Who is responsible
Andrei Babrounik, operating as Andrew Bro in Poland, is responsible for the game's processing of personal data. Contact [email protected] for privacy questions or requests. This notice covers the Cheap Shots game and its backend. Stores, payment providers and this portfolio website have their own privacy notices.
Information used by the game
- Accounts: a game account identifier, authentication/session information, and, when you register with email, your email address and a salted password hash. The game also keeps progress, balance, settings, selected character and Premium status.
- Linked platforms: when you choose Discord, Steam, Apple or Google sign-in or linking, the game receives a platform user identifier and the profile information needed for sign-in, such as a username or verified email when provided. It does not receive your platform password.
- Multiplayer: room membership, player name, character, match actions and results are sent to the server. Your name, appearance and match state are visible to other players in the same game.
- Purchases: store/product identifiers, order or transaction identifiers, purchase tokens where needed, account association, verification timestamps and purchase/refund status. These records allow the server to verify and restore Premium and handle refunds. The game backend does not collect your full payment-card details.
- Technical information: network requests can include an IP address, browser/device headers and diagnostic information. Cloudflare hosts the game backend and may process request, security and execution logs. Local storage on your device keeps game settings and session information.
Purposes and legal bases
Account operation, multiplayer and delivery/restoration of purchased features are necessary to provide the service you request (performance of a contract). Security, fraud prevention, troubleshooting and preventing duplicate or fraudulent purchase claims rely on our legitimate interests in maintaining a working and secure game. Records required by applicable tax, accounting or consumer law are processed to comply with legal obligations. Optional third-party account linking is initiated by you; it is not required for guest play. You need an account to keep and restore purchases.
Providers and sharing
Cloudflare processes hosted game data and technical traffic. When their features are used, Discord, Valve/Steam, Apple, Google and Stripe process authentication or purchase information. The backend exchanges the identifiers and purchase evidence needed to verify a transaction with the relevant provider; it does not send every linked identity to every store. Other players receive the multiplayer information described above. We do not sell game account data.
Providers may process data outside the European Economic Area under their applicable data-protection arrangements. Their notices describe their own processing: Cloudflare, Discord, Steam, Apple, Google and Stripe.
Retention
Account and progress records are kept while needed to operate your account. Purchase records are kept while needed to provide restoration, resolve disputes, prevent fraud and meet applicable legal retention requirements. Room state is temporary and is cleared after inactive rooms expire. Log retention depends on hosting configuration and provider requirements. These categories do not currently have one shared automatic deletion period.
Your choices and rights
You may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests where the law provides these rights. Email [email protected] with “Cheap Shots privacy request” and your game account identifier or linked platform username. Do not send passwords, authentication codes or payment-card details. We may need to verify ownership. Deletion can remove progress and the account association used to restore purchases; records that must be retained for legal obligations or disputes may be retained for that purpose.
Clearing browser/app storage removes local settings and session information, but does not delete server records. You may also complain to your local data-protection authority, including Poland's UODO. The game does not make automated decisions with legal or similarly significant effects about you.
Age and updates
The game is not intended for children under 13 or anyone below the minimum age required by the platform they use. If you believe a child has provided account data improperly, contact us. This notice may change when game features or providers change; the date above identifies the current version.