1. Scope and contact
Developer: mrbaris. Support and privacy requests: info@bumgame.app.
This policy covers the iOS and Android versions of the Bum Arena mobile game. Bum Arena is an arena game for four players, played on the four corners of one phone or online. You don’t need to sign up with a real name, e-mail address or password. If you e-mail us for support, we process your address and your message in order to answer your request.
Bum Arena doesn’t ask for microphone, camera, location or contacts permission and records no audio. There is no chat, messaging or voice between players. An anonymous player account with a random ID is created for online play, progress backup and purchase verification (section 2).
Bum account: Bum Arena uses the same game server and the same account system as Bum: Voice Word Game, by the same developer. If you sign in the same way (Apple or Google) in both games, they connect to the same Bum account: your name, profile and the entitlements tied to your account are shared. Bum: Voice Word Game has its own privacy policy.
2. Account, profile and game information
| Information | Purpose and visibility |
|---|---|
| Random device and player ID | Online session, progress backup and purchase entitlements. This ID contains no real name but may still count as personal data. |
| Account protection with Apple / Google (optional) | If you choose Continue with Apple or Continue with Google in Settings, the stable account ID issued by Apple or Google is linked to your player account; when you sign in the same way on a new phone, your progress comes back. Your name and e-mail address are not requested or stored. If you linked with Apple, the authorisation token issued by Apple is kept only on the server and is revoked at Apple when you delete your account. |
| Player name | The name you type in your profile (if you don’t, you get a name like “Bum1234”). It is stored on the game server with your profile backup. It is shown to other players in online matches and rooms. The server runs a profanity check before showing a name; an unsuitable name is replaced with one in the form “Bum1234”. |
| Character and profile | The character you chose and your profile details (e.g. level, trophies). Shown to other players alongside your player name in online matches. |
| Online match inputs | The room code, your corner, your joystick direction and your shots. The server processes these in working memory for the duration of the match and relays them to the devices of the other players in the match; each phone computes the match itself. Match gameplay is not archived on the server. |
| Names of players on one phone | The names you type for friends playing on the same phone are stored only on that phone and shown on the match screen; they are not sent to the game server. |
| Progress and statistics | XP, achievements, quests, and game and win counts on the device; the profile backup on the online server. |
| Trophies and league | In versions where the league is available, your weekly trophies, league tier, group and rank are kept on the game server, tied to your account. Players in the same league group see only your player name, character and trophies. |
“Anonymous account” means that you don’t have to sign up with a real name; it doesn’t mean the account can never be linked to you.
3. Purchases and ads
Purchases and ads work as described below in the stores and versions where Bum Arena offers them. In versions without these features, the providers’ software is not part of the app and no data is sent to them.
Purchases: payment is taken by Apple or Google. Your card details never reach us. RevenueCat processes the player ID together with transaction and subscription information to verify and restore purchases. The game server stores Pro and ad-free entitlements. Bum Pro is tied to your account: if you use the same account in both Bum games, your entitlement may apply in both.
Ads: ads are shown through services of Unity Technologies: Unity LevelPlay (ironSource infrastructure) for ad mediation and Unity Ads as the ad network. To show ads, measure impressions and interactions, and prevent fraud and abuse, these providers may process: the advertising ID (IDFA on iOS; only if you allow cross-app tracking), device and app information including the vendor ID (IDFV) (e.g. device model, operating system, app version), approximate location derived from the IP address, and ad interactions such as impressions and clicks. Your player ID is not sent to ad providers.
Personalisation and consent: you are asked once, after your first game. On iOS the system’s App Tracking Transparency (ATT) prompt appears; personalised ads and the advertising ID are used only if you allow it. On Android you choose in the app’s ad preference prompt; under the GDPR and the Turkish data protection law (KVKK), personalised ads are shown only with your explicit consent. If you decline, you see general (non-personalised) ads; these may also process the technical data above for delivery, measurement and security. You can change your decision on iOS under Settings → Privacy & Security → Tracking, and on Android under Profile → Settings (gear) → Personalized ads. Declining doesn’t stop you from using the game.
Only you start a rewarded ad. Interstitial ads are shown only between games and with limited frequency; never during a match. Current purchase features are described on the offer screen in the app.
