Effective date: July 7, 2026
This Privacy Policy explains how Wondaland Games (“we,” “us,” or “our”) handles information in connection with the KBÓM mobile app and the online game at kbom.wondaland.studio (together, the “Game”). KBÓM is a casual card game. We built it to be private by default: you can play the whole game without an account, and everything beyond that is optional.
As you play, the Game saves the following locally on your device so it can remember your progress:
If you never sign in, this information stays on your device and is not tied to your identity. Deleting the app (or clearing the site’s local storage) erases it.
You can optionally use Sign in with Apple to back up your progress and carry it between devices. If you do, we store the following in our database (Google Firebase Firestore), linked to your account:
Apple lets you hide your email address from us; we do not need or use your email to sync progress. Signing out stops syncing; you can ask us to delete your synced progress at any time (see Contact below).
To understand whether the Game works and how it is used, the Game records aggregate usage events — such as app opens, games started and completed, and the platform (web or iOS) — under a randomly generated, anonymous device identifier. This identifier is not your name, email, or Apple ID and cannot reasonably be used to identify you. It contains no personal data.
These aggregate events include coarse, city-level geography derived from network routing (for example, “a session in Paris”) — we never collect or store your IP address or your precise location. While the Game or the store is open, an anonymous “someone is here right now” signal keyed to the same random identifier powers our own live dashboard; it expires within about a minute of closing the tab.
We use Google Analytics (GA4) to collect standard usage analytics (for example: page views, sessions, general device and region information). Google processes this data on our behalf under its own terms; see Google’s Privacy Policy. We use analytics only to understand and improve the Game — not for advertising.
In the iOS app you can optionally turn on push notifications — for example, to hear when a friend opens a table and wants to play you, or when a KBÓM game night is coming up. If you opt in (first in the Game's own prompt, then in the standard iOS permission dialog), a device push token — a random identifier issued by Apple/Google for delivering notifications to your device — is stored in our database alongside the Game's anonymous device identifier. It contains no personal information.
When we host a real-life KBÓM game night, you can RSVP from the Game. If you do, we store the first name you enter (optional), your party size, and the Game's anonymous identifiers with your RSVP. RSVP details are visible only to the Wondaland Games team — other players see only the number of seats taken. RSVPs are deleted when you cancel them, when you delete your account, or on request (see Contact below).
If you play online multiplayer with friends:
Room data is temporary and used only to run the game session.
If — and only if — you use the “Send feedback” form, we receive the message you write and an optional name if you provide one, plus basic context to help us reproduce issues (such as the in-app page and your browser/user-agent string). We use this only to improve the Game and respond to you.
The Game runs on Google Firebase (hosting, authentication, and the Firestore database) and uses Google Analytics as described above. These providers process data on our behalf under their own terms; see Firebase Privacy and Security.
KBÓM does not currently offer in-app purchases. If we add optional purchases in the future, payments will be processed by the Apple App Store — we do not receive or store your payment details.
KBÓM is intended for a general audience ages 12 and up and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we will delete it.
Device data remains on your device until you remove it. Synced progress is kept while your account is active or until you ask us to delete it. Anonymous usage statistics are kept in aggregate form. Feedback is retained only as long as reasonably needed to address it.
Data is transmitted over encrypted connections (HTTPS) and stored with our hosting provider’s standard security protections, with server-side access rules limiting who can read what. No method of transmission or storage is 100% secure, but we take reasonable measures to protect the limited information we handle.
We may update this Policy from time to time. We’ll revise the “Effective date” above when we do, and material changes will be reflected on this page.
Questions about this Policy or your information? Contact Wondaland Games at nate@wondalandarts.com.