds the payment details; we hold a customer reference.
- If you joined a waiting list — your email, where you came from, your referral code, and which play-in group you were assigned.
- Basic technical data — standard server logs used to run and protect the site.
We do not ask for your real name, your address, your phone number, or your date of birth, and we do not want them.
2. What we do with it
- Run the games and keep your progress attached to you rather than to one device.
- Take payment, and send you receipts and the notices the law requires before a charge.
- Send you email about your account — your streak, your standing, what is starting. You can turn this off and still keep your account.
- Keep the Service working and stop people abusing it.
3. Who else sees it
We do not sell your personal information and we do not share it for anyone else's advertising. We use a small number of providers to run the Service:
| Who | What for | What they get |
|---|---|---|
| Stripe | Payments | Your card details, which go straight to them. We receive a confirmation and a customer reference. |
| Cloudflare | Hosting, database, email delivery | Everything above, stored and served on our behalf. |
We will also disclose information if the law requires it, or to protect someone's safety.
4. Children
bbBinge accounts are for adults, 18 and over. Children are welcome to play on a parent or guardian's account, under that adult's supervision — in which case the account and everything in it belongs to the adult, and we have no way of knowing a child was playing.
We do not knowingly collect personal information from anyone under 13. If you are a parent and you believe your child created their own account, email us and we will delete the account and its data. We will not ask you to prove anything first.
5. Cookies
We use one cookie, and only after you sign in: a session cookie that keeps you signed in. It is HttpOnly and Secure, meaning scripts on the page cannot read it and it is only ever sent over an encrypted connection. It lasts 30 days or until you sign out.
We do not use advertising cookies or third-party trackers on bbBinge.
6. How long we keep it
We keep your account and its data for as long as your account exists. If you delete your account we remove your personal information promptly; some records of transactions are kept where we are legally required to keep them. Backups roll off on their own schedule.
7. What you can ask us to do
- See it — ask for a copy of what we hold about you.
- Fix it — correct anything wrong.
- Delete it — close your account and remove your personal information.
- Stop emailing you — unsubscribe from anything that is not a receipt or a legally required billing notice.
Email us and we will do it. We will not make you justify it, and we will not make it hard.
Depending on where you live you may have additional rights — for example under the California Consumer Privacy Act or the UK and EU GDPR. We honour the requests above for everyone, wherever you are, which covers most of them. If bbBinge takes customers in the EU or UK, this section needs a lawyer to complete it properly.
8. Security, honestly stated
Passwords are stored scrambled and never in the clear. Sessions use HttpOnly, Secure cookies. Card numbers never touch our systems. That said, no service is perfectly secure, and we will not pretend otherwise. If a breach ever affects your information, we will tell you.
9. Changes
If we change this policy in a way that matters, we will say so on this page and, for anything significant, by email. The date at the top always tells you the current version.
10. Contact
[SUPPORT EMAIL — to be confirmed] — privacy questions, deletion requests, or anything about your data.