Privacy Policy

This Privacy Policy describes how Abdulla AAA Gaming Studio (Trade License No. 1632131, Dubai, UAE) ("we", "us", or "our") collects, uses, and safeguards information when you play Crypto Brawler or visit our websites.

1. Scope & Commitment to Player Privacy

Crypto Brawler is an educational and entertainment gaming application. We believe in minimal data collection and transparent processing. We do not sell your personal information to data brokers or advertisers.

2. Information We Collect

• Guest Gameplay: If you play as a guest, your progress, cosmetic unlocks, and virtual tokens are stored locally on your device via browser localStorage. No personal identity is transmitted to or stored on our servers.
• Registered Accounts: When signing in via Google Authentication or email, we collect your authentication UID, email address, chosen fighter nickname, and in-game achievements to maintain cross-session cloud synchronization.
• Payment Data: All in-app purchases of virtual Bcoin packs are processed directly by certified third-party payment gateways (e.g. Stripe, Apple Pay, Google Pay). We do not collect, process, or store your credit card, bank account, or financial credentials on our systems.
• Simulated Price Data & Web3: While the game simulates cryptocurrency market conditions, we never request, store, or have access to private cryptographic keys or seed phrases. Any Web3 wallet connection is purely client-side read-only for authentication/in-game cosmetic attribution.
• Campaign sources: We save campaign tags, the referring hostname and an inferred traffic source with registrations. The browser retains the last identifiable source for up to 30 days. This helps us understand which campaigns bring players to the game.
• Technical Telemetry: Standard diagnostic data such as browser user-agent, operating system, and anonymous performance analytics (via Google Analytics 4) to monitor game stability and latency.

3. How We Use Information

We use collected data solely to:

• Deliver and maintain real-time game rounds, match leaderboards, and tournament gauntlets.
• Measure campaign visits and completed registrations.
• Verify and credit virtual in-game token packages and unlocked fighter skins.
• Detect, investigate, and prevent exploits, fraudulent access, or malicious server attacks.
• Comply with applicable legal obligations under UAE law and consumer protection mandates.

4. Data Retention & Security

We implement robust technical safeguards, encrypted data transmission (HTTPS/TLS 1.3), and strict Firebase Firestore security rules to protect user profiles. Non-registered guest data remains under your direct control and can be cleared at any time by clearing your browser cache.

5. Your Rights (UAE PDPL & International Standards)

In accordance with UAE Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection (PDPL) and international privacy frameworks, you have the right to:

• Request access to the personal data we hold about your account.
• Request immediate correction or deletion of your profile and leaderboard history.
• Withdraw consent or opt-out of optional analytics cookies.

To exercise any of these rights, contact our Data Protection representative at drakweel@gmail.com.

6. Third-Party Services

Our game utilizes trusted third-party infrastructure providers:

• Google Firebase: Cloud hosting, authentication, and secure Firestore database.
• Google Analytics 4: Aggregate, anonymized traffic and gameplay event diagnostics.
• X advertising pixel: On the game, tutorial and welcome pages, X receives website-visit signals and a conversion event after a fighter profile is saved. These signals help measure advertising results. Our registration event sends a random conversion ID for deduplication; we do not add the fighter name, email address or phone number to that event. X may use browser, cookie and ad-click information collected by its pixel. See X’s Privacy Policy.
• Stripe: PCI-DSS compliant payment processing for optional virtual currency bundles.