1. Who We Are
Battle Bridge ("we", "us", "the Service") is a virtual tabletop application operated by The Operator, a sole trader based in Victoria, Australia. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. What Data We Collect
2.1 Account Data (when you register)
| Data | Purpose | Storage |
|---|---|---|
| Email address | Account authentication, verification, password reset | Cloudflare D1 (encrypted at rest) |
| Username | Display name in lobbies and marketplace | Cloudflare D1 |
| Password hash (PBKDF2) | Authentication — we never see your plain password | Cloudflare D1 |
| Email verification token | Prove email ownership | Cloudflare D1 (expires 7 days) |
| Password reset token | Password recovery | Cloudflare D1 (expires 1 day) |
| Account tier (free/pro) | Feature access | Cloudflare D1 |
| Creation date | Account management | Cloudflare D1 |
2.2 Game Data (when you use the Service)
| Data | Purpose | Storage |
|---|---|---|
| Cloud saves (game states) | Your game progress (Pro only) | Cloudflare D1 (encrypted at rest) |
| Map uploads | Your battle maps (Pro only) | Cloudflare R2 (private bucket, encrypted at rest) |
| Custom tokens | Your player/NPC tokens (Pro only) | Cloudflare R2 (private bucket, encrypted at rest) |
| Token position logs | Multiplayer session state | Ephemeral (in-memory during session) |
| Lobby metadata | Session management | Cloudflare D1 (deleted 30 days after session ends) |
2.3 Payment Data
| Data | Purpose | Storage |
|---|---|---|
| PayPal order ID | Purchase proof, refund handling | Cloudflare D1 |
| Payment amount and status | Purchase record | Cloudflare D1 |
| PayPal email | Receipt delivery | PayPal (we do not store this) |
We do NOT store: Credit card numbers, bank details, PayPal passwords, or any payment instrument data. All payment processing is handled entirely by PayPal.
2.4 User-Generated Content in Multiplayer
During a multiplayer lobby session, the following data is transmitted between players: token positions and movements, dice roll results, and chat messages (DM only, no player chat).
This data is ephemeral — it exists only in active memory during the session and is not logged, recorded, or stored after the session ends. No voice or video data is collected or transmitted.
2.5 No Multiplayer Monitoring
We do not monitor, filter, record, or review content shared during multiplayer sessions. This includes map images, token images and names, chat messages, dice roll content, and any other user-generated content displayed during gameplay. Users are solely responsible for the content they create and share in multiplayer sessions.
2.6 Bug Reports
Bug reports are retained for 30 days in our database, then deleted. Bug report emails are sent to the operator's email inbox and may be retained there indefinitely as part of normal email storage.
2.7 CAPTCHA (Cloudflare Turnstile)
When you register, Cloudflare Turnstile may collect your IP address (used once for verification, not stored by us) and browser interaction data. See Cloudflare's Privacy Policy.
3. How We Use Your Data
We use your data only for: providing the Service, sending transactional emails (verification, password reset, Pro upgrade confirmation), processing payments (via PayPal), responding to bug reports, detecting and preventing abuse, and legal compliance (tax records for 7 years).
We never use your data for: advertising or marketing, user-level tracking or profiling, automated decision-making about your account, or selling to third parties.
Aggregate statistics: The Service displays a public stats page showing aggregate, anonymised counts (e.g., total users, total lobbies created). These contain no personal information.
4. Artificial Intelligence
We do not use your data to train, fine-tune, or improve any artificial intelligence or machine learning models. We do not use AI to profile your behaviour or make automated decisions about your account. Battle Bridge does not currently incorporate AI features. If we add AI features in the future, we will update this Privacy Policy before the feature goes live.
5. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare | Hosting, CDN, DDoS protection, Workers, D1, R2, KV, Turnstile | cloudflare.com/privacypolicy |
| PayPal | Payment processing | paypal.com/privacy |
| Resend | Transactional emails | resend.com/privacy |
6. Data Storage & Security
All application data is stored in Cloudflare's infrastructure, primarily in the Australian/APAC region. User uploads (maps, custom tokens) are stored in private Cloudflare R2 buckets that are not publicly accessible, encrypted at rest, scoped per user, and deleted on account deletion.
Security measures include: PBKDF2-SHA256 password hashing (100,000 iterations), JWT tokens with 7-day expiry, rate limiting on all endpoints, Content Security Policy headers, HTTPS enforcement, and Cloudflare DDoS protection.
In the event of a data breach likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Cloud saves | Until you delete them or your account |
| Map/token uploads | Until you delete them or your account |
| PayPal payment records | 7 years from transaction (Australian tax law) |
| Lobby session data | 30 days after session ends |
| Email verification tokens | 7 days |
| Password reset tokens | 1 day |
| Bug reports | 30 days |
When you delete your account, we purge your data within 30 days. Marketplace listings may be retained for service integrity with your personal data dissociated. PayPal payment records are retained for 7 years as required by tax law.
8. Your Rights (Australian Privacy Act / APPs)
| Right | How to Exercise |
|---|---|
| Access your personal data | Email [email protected] with "Privacy Request — Access" |
| Correct inaccurate data | Email [email protected] with "Privacy Request — Correction" |
| Delete your account and data | Account → Delete Account (instant), or email us |
| Export your data | Save/Load → Download (JSON export) |
| Complain to the OAIC | oaic.gov.au |
We respond to privacy requests within 30 days. There is no charge for reasonable requests.
9. Children's Privacy
Battle Bridge is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.
10. Cookies & Tracking
We use a single cookie: __Host-vtt_token — an authentication token stored as an HttpOnly, Secure, SameSite=None cookie. This is essential for the Service to function.
We do not use analytics cookies, advertising cookies, fingerprinting, tracking scripts, or third-party tracking pixels. The only third-party scripts loaded are the PayPal SDK (for payment processing) and Cloudflare Turnstile (for CAPTCHA on registration).
11. Testimonials & Reviews
We do not fabricate, purchase, or use fake testimonials, reviews, or endorsements. All ratings in the marketplace are from genuine users. We do not incentivise positive reviews.
12. Changes to This Privacy Policy
We may update this Privacy Policy. Material changes will be notified via email and/or in-app banner with 30 days' notice before the change takes effect.
13. Contact
Operator: The Operator
Email: [email protected]
Status: Sole trader, Victoria, Australia
OAIC: oaic.gov.au (if you wish to make a complaint)
Note: As a sole trader with annual turnover below $3 million, we are not required to comply with the Privacy Act 1988. We voluntarily adopt these privacy practices as a commitment to user trust.
This Privacy Policy is governed by the laws of Victoria, Australia.