Boomchain Privacy Policy

This policy covers Boomchain, a game published by Can You Games. It applies to the Android app distributed on Google Play under the package name com.canyougames.boomchain, and to the browser version of the same game wherever it is playable on the web.

The short version: Boomchain is free and supported by advertising. We run no server, no accounts, and no analytics of our own — your progress is written to your own device and stays there. The one place data leaves your device is advertising: ads are served by Google AdMob, which uses your device’s advertising ID and related technical data to select and measure the ads you see. That is described in full below, because it is the part that actually matters.

Google Play Data safety summary

For anyone cross-checking this policy against the Data safety section of the Google Play listing:

• Collected and shared for advertising: device or other identifiers (the Android advertising ID), IP address and the approximate region derived from it, device and app technical information, and your interactions with ads. This is collected by the Google AdMob SDK inside the app and shared with Google, which acts as an independent controller of it.
• Collected by us: nothing. We operate no server, no login, and no analytics. We do not receive your advertising ID, IP address, or any per-player data — only aggregate revenue and impression counts in the AdMob dashboard.
• Game progress: stored on your device only, never transmitted anywhere.
• Encrypted in transit: yes — ad requests use HTTPS.
• Deletion: uninstalling the app or clearing its storage erases all saved progress. You can delete or reset the advertising ID at any time in Android Settings (see “Your choices about ads” below).

Advertising (Google AdMob)

Ads in Boomchain are served by Google AdMob, a Google service. There are two placements, both of which you can see coming:

• Interstitial — a full-screen ad shown between runs, at natural breaks. Never during play.
• Rewarded — an optional ad you can choose to watch to revive after a death. It is always your choice; declining costs you nothing but the revive.

To select, cap, and measure those ads, the AdMob SDK collects information from your device. Google describes this in detail in its own documentation, but in practice it includes:

• The Android advertising ID — a resettable identifier assigned by the operating system for advertising purposes.
• Your IP address, and the approximate location (typically city or region level) inferred from it. The app does not request GPS or any location permission.
• Device and app technical data: device model, operating system version, language, screen characteristics, the app’s package name and version, and network type.
• Ad interaction data: which ads were requested, shown, watched to completion, closed, or clicked, and coarse timing around those events.

This data goes to Google, not to us. Google acts as an independent controller of it and uses it under its own terms, including to serve and measure ads across the apps and sites in its network. We receive only aggregate reporting — impressions, fill rate, revenue — with no per-player detail. What Google does with the data is governed by the Google Privacy Policy and How Google uses information from sites or apps that use our services. Google may also share ad requests with third-party bidders and measurement partners; the current list of those companies is published by Google at its ad technology providers page.

We do not run our own advertising network, do not build player profiles, and do not upload your game data — scores, coins, settings — to any ad system. Nothing you do inside the game is passed to an advertiser.

Consent, and personalised vs non-personalised ads

Where the law requires consent before personalised advertising — the EEA, the UK, and Switzerland under the GDPR and ePrivacy rules — Boomchain shows a consent prompt from Google’s certified consent management platform (the User Messaging Platform) before any personalised ad is requested. Your answer is recorded on the device and honoured on every subsequent ad request.

• If you consent — ads may be personalised, meaning selected using your advertising ID and Google’s inferences about your interests.
• If you decline — you will still see ads, but non-personalised ones: chosen from general context rather than your interest profile. Non-personalised ads still use limited data such as coarse location and the app itself for frequency capping and fraud prevention, as Google describes.
• Changing your mind — you can revisit the consent choice from the privacy option in the game’s settings screen, where the consent form is available again at any time.

The game remains fully playable either way. Declining personalised ads does not lock content, reduce rewards, or degrade the experience.

Your choices about ads

• Reset or delete your advertising ID — on most Android devices: Settings → Privacy → Ads. Resetting it breaks the link to any profile built against the old ID. On Android 12 and later you can delete it outright, after which apps receive a string of zeroes instead.
• Opt out of ad personalisation — the same Android Settings screen has an opt-out toggle that applies system-wide, independently of any choice you make in this game.
• Google’s own ad settings — visit My Ad Center to control personalisation across Google services.
• Play offline — the game itself needs no network connection. With the device offline, no ad request can be made and no ad data leaves the device; ad slots are simply skipped.

What the game saves on your device

Boomchain writes a handful of small configuration files into its own private app storage — the sandboxed directory Android gives every app, which no other app can read. These files contain game state only, no identifiers, and are never transmitted:

• angler.cfg — your best run: high score, furthest depth, and per-run records.
• angler_meta.cfg — your coins, unlocked upgrades, unlocked skins, and which skin is equipped.
• angler_opts.cfg — settings: music volume, sound effects volume, and display preferences.
• angler_iap.cfg — a local record of store-related unlocks, written only if store functionality is ever active (see “In-app purchases” below).

The AdMob SDK additionally stores its own small amount of state on the device — your consent choice and frequency-capping data — under Google’s control rather than ours.

