Who this policy covers
This policy applies to bopbits.com, its game pages, and BopBits game player pages hosted on the same domain. BopBits is the publisher responsible for these pages.
Information used to provide the site
When you visit, our hosting and security provider, Cloudflare, processes ordinary network and device information such as IP address, request time, browser details, requested URL, and security signals. This is used to deliver the site, prevent abuse, diagnose failures, and keep the service available.
Your browser may also store small first-party values for functional preferences, including recently played games and your analytics choice. These stay in your browser unless you clear site data.
Cookieless aggregate counters
BopBits sends a small set of same-origin counters for page views, play requests, player loads, first game interactions, and natural game breaks. The counter payload uses no cookie, local storage value, account, advertising ID, client ID, or session ID. Stored counter records contain only the event name, page path, game ID where relevant, coarse acquisition channel, event time, and two-letter country code supplied at the Cloudflare edge. The payload does not include query strings, raw referrers, or browser identifiers.
These aggregate counters help us find country-level loading and play friction, but they cannot recognize a person or return visit and are not used for advertising. Retention cohorts are measured only from optional PostHog analytics after consent.
Optional product analytics
BopBits uses PostHog only after you select Allow in the analytics panel. We record a bounded set of product events such as page views, game starts, first interactions, completions, and replays. Autocapture is disabled. Raw search text is not collected, full landing URLs are reduced to paths, referrers are reduced to host names, and session-replay inputs are masked.
If you decline, the PostHog browser client is not loaded. You can change this choice at any time using the controls below.
Advertising and Google AdSense
BopBits uses Google AdSense and AdSense H5 Games Ads to fund the free site. Google and its advertising partners may use cookies, web beacons, IP addresses, device information, and similar identifiers to select, deliver, secure, and measure ads. Google may personalize ads where permitted and where valid consent has been given; otherwise ads may be non-personalized or limited.
Third-party vendors, including Google, may use advertising cookies based on visits to BopBits or other sites. Read how Google uses information from sites that use its services and manage personalization in Google Ads Settings.
Consent and regional privacy choices
For visitors in the EEA, the UK, and Switzerland, BopBits uses Google’s certified consent management platform to request the choices required for advertising. Where applicable, Google’s privacy message also supports US state privacy opt-out choices. The available options depend on location and applicable law.
YOUR CONTROLS
Review your privacy choices
Analytics and advertising use separate controls. Changing one does not silently change the other.
Sharing and service providers
We share information only as needed with service providers that operate the site: Cloudflare for delivery, security, and cookieless aggregate counters; PostHog for consented product analytics; and Google and participating ad technology providers for advertising. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.
Retention and security
Functional browser storage remains until you clear it. Security logs and aggregate counters are kept only as long as reasonably needed for reliability, abuse prevention, product quality, and legal obligations. Consented analytics is retained according to the configured PostHog project settings and periodically reviewed so it is not kept longer than needed for product analysis.
Children
BopBits is a general-audience service and is not directed to children under 13. We do not knowingly ask children for names, contact details, or account information. Parents and guardians can disable optional analytics, manage advertising privacy choices, and clear site data through the browser.
Changes to this policy
We may update this policy when the site, vendors, or legal requirements change. The effective date at the top will change when an update is published. Material changes may also be highlighted on the site or through the relevant consent message.