Last updated October 6, 2026
Your data, explained.
See what Bombsy saves, how it is used, and the choices you control.
What stays on your device
Bombsy saves your game in this browser or app’s local storage so you can return to it later. The saved information includes:
- Your display name and a randomly generated player ID.
- The current puzzle, placed bombs, marked tiles, hearts, and playing time.
- Completed levels, best star ratings, daily puzzle dates, streaks, and completion records.
- Earned and spent stars, unopened gifts, unlocked items, equipped cosmetics, and remaining tools.
- Sound, music, volume, music vibe, haptics, Auto Xs, and Dark Mode preferences.
Your player ID identifies this local profile. When the game connects, Supabase automatically creates a separate anonymous online identity linked to the session on this device. Display names can be shared by different players; avoid using your real name or other personal details.
How this information is used
The game uses saved information to restore puzzles, calculate rewards, avoid duplicate gift unlocks, remember your choices, and show your local progress. Your complete game save stays on this device and is not synchronized across devices.
Bombsy automatically connects to the leaderboard and sends your display name, equipped bomb style and future puzzle completion results to Supabase. Results include the puzzle, placed bombs, hearts remaining, tool use and playing time. The server validates the result and calculates ranking stars. Other leaderboard participants can see your display name, bomb style, stars and rank. Unverified local stars are not imported.
After the server verifies results, Bombsy stores signed ranking recovery records on this device. These contain puzzle identifiers, best stars, best solve times, result dates, original weekly credits and an opaque recovery identifier. Following inactivity cleanup, the game can send these records to restore verified rankings to a new anonymous online account, using your saved display name and equipped bomb. Global scores are preserved; Weekly and Daily rankings still follow their original dates. Signed records cannot restore local data that has been erased.
The leaderboard also includes game-controlled opponents. Their ranking stars are simulated on a shared schedule; they are not other people or registered player accounts.
Collection and sharing
This version does not request your email address, phone number, location, contacts, photos, microphone, or camera. Supabase provides authentication and database hosting for the leaderboard. It does not include third-party analytics or load third-party advertising. The game does not sell or share your saved profile with advertisers.
Using the leaderboard sends requests to Supabase, which can receive your IP address and ordinary request information. Loading an online version sends ordinary web requests to the service delivering the game files. That service can receive your IP address and browser request information. Your browser, device platform, and app store also have their own privacy practices.
Storage and retention
Your save and signed ranking recovery records remain on this device until cleared by you or removed by the browser or operating system. There is no automatic cloud backup of your complete game save or fixed expiration for local data.
A daily maintenance job can remove anonymous online accounts, leaderboard profiles and scores after 30 days without online activity. An account with verified scores is eligible only after the app confirms it has saved all current recovery records locally. Accounts with no ranking stars can also be cleaned up. Accounts on older versions, or devices unable to save recovery records, keep their scored profiles until safe recovery is available. This does not identify whether an app was uninstalled.
After cleanup, reconnecting with the saved records creates a new online identity and restores verified scores. Supabase retains an opaque recovery identifier and whether it has been used or revoked, without the cleaned-up display name or score history, to prevent duplicate accounts and restoration after deliberate deletion. Anonymous sessions and local recovery records do not provide a cloud game backup or an automatic transfer between devices.
Private browsing, clearing site data, uninstalling an app, switching browsers, or moving to another device can make your progress and recovery records unavailable. Device backups may separately preserve app data under your device settings.
Your controls and deletion
You can change your display name and preferences from Home and Settings. You can review your local player ID in the username screen. Your leaderboard profile updates automatically when you change your display name or equipped bomb style. Rankings refresh whenever you open the leaderboard and periodically while it is visible.
To delete your online account, choose Settings → Privacy → Delete Account and confirm. Deletion removes your online identity, leaderboard profile and ranking results, clears and invalidates signed ranking recovery records, discards pending uploads and stops future uploads. An internet connection is required if an online account exists. Your local puzzle progress, stars, tools, unlocked items and preferences remain on this device. Deliberate deletion cannot be undone with an old copy of the ranking records. The app does not automatically create another online account; you can choose Join Leaderboard to start a new one with future results.
To remove the game’s local save entirely, clear Bombsy’s site or app data using your browser or device controls. This does not delete unrelated browser data or copies held in a separate device backup.
Advertising and future versions
No live advertising provider is connected in this version. Instead, hints, reveals and shovels each regenerate one use every 25 minutes while below 5 uses. The saved timers also work offline and catch up when you reopen the app.
If advertising, recoverable sign-in accounts, cloud game saves, or analytics are added, this policy will be updated to identify the services involved, the information they handle, its purpose, retention and deletion options, and any required choices before those features are enabled. The current local-save description does not cover a future advertising provider’s data practices.
Younger players
This version has no chat or player messaging. The automatic leaderboard makes the chosen display name, equipped bomb style and ranking stars visible to other participants. A parent or guardian should supervise younger players and help them choose a display name without personal information.
The game does not ask for a child’s age, real name, or contact information. Parents and guardians can delete a child’s online account or remove their local save using the controls described above.
Keeping your save private
Anyone with access to the same device and browser profile may be able to view or change your local game. Protect your device with its normal security controls and avoid putting sensitive information in your display name.
A local save can be lost or damaged. Bombsy cannot restore a deleted save from a game server because no such backup is provided.
Policy changes
The date above shows when this notice was last updated. Material changes to how information is collected or used will be described in an updated policy. Permissions or consent will be requested where required; viewing this page does not grant additional device permissions.