BANDAAL
BANDAAL
This Privacy Policy explains what information Bandaal collects when you create a developer account, upload an app, or download one, and how that information is used and protected. It applies alongside our Terms of Service.
| Data | Why we collect it |
|---|---|
| Name and email address | To create and manage your developer account, verify your email, and contact you about your account or uploads |
| Password | Stored as a one-way bcrypt hash — we never store or can see your actual password |
| Profile photo (optional) | Shown on your account and next to apps you publish, if you choose to upload one |
| Uploaded app files and metadata | To scan, host, and list the apps you publish |
| Download records | Which app and version was downloaded, and a hashed (not raw) IP address, used for basic analytics and to prevent abuse |
| Login activity | Failed login attempts and timestamps, used to protect accounts from brute-force attacks |
Bandaal uses a session cookie to keep you logged in while you browse the site. This cookie is necessary for the site to function and does not track you across other websites. We do not currently use third-party advertising or tracking cookies; if that changes (for example, if ads are added to the site), this policy will be updated first.
Your account information is kept for as long as your account exists. If you delete your account from your profile page, your account, your uploaded apps, and their associated download history are permanently removed. Some records may be retained briefly if required for security or legal purposes (for example, evidence related to a reported violation).
You can, at any time:
If you're located somewhere with additional legal data rights (such as the EU or California), you may also request a copy of the data we hold about you, or ask us to correct inaccurate data, by using the contact details below.
Bandaal's developer accounts are not intended for children. We do not knowingly collect personal information from anyone under the age required by local law to create an online account without parental consent (for example, 13 in the United States). See our Child Safety Standards for how we handle apps and content involving minors.
Passwords are hashed with bcrypt, uploaded files are quarantined and scanned before ever becoming downloadable, and all form submissions are protected against CSRF. No system is perfectly secure, but we take reasonable, industry-standard steps to protect your information.
This policy may be updated as Bandaal grows. Significant changes will be reflected here with an updated date at the top of the page.
For questions about this policy, or to make a data access/deletion request beyond what's available in your profile settings, use our contact form or email bandaal@bandaal.com.
Looking for the privacy policy of Bandaal's own games (Crazy Ring, Steady Hand, Mautand's Puzzle)? See Bandaal Apps Privacy Policy.