The Android build is packaged with automatic backup disabled (allowBackup="false"), so none of this is copied to Google Drive or transferred to a new device. Progress lives on one device, and deleting the app deletes it.

What we don’t collect

• No account, sign-in, email address, or username.
• No name, phone number, address, or payment information.
• No GPS or network location permission — the app never asks for your location, and the only location signal in the system is the approximate region Google infers from your IP for ad serving.
• No access to your camera, microphone, contacts, calendar, photos, files, call logs, or installed-app list.
• No analytics or telemetry of our own: no session recording, no event tracking, no crash-reporting SDK.
• No sale of personal information to data brokers, and no sharing of anything beyond what the AdMob SDK collects for advertising.

Permissions

The Android package declares network permissions — INTERNET and ACCESS_NETWORK_STATE — used to request ads and to check whether a connection exists before trying. It also declares com.google.android.gms.permission.AD_ID, which Google requires for any app that reads the advertising ID; the Google Mobile Ads SDK adds it automatically.

No runtime permission prompts appear: none of these are in the permission groups Android asks you to approve. Game assets, including all music and sound, are bundled inside the app, so gameplay itself never touches the network.

Children’s privacy

Boomchain is a general-audience arcade game. It is not directed at children under 13, and it is not enrolled in the Google Play Families programme. We do not knowingly collect personal information from children.

Because the app is ad-supported, this matters more than it would in an ad-free game: personalised advertising is not shown to users identified as below the applicable age of consent. Where a user is under that age — or where consent for personalised ads is declined or unavailable — ad requests are made non-personalised. If you believe a child has used the app and you want the advertising association broken, delete or reset the device advertising ID as described above; that severs the link Google’s systems use.

If you are a parent with questions, email [email protected].

In-app purchases

The released Android version has no in-app purchases. Every skin, upgrade, and unlock in the game is bought with coins earned by playing — the game is supported by ads instead. There is no real-money currency and no checkout flow.

If in-app purchases are introduced later, the transaction would be handled entirely by Google Play — Google, not us, would process payment details, governed by the Google Privacy Policy. We would receive aggregate sales reports, never your card number or billing address.

The browser version

Boomchain also runs in a web browser. The browser build stores the same progress data in your browser’s storage for the page (IndexedDB or localStorage, depending on the host) under the keys boomchain_best, boomchain_meta, and boomchain_opts. Clearing site data removes them. It also downloads its music tracks from the same server that served the game page, a plain file request with no identifiers attached.

The browser build does not use AdMob. If you are playing Boomchain embedded on a third-party games portal, that portal’s own SDK serves the ads and may store your progress against your account on that portal — what the portal collects is governed by the portal’s privacy policy, not this one. When you play on canyougames.com, no portal SDK is involved. Web hosting for canyougames.com produces standard server access logs, described in our site-wide privacy policy.

What Google Play collects

Separately from the game and from ads, Google Play collects data when you download or update any app — install and uninstall events, device model, crash traces the operating system reports, and whatever else Google’s policies describe. We see only aggregate, anonymised versions of some of this in the Play Console. That collection is Google’s, governed by the Google Privacy Policy, and outside our control.

Your rights (GDPR, CCPA, and equivalents)

We hold no personal data about Boomchain players on any server of ours, so requests directed at us have very little to act on. The data that does exist is either on your device or held by Google as an independent controller:

• Access and portability — we hold nothing to disclose. For ad-related data, exercise the right with Google, which holds it.
• Deletion — uninstall the app, or Android Settings → Apps → Boomchain → Storage → Clear data, which erases all local progress. Delete or reset your advertising ID to cut the advertising link.
• Withdraw consent — reopen the consent form from the game’s settings screen at any time; withdrawal applies to all subsequent ad requests.
• Do Not Sell or Share (California) — we do not sell personal information for money. Personalised advertising may qualify as “sharing” for cross-context behavioural advertising under the CPRA. Declining personalised ads in the consent form, or opting out of ad personalisation in Android Settings, is the opt-out mechanism for this app.
• Complaint — you may lodge a complaint with your local data protection authority.

The legal basis for personalised advertising, where the GDPR applies, is your consent. The basis for the minimal data used in non-personalised ads — fraud prevention, frequency capping — is legitimate interest, as described by Google.

Security

There is no player database to breach, no password to steal, and no server of ours holding your progress. Ad requests are made over HTTPS. The Android app is signed with a private release key and distributed through Google Play, which verifies package integrity on install.

If you find a security or privacy issue in the game — unexpected network traffic, data written where it should not be, anything that contradicts this page — report it to [email protected] with reproduction steps.

Changes to this policy

If Boomchain’s data practices change — a different ad network or mediation partner, a leaderboard, cloud saves, in-app purchases — this page will be updated before the version that introduces the change is released, and the “last updated” date at the top will move. Material changes will be described explicitly rather than folded silently into existing text.

Contact

Boomchain is published by Can You Games. Questions about this policy, or about anything the game does on your device, go to [email protected]. For the policy covering the games on canyougames.com itself, see the site privacy policy and the terms of use.