PRIVACY POLICY

WHAT YOU ENTER IN THE GAME

To play, you type in details about your debts: a name you choose for each one, the type of debt, the balance, the interest rate, the minimum payment and, if you like, the day it's due. You can also log payments, quests and good deeds, and in the Treasury your bills, paychecks, spending and spending limits.

This is saved in your browser on your device. If you have an account, a copy of the same game save is stored in our database so it can sync between your devices.

Please don't type in account numbers, card numbers, passwords for other sites, or anyone else's personal information. The game never asks for them, and never connects to your bank.

YOUR ACCOUNT

An account is optional. If you create one, we store your email address and your password. Your password is stored only in a scrambled (hashed) form that we can't read.

Our sign-in provider keeps basic records of sign-ins, such as the time, IP address and browser, to keep accounts secure.

We use your email only for account messages, like confirming your address or resetting your password. We don't send marketing email unless you separately sign up for it.

USAGE STATS

When you play, the game records a few simple events so we can tell whether it's useful and whether people come back. They are pseudonymous: each one carries a random ID made by your browser on your device, so we can tell that two events came from the same device, but the ID isn't linked to your account, name or email. Each event includes:

• that random ID (it stays the same on that device and browser until you clear the browser's data)
• the date, and the version of the game
• which of these happened: opened the game (and whether it was the first time), added a debt (and its type, such as "credit card"; a medical debt is counted only as "other"), logged a payment, beat a debt (and its type, counted the same way), froze a credit card, thawed a credit card, created an account, shared a card (and how you shared it), or ran into an error (with a short technical description of the error)
• on your very first visit, the website or campaign that sent you, if any

These events never include dollar amounts, debt names or your email. Like any request over the internet, sending them shows your IP address to our database provider, which keeps it in its logs for a short time; we don't store it with the events. You can turn usage stats off any time in OPTIONS. If your browser sends a Global Privacy Control signal, they're off automatically.

INFORMATION OUR HOSTING PROVIDER HANDLES

When you open the game, our web host processes your IP address and basic browser information to deliver the pages and protect the site from attacks. We don't use this to identify or track you.

THINGS THAT STAY ON YOUR DEVICE

Payment alerts are created by your device. If you turn them on, your device shows them, and nothing is sent to us. An alert can show a debt's name, when it's due and its minimum payment, so they may be visible on your lock screen or to anyone who can see your screen. You can turn them off in the game.

Share cards and clips are made on your device. They're only shared where you choose to share them.

The game stores your save, settings and an offline copy of the game in your browser's storage. These are needed for the game to work; they aren't advertising cookies.

HOW WE USE INFORMATION

• to run the game and sync your save between your devices
• to keep accounts secure and send account messages
• to understand which features help people, and to find and fix problems
• to comply with the law

We don't sell or rent your information, and we don't share it with anyone for advertising.

WHO HELPS US RUN THE GAME

We use a few service providers, who handle information only to provide their service to us:

• Supabase, for accounts, the cloud save database, usage stats and account emails
• Cloudflare, for hosting the website and protecting it
• an email delivery service, if we use one to send account emails

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of the business (in which case this policy would still apply to your information). These providers may process information in the United States or other countries.

HOW LONG WE KEEP IT

Your device keeps your save until you erase it (OPTIONS, then ERASE SAVE), sign out, or clear your browser's data.

Your account and cloud save are kept until you delete your account. Usage stats are kept for up to two years. Sign-in records are kept by our sign-in provider for a limited time for security.

YOUR CHOICES AND RIGHTS

• See and change your information: everything you've entered is visible and editable in the game.
• Start over: NEW GAME clears your debts and battle progress, but keeps your streak, Valor, rewards, Academy lessons and Treasury.
• Erase everything: OPTIONS, then ERASE SAVE. This erases everything on this device (your debts, battle progress, Treasury, Valor and rewards) and, if you're signed in, your cloud save too.
• Delete your account: open the ACCOUNT window and choose DELETE MY ACCOUNT. This deletes your account, your cloud save and the game on that device right away. Other devices where you played keep their own copy until you erase it there.
• Ask what we hold about you, or for help with any of this: email us (below) and we'll answer within 30 days.
• Turn off usage stats: OPTIONS, then USAGE STATS.

Depending on where you live, you may have other rights, such as to access, correct or delete your information, or to appeal a decision about a request. We will not treat you differently for using them. We don't sell or share personal information for targeted advertising.

SECURITY

Information is encrypted in transit, and our database rules let each account reach only its own save. No system is perfectly secure, so please use a strong password you don't use elsewhere. On a shared device, sign out when you're done: signing out removes your game from that device.

AGE LIMIT

Debt Boss is for adults 18 and older. We don't knowingly collect information from anyone under 18. If you believe a child has created an account, email us and we will delete it.

HEALTH INFORMATION

If you add a medical debt, some states treat what you enter as health information. Our Consumer Health Data Privacy Policy explains how we handle it. You'll find it with our other policies at the bottom of the start menu and in OPTIONS.

CHANGES TO THIS POLICY

If we change this policy, we'll update the date at the top. If the change is significant, we'll also tell you in the game before it takes effect.

CONTACT US

Debt Boss LLC, New York. Email: [email protected]