Privacy Policy
Bagga Lax is a pixel lacrosse game made by Takeover Lacrosse ("we"). This page says exactly what the game stores, why, and how to delete it. Short version: no ads, no tracking, no selling data, no email address, no real name, no location.
What stays on your phone
Your game save (level, DIMES, cards, items, teams, seasons, settings, the names you edit) lives on your phone. If you never make an account, nothing about you is stored on our server except the short-lived online game rooms described below.
What we store on our server
| What | Why | When |
|---|---|---|
| Your username | So friends can find you and you can sign in on another phone | Only if you make an account |
| Your PIN / password – never the PIN itself, only a salted PBKDF2 hash of it | To check it's you when you sign in or delete your account | Only if you make an account |
| Your cloud save (a copy of your game save, plus the one copy it replaced) | Back-up and playing on another phone | Only if you make an account |
| Your birth year (asked once) | To keep the game age-appropriate. Nothing uses it yet. | Only if you make an account |
| Friends, friend requests, game invites, trades | The friends and online features | When you use them |
| A random device ID made by the game (not your phone's real ID or advertising ID) | To connect your phone to online games, invites and your account | When you play online or sign in |
| Online game rooms: usernames, team picks, lineups and game moves | To run an online game between two phones | While you play online |
| Invite code and who joined with it | The "invite friends" reward | When you use invites |
| Blocks and reports | Keeping online play safe | When you block or report someone |
| Purchase records (Apple transaction ID, which DIMES pack, device ID, username if signed in) | So a purchase is added exactly once and refunds can be handled | Only in the iPhone app, when you buy DIMES |
| Website only: a notification subscription and your time zone offset | Game-invite and weekly-challenge notifications you turned on | Only if you turn notifications on |
Who else handles it
Hosting: the game's server runs on a cloud hosting provider, which (like every web host) briefly logs IP addresses to keep the service running and safe.
Online play: to make two phones talk directly, the game uses public "STUN" servers (Google and Cloudflare), which see your IP address; the other player's phone can see it too, as in most online games. If a direct link isn't possible, the game's own relay passes the game moves along.
Purchases (iPhone app): payment is handled entirely by Apple – we never see your card or Apple ID. We use RevenueCat to check that a purchase is real; it receives the purchase receipt and the game's random device ID.
We don't use advertising networks or analytics trackers, and we never sell or rent any data.
Kids
We don't ask for a real name, email address, phone number, photo or location. Usernames and edited names go through a bad-word filter, and players can be blocked and reported. If you're a parent and want your child's account deleted, use DELETE ACCOUNT in the game or email us.
Deleting your data
In the game: FRIENDS + CLOUD SAVE → DELETE ACCOUNT → type your PIN → DELETE FOREVER. That erases your account, cloud save, friends, requests, invites, trades, birth year and invite code from our server right away. Tick "also erase the save on this phone" to start fresh. No account? FRIENDS + CLOUD SAVE → DELETE MY DATA ON THIS PHONE.
Purchase records are kept without your username, so refunds and fraud checks still work. Reports about a player are kept for up to 90 days for safety review.
By email: baggalacrossegame@gmail.com – tell us your username and we'll delete it within 30 days.
Security
Everything travels over HTTPS. PINs are stored only as salted hashes. Sign-ins lock for 10 minutes after 5 wrong tries.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions: baggalacrossegame@gmail.com