4. Usage, notifications and support
Usage counters: Bum Arena uses no third-party analytics software. Daily counters of feature usage, the app version and the platform may be sent to our own game server over your session. Counters are kept on the server as daily totals; during a session the server knows your account ID. Technical records associated with the account may be processed for security and rate limiting.
Connection: when the app connects to the game server, and when it downloads remote settings and art packs from the game server or this site, the IP address and time are processed by the hosting infrastructure.
Notifications: quest, weekly mode, league and come-back reminders are scheduled locally on the device when you allow them. You can turn them off under Profile → Settings (gear) → Notifications or in your phone settings.
Sharing: if you choose to share your profile or a result, the text and image are prepared on the device; you complete the share in the system sheet and decide who receives it.
Support: in support e-mails we process your address, your message and any device or transaction information you choose to send. We don’t ask you to send passwords, card details or identity documents.
5. Recipients and services abroad
Data may be shared, within the scope of their function, with server hosting services for online play, Apple or Google for account protection, RevenueCat for purchase management, and Unity Technologies’ Unity LevelPlay (ironSource) and Unity Ads services for ad mediation and delivery. Support e-mails are processed on Gmail infrastructure. In an online match, your player name, character and in-game actions are shown to the other players in the match.
These providers’ services may involve processing data outside Türkiye and outside your country. The data processing terms of the relevant service, country and provider apply. Where a valid legal basis or transfer mechanism is required, the corresponding obligations must be met.
6. Retention and deletion
The player account and the profile backup on the server are kept for the game service until you delete your account. The league record is also kept until you delete your account; group results of closed weeks are kept for at most 8 weeks. Online match inputs are used in temporary memory for the duration of the match. You can clear the progress on your device with the account deletion option.
The daily database backups in the server setup are rotated out within about 16 days, including file-age calculation and the daily clean-up schedule. Account deletion covers removal from the active system; backup copies leave by rotation. Transaction records of stores and providers are subject to their own retention obligations.
Technical logs are renewed by the server’s size-based rotating log system, so no fixed number of days is promised. Support correspondence is kept to resolve the request and to meet legal obligations. Aggregate counters that cannot be linked to an account may remain after the account is deleted.
7. Purposes and legal bases
The developer is the data controller (section 1). The player ID and profile are processed to run the game, match players online, back up progress and manage the account. Transaction information is used to verify purchase entitlements; connection and technical records to keep the service secure, prevent abuse and fix errors; support messages to answer requests.
Processing needed to provide the game service and purchased entitlements is based on the performance of a contract; processing required by law on legal obligations; and security and service-quality processing on legitimate interests, provided your fundamental rights are not harmed. Processing that requires explicit consent, such as personalised ads and tracking, takes place only with that separate consent.
8. Permissions and your rights
Under the Turkish data protection law (KVKK) you can learn whether your personal data is processed, request information, learn the purpose and the recipients, have incomplete or incorrect data corrected, request deletion or destruction where the conditions are met and have recipients notified, object to adverse results of purely automated analysis, and claim compensation for damage caused by unlawful processing. If the GDPR applies, your rights of access, rectification, erasure, restriction, portability and objection, and your right to complain to the competent supervisory authority, may also apply.
Requests: info@bumgame.app. We may ask for the minimum information needed to identify the relevant account securely. Requests are answered within the applicable legal time limits. You can withdraw permissions in your device settings; this does not affect the lawfulness of processing before the withdrawal.
9. Age and children’s privacy
The game is intended for players aged 13 and over; it is not offered as a service directed at children. If a higher age limit applies where you live for using the service or consenting to data processing, that limit applies. Players who are under age must get permission from a parent or legal guardian for purchases. If you believe data of a child below the age limit has been processed, write to us.
10. Website and changes
This static website adds no ads, visitor analytics or marketing cookies. The hosting and access infrastructure may process technical data to serve the pages and keep them secure. Details are in the cookie and website notice (in Turkish).
Changes to this policy are published at this address with the current date and version. Where data processing changes significantly, the necessary additional notices are given.
Bum Arena pages:
Privacy policy · Terms of use · Support · Delete account and data