Who this policy covers
This policy applies to bopbits.com, its game pages, and BopBits game player pages hosted on the same domain. BopBits is the publisher responsible for these pages.
Information used to provide the site
When you visit, our hosting and security provider, Cloudflare, processes ordinary network and device information such as IP address, request time, browser details, requested URL, and security signals. This is used to deliver the site, prevent abuse, diagnose failures, and keep the service available.
Your browser may also store small first-party values for functional preferences, including recently played games and your analytics choice. These stay in your browser unless you clear site data.
Cookieless aggregate counters
BopBits sends a small set of same-origin counters for page views, play requests, player loads, first game interactions, and natural game breaks. The counter payload uses no cookie, local storage value, account, advertising ID, client ID, or session ID. Stored counter records contain only the event name, page path, game ID where relevant, coarse acquisition channel, event time, and two-letter country code supplied at the Cloudflare edge. The payload does not include query strings, raw referrers, or browser identifiers.
These aggregate counters help us find country-level loading and play friction, but they cannot recognize a person or return visit and are not used for advertising. Retention cohorts are measured only from optional PostHog analytics after consent.
Cookieless product analytics and optional diagnostics
BopBits sends PostHog a bounded set of events such as page views, play requests, player loads, first interactions, completions, failures, retries, and Core Web Vitals. Before consent—or after you select No thanks—PostHog operates in stateless cookieless mode. Those events are not joined into a returning visitor profile. Automatic page, click, input, and console-log capture is disabled.
Visual diagnostics record the session — what is drawn and how the page is used — so display, input, performance, and gameplay bugs can be reproduced. They run on every session, not only after Allow, and they mask site inputs so what you type is not recorded. If you select Allow, BopBits can additionally recognize an anonymous returning browser for D1/D7 product measurement and capture unhandled exceptions. None of this uses a BopBits account or advertising ID.
Raw search text and email addresses are not attached to analytics events. Landing URLs are reduced to paths without query strings, referrers are reduced to host names, and diagnostic messages are filtered before collection. You can change this choice at any time.
Advertising and Google AdSense
BopBits uses Google AdSense and AdSense H5 Games Ads to fund the free site. Google and its advertising partners may use cookies, web beacons, IP addresses, device information, and similar identifiers to select, deliver, secure, and measure ads. Google may personalize ads where permitted and where valid consent has been given; otherwise ads may be non-personalized or limited.
Third-party vendors, including Google, may use advertising cookies based on visits to BopBits or other sites. Read how Google uses information from sites that use its services and manage personalization in Google Ads Settings.
Consent and regional privacy choices
For visitors in the EEA, the UK, and Switzerland, BopBits uses Google’s certified consent management platform to request the choices required for advertising. Where applicable, Google’s privacy message also supports US state privacy opt-out choices. The available options depend on location and applicable law.
YOUR CONTROLS
Review your privacy choices
Returning-visit measurement, exception diagnostics, and advertising use separate controls. Changing one does not silently change the other. Visual diagnostics are not covered by the Allow choice; they run on every session as described above.
Sharing and service providers
We share information only as needed with service providers that operate the site: Cloudflare for delivery, security, and cookieless aggregate counters; PostHog for cookieless product analytics and visual diagnostics and, after Allow, returning-visit measurement and exception diagnostics; and Google and participating ad technology providers for advertising. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.
Retention and security
Functional browser storage remains until you clear it. Security logs and aggregate counters are kept only as long as reasonably needed for reliability, abuse prevention, product quality, and legal obligations. PostHog analytics and visual diagnostics currently use a 30-day retention setting and are periodically reviewed so they are not kept longer than needed for product analysis.
Children
BopBits is a general-audience service and is not directed to children under 13. We do not knowingly ask children for names, contact details, or account information. Parents and guardians can decline returning-visit measurement and exception diagnostics, manage advertising privacy choices, and clear site data through the browser.
Your rights and how to exercise them
Depending on where you live, you may have the right to ask what personal data a publisher holds about you, to have it corrected or deleted, to object to or restrict certain processing, and to withdraw consent you previously gave. Because BopBits has no accounts, most of what this site uses is either cookieless or stored only in your own browser, so clearing site data removes it immediately and the on-page controls above withdraw consent without contacting us.
For anything the on-page controls cannot do, email support@bopbits.com with "Privacy" in the subject line and describe what you are asking for. We may need to ask for information that helps us locate the relevant records, and we will not use that information for any other purpose. If you are in the EEA or UK you may also complain to your local supervisory authority.
Who to contact
BopBits is the publisher and data controller for bopbits.com and the game player pages hosted on it. Write to support@bopbits.com for privacy requests, advertising concerns, rights claims, or anything else about this policy. We aim to reply within five working days. Our contact page lists what to include so we can answer without a second round trip.
Changes to this policy
We may update this policy when the site, vendors, or legal requirements change. The effective date at the top will change when an update is published. Material changes may also be highlighted on the site or through the relevant consent message.