Privacy, in plain language.

Who this policy covers

This policy applies to bopbits.com, its game pages, BopBits game player pages hosted on the same domain, and the BopBits mobile apps listed below. BopBits is published by OPENVERSE CO, which is responsible for these pages and apps.

Mobile apps

This section covers these apps, published by OPENVERSE CO on Google Play and the App Store:

• BopBits (com.bopbits.mobile)
• Capy Mart (com.bopbits.capymart)
• Bop Army (com.bopbits.boparmy)
• Bop Blast (com.bopbits.bopblast)
• Bop Restore (com.bopbits.boprestore)
• Bop Scrapworks (com.bopbits.bopscrapworks)
• Bop Hole (com.bopbits.bophole)
• Capy Reef (com.bopbits.capyreef)

The apps need no BopBits account. Game progress and settings are saved on your device. Offline preview versions do not initialize advertising SDKs. BopBits and Capy Mart versions that include ads use Google AdMob to load rewarded and interstitial ads.

In those versions, Google’s SDK may collect IP addresses (including approximate location derived from them), device identifiers, app and ad interactions, and diagnostic information to deliver and measure ads, prevent fraud, and maintain its services. Advertising requests require an internet connection. Consent choices are requested where required before ads load. Use the Ad privacy choices control in the app to revisit available choices. Declining personalized ads does not delete your game progress.

Read Google’s iOS data disclosure, Android data disclosure, and Privacy Policy. The app does not request access to contacts, photos, camera, or precise location. Ad payment callback records are kept in a bounded local log; this version does not upload that log to BopBits analytics.

A link that leaves an app, such as to this policy, opens in your browser, where the website sections of this policy apply. The website analytics sections below describe bopbits.com. The mobile advertising practices are described above.

Information used to provide the site

When you visit, our hosting and security provider, Cloudflare, processes ordinary network and device information such as IP address, request time, browser details, requested URL, and security signals. This is used to deliver the site, prevent abuse, diagnose failures, and keep the service available.

Your browser may also store small first-party values for functional preferences, including recently played games and your analytics choice. These stay in your browser unless you clear site data.

Cookieless aggregate counters

BopBits sends a small set of same-origin counters for page views, play requests, player loads, first game interactions, and natural game breaks. The counter payload uses no cookie, local storage value, account, advertising ID, client ID, or session ID. Stored counter records contain only the event name, page path, game ID where relevant, coarse acquisition channel, event time, and two-letter country code supplied at the Cloudflare edge. The payload does not include query strings, raw referrers, or browser identifiers.

These aggregate counters help us find country-level loading and play friction, but they cannot recognize a person or return visit and are not used for advertising. Retention cohorts are measured only from optional PostHog analytics after consent.

Cookieless product analytics and optional diagnostics

BopBits sends PostHog a bounded set of events such as page views, play requests, player loads, first interactions, completions, failures, retries, and Core Web Vitals. Before consent—or after you select No thanks—PostHog operates in stateless cookieless mode. Those events are not joined into a returning visitor profile. Automatic page, click, input, and console-log capture is disabled.

Visual diagnostics record the session — what is drawn and how the page is used — so display, input, performance, and gameplay bugs can be reproduced. They run on every session, not only after Allow, and they mask site inputs so what you type is not recorded. If you select Allow, BopBits can additionally recognize an anonymous returning browser for D1/D7 product measurement and capture unhandled exceptions. None of this uses a BopBits account or advertising ID.

Raw search text and email addresses are not attached to analytics events. Landing URLs are reduced to paths without query strings, referrers are reduced to host names, and diagnostic messages are filtered before collection. You can change this choice at any time.

Google Analytics

BopBits also uses Google Analytics 4 to measure aggregate website usage, such as pages viewed, referrer, device type, and approximate location. No advertising features or Google signals are enabled for this measurement. See Google's privacy policy for how Google handles this data.

Advertising and Google AdSense

BopBits uses Google AdSense and AdSense H5 Games Ads to fund the free site. Google and its advertising partners may use cookies, web beacons, IP addresses, device information, and similar identifiers to select, deliver, secure, and measure ads. Google may personalize ads where permitted and where valid consent has been given; otherwise ads may be non-personalized or limited.

Third-party vendors, including Google, may use advertising cookies based on visits to BopBits or other sites. Read how Google uses information from sites that use its services and manage personalization in Google Ads Settings.

Consent and regional privacy choices

For visitors in the EEA, the UK, and Switzerland, BopBits uses Google’s certified consent management platform to request the choices required for advertising. Where applicable, Google’s privacy message also supports US state privacy opt-out choices. The available options depend on location and applicable law.

Sharing and service providers

We share information only as needed with service providers that operate the site: Cloudflare for delivery, security, and cookieless aggregate counters; PostHog for cookieless product analytics and visual diagnostics and, after Allow, returning-visit measurement and exception diagnostics; Google Analytics for aggregate website usage measurement; and Google and participating ad technology providers for advertising. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

Retention and security

Functional browser storage remains until you clear it. Security logs and aggregate counters are kept only as long as reasonably needed for reliability, abuse prevention, product quality, and legal obligations. PostHog analytics and visual diagnostics currently use a 30-day retention setting and are periodically reviewed so they are not kept longer than needed for product analysis.

Children

BopBits is a general-audience service and is not directed to children under 13. We do not knowingly ask children for names, contact details, or account information. Parents and guardians can decline returning-visit measurement and exception diagnostics, manage advertising privacy choices, and clear site data through the browser. The mobile advertising practices described above also apply when an ad-supported app is used; offline preview versions do not initialize advertising SDKs.

Your rights and how to exercise them

Depending on where you live, you may have the right to ask what personal data a publisher holds about you, to have it corrected or deleted, to object to or restrict certain processing, and to withdraw consent you previously gave. Because BopBits has no accounts, most of what this site uses is either cookieless or stored only in your own browser, so clearing site data removes it immediately and the on-page controls above withdraw consent without contacting us.

For anything the on-page controls cannot do, email support@bopbits.com with "Privacy" in the subject line and describe what you are asking for. We may need to ask for information that helps us locate the relevant records, and we will not use that information for any other purpose. If you are in the EEA or UK you may also complain to your local supervisory authority.

Who to contact

OPENVERSE CO, publishing as BopBits, is the data controller for bopbits.com, the game player pages hosted on it, and the mobile apps listed above. Write to support@bopbits.com for privacy requests, advertising concerns, rights claims, or anything else about this policy. We aim to reply within five working days. Our contact page lists what to include so we can answer without a second round trip.

Changes to this policy

We may update this policy when the site, vendors, or legal requirements change. The effective date at the top will change when an update is published. Material changes may also be highlighted on the site or through the relevant consent message.