public/legal-config.js in the repository and replace the three YOUR … values.Privacy Policy
BAM is a motion-controlled game: you play by moving your body in front of a camera. It is run by (“we”, “us”). This page explains, in plain words, what BAM does with information. Questions? Write to .
The short version
- Your camera picture never leaves your device. It is used live to see where your body is, and it is not recorded, uploaded or saved anywhere.
- We keep only what is needed to run the game: a login name, a scrambled password, nicknames, scores and the times you played.
- No adverts. No tracking. We do not sell your information or share it for marketing.
- Accounts are made by us for players. Parents and guardians can ask to see or delete everything about their child at any time.
1. Camera and body tracking
BAM asks to use your camera. The picture is analysed inside your own browser to find points on your body, such as your head, hands and feet, so the game can follow your movements. The camera picture is not recorded, not sent to us or anyone else, and not stored. Some screens can show the live picture back to you on your own screen. Body tracking is paused on some menus; the camera itself stays open while the game page is open, so close the page, or switch off the camera permission in your browser, to stop it completely. BAM does not use the microphone. Spoken tips are played by your device and nothing is recorded.
2. What we collect, and why
| Information | Why we keep it |
|---|---|
| Account: login name, the date the account was made, whether it is switched off, an optional trial end date. The password is kept only as a one-way scrambled value, so nobody, including us, can read it. | So you can sign in. |
| Email address: given by the parent or guardian who creates an account, and stored with it. We email only to confirm the account and to reset a password, never for advertising. | To confirm the account is real and to let you get back in if you forget the password. |
| Your agreement: the version (date) of these Terms and this Policy that you agreed to by pressing “I agree”, and when you pressed it. Free-trial visitors are asked each time and nothing is saved. | To show that you agreed, and to ask again if the pages change. |
| Player profiles and progress: nicknames you enter, scores, stars, levels, streaks, and which game, stage and mode each round was and when it was played. | To show your progress and the Stats page on any device you sign in from. |
| Sessions: when you last signed in and out, how long a session lasted, and which device is signed in right now. | To allow one device per account, to sign you out after 30 minutes of no activity, and so we can see when an account was last used. |
| Network address (IP address): used for a short time to limit wrong-password attempts (10 minutes) and free trials (24 hours), then deleted automatically. It can also appear in our hosting provider’s ordinary server logs. | To keep accounts safe and keep the free trial fair. |
| World records: the best score for each game, stage and mode, shown only as a number. We keep a private note of which account set it, so a record can be removed if that account is deleted. It is never shown to anyone. | To show the “World Record” line after a game. |
| Free trial: no account and nothing about your play is saved. A random code, with a cookie, limits trials and counts, without naming anyone, how many trial players are on at the moment. | To run the free trial. |
| Settings on your device: things like camera quality and whether body tracking is on for the game list, kept in your browser on that device only. | To remember your preferences. |
Apart from that email address, we do not ask for ages, addresses, phone numbers, photos or any other personal details from players. Please use a nickname or first name for profiles, never a full name or other personal information.
3. Cookies and browser storage
We use only what the game needs to work: a sign-in cookie that expires within about 35 minutes and is renewed while you play, a cookie that times the wait between free trials, and your browser’s storage for the preferences above. There are no advertising, analytics or tracking cookies, and nothing from other companies’ websites is loaded into the game.
4. Who we share information with
We use three service providers to run BAM: Vercel (hosting the website), Upstash (the database that holds accounts and scores) and Resend (sending the confirmation and password emails, which means it handles the email address). They handle information only to provide that service. We do not sell information or give it to advertisers. We may disclose information if the law requires it.
Because these providers use data centres around the world, information may be stored or processed outside your country.
5. How long we keep information
- Account, progress and session information is kept until the account is deleted.
- Network-address counters delete themselves within 24 hours.
- Our providers keep their own server logs for the period set in their policies.
- After an account is deleted, the world-record numbers stay but are no longer linked to anyone.
6. Children
BAM is made for children to play with a parent’s or guardian’s permission. Accounts are created by us, not by children signing themselves up. Players cannot chat, message each other, or see each other’s profiles, and nothing a child enters is shown publicly. If you think a child has put personal information into a nickname, tell us and we will remove it.
7. Your choices and rights
A player, or a parent or guardian on their behalf, can write to at any time to:
- ask for a copy of the information we hold (we send a file with the login name, dates, profiles, scores and session times),
- ask us to correct it,
- ask us to delete it and close the account. Deleting removes the login, profiles, scores, session history and the private record-holder notes.
We aim to answer within 30 days. We may need to check that the request comes from the account holder or the child’s parent or guardian.
8. Keeping information safe
Connections to BAM are encrypted, passwords are stored scrambled, and only the administrator can see the list of accounts, their on/off status and when each was last used. The administrator cannot see anyone’s password. No system is perfectly secure, so please tell us straight away if you think something has gone wrong.
9. Changes to this page
If we change this policy, we will update the date at the top. If a change affects how we treat children’s information in a significant way, we will tell parents and guardians before it takes effect.
10. Contact
·