Who this policy covers
This policy applies to bopbits.com, its game pages, and BopBits game player pages hosted on the same domain. BopBits is the publisher responsible for these pages.
Information used to provide the site
When you visit, our hosting and security provider, Cloudflare, processes ordinary network and device information such as IP address, request time, browser details, requested URL, and security signals. This is used to deliver the site, prevent abuse, diagnose failures, and keep the service available.
Your browser may also store small first-party values for functional preferences, including recently played games and your analytics choice. These stay in your browser unless you clear site data.
Cookieless aggregate counters
BopBits sends a small set of same-origin counters for page views, play requests, player loads, first game interactions, and natural game breaks. The counter payload uses no cookie, local storage value, account, advertising ID, client ID, or session ID. Stored counter records contain only the event name, page path, game ID where relevant, coarse acquisition channel, event time, and two-letter country code supplied at the Cloudflare edge. The payload does not include query strings, raw referrers, or browser identifiers.
These aggregate counters help us find country-level loading and play friction, but they cannot recognize a person or return visit and are not used for advertising. Retention cohorts are measured only from optional PostHog analytics after consent.
Product diagnostics and optional analytics
BopBits uses PostHog session replay and product diagnostics to reproduce display, input, performance, and gameplay bugs. Replays can include page interactions, text entered into site inputs, and game visuals. They do not use a BopBits account or advertising ID. Do not enter personal or sensitive information into BopBits inputs.
If you select Allow in the analytics panel, BopBits additionally records a bounded set of gameplay events such as page views, game starts, first interactions, completions, and retries. Autocapture is disabled. Raw search text is not attached to these events, full landing URLs are reduced to paths, and referrers are reduced to host names. Selecting No thanks disables these additional events; the product diagnostics described above remain active.
Advertising and Google AdSense
BopBits uses Google AdSense and AdSense H5 Games Ads to fund the free site. Google and its advertising partners may use cookies, web beacons, IP addresses, device information, and similar identifiers to select, deliver, secure, and measure ads. Google may personalize ads where permitted and where valid consent has been given; otherwise ads may be non-personalized or limited.
Third-party vendors, including Google, may use advertising cookies based on visits to BopBits or other sites. Read how Google uses information from sites that use its services and manage personalization in Google Ads Settings.
Consent and regional privacy choices
For visitors in the EEA, the UK, and Switzerland, BopBits uses Google’s certified consent management platform to request the choices required for advertising. Where applicable, Google’s privacy message also supports US state privacy opt-out choices. The available options depend on location and applicable law.
YOUR CONTROLS
Review your privacy choices
Optional gameplay events and advertising use separate controls. Changing one does not silently change the other.
Sharing and service providers
We share information only as needed with service providers that operate the site: Cloudflare for delivery, security, and cookieless aggregate counters; PostHog for product diagnostics, session replay, and optional gameplay analytics; and Google and participating ad technology providers for advertising. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.
Retention and security
Functional browser storage remains until you clear it. Security logs and aggregate counters are kept only as long as reasonably needed for reliability, abuse prevention, product quality, and legal obligations. PostHog replay and analytics currently use a 30-day replay retention setting and are periodically reviewed so they are not kept longer than needed for product analysis.
Children
BopBits is a general-audience service and is not directed to children under 13. We do not knowingly ask children for names, contact details, or account information. Parents and guardians can disable optional analytics, manage advertising privacy choices, and clear site data through the browser.
Changes to this policy
We may update this policy when the site, vendors, or legal requirements change. The effective date at the top will change when an update is published. Material changes may also be highlighted on the site or through the relevant consent message.