Yukiboo privacy policy

This policy explains what information the Yukiboo game collects, why, who helps us process it, how long we keep it and the choices you have. We wrote it to match what the game actually does. If something is unclear, write to privacy@wabomo.com.

Who we are

Yukiboo is made by Wabomo (Wabomo, Vilnius, Lithuania). For the purposes of data protection law we are the controller of the personal data described here. Contact: privacy@wabomo.com.

The short version

• You do not need to give us your real name, email address or phone number to play.
• The game creates an anonymous account for you so your progress, trophies and purchases are kept.
• Your display name, flag and trophies are visible to other players on leaderboards and in friends and party features.
• We use Google Firebase to run the game, and Firebase Analytics and Crashlytics to improve it. You can turn analytics off in Settings > Privacy.
• The current version of Yukiboo does not show ads.
• We do not sell your personal information.
• You can delete your account in the game or on this website.

What we collect and why

Account and device

Anonymous account id

Created by Firebase Authentication when you first play. Used to keep your progress, trophies and purchases on your account and to protect fair play.

Random device id

A random value the game creates (not your phone's hardware id or advertising id). Used to keep one active device per account, to keep progress made offline, and to stop abuse of invite rewards.

IP address

Received whenever your device connects. We store only a scrambled (hashed) version for one day to limit mass account creation. Our service providers also receive it to deliver their services.

Country

Worked out from your network connection, not from GPS. Used to apply regional rules, for example where some reward types are not allowed.

Time zone

Used for the daily reset and to avoid sending notifications at night.

Profile and social features

Display name and flag

You choose your display name (default "Rider") and may pick a flag. They appear on your profile card, on leaderboards, and in friends and party features, where other players can see them.

Friends

If you use friends: your friend code, friend list, recent racers, blocked players, invites, online status, and any reports you send or that are made about you. Used to run friends features and keep players safe.

Parties

If you join a party: the party code, members, names, flags and ready state. During a party race your live position, distance and speed are shared with the other members of that party only.

Invites

If you install or open the game through an invite link, we receive the inviter's friend code or party code (directly from the link or through the Google Play Install Referrer) and a scrambled device value, to give invite rewards fairly.

Gameplay

Game progress

Progress, coins, gems, cards, trophies, arenas, races, wins, items you own, quests and pass progress. Used to run the game.

Race data

Race tickets, finish times and the path your rider took. Used for fair matchmaking and to detect cheating.

Ghost replays

When you finish a race, a recording of your rider's path plus your board, rider and style items may be stored and shown to other players as a rival in their races. Ghost rivals are shown with generated names, not your display name.

Purchases

Purchase records

When you buy something: a scrambled copy of the store purchase token, the product, its state, the store country and the time. We check purchases with Google Play (and, on iOS, with Apple). We never receive your card or bank details.

Subscription records

If you join Pip Club: the subscription product, its status (active, cancelled, expired or refunded), the end of the paid period, whether it renews, renewal and cancellation events reported by the store, and when you claimed the daily gift. We use them to give you club benefits only while you have paid for them.

Spending limit settings

If you set a spending limit, we keep that setting. The game may store a birth year you enter for that feature. The current version does not ask for your age.

Notifications

If you allow notifications, we store a Firebase Cloud Messaging token, your platform, time zone, permission state, your notification choices and when you last opened the game. We use it to tell you about things like a ready chest, a daily gift or a party invite. We send no notifications between 22:00 and 09:00 your time and at most one promotional notification a day.

Analytics and crash reports

With analytics on, Firebase Analytics receives game events, such as races started and finished, steps of the tutorial, store and offer views, purchases and their price, party and share use, review prompts, invite use, feedback star ratings and which test version of a feature you see. Each event has a random session id and the time. We do not send your name, codes, free text, device id or advertising id. Firebase also uses its own app instance id.

Firebase Crashlytics receives crash and freeze reports with device and app details, so we can fix bugs. Firebase Remote Config uses a Firebase installation id to deliver game settings and tests.

Things that stay on your device

• Share clips: the game keeps the last few seconds of gameplay on your device so you can share a highlight. Nothing is uploaded unless you choose to share it, and then it goes where you send it.
• Written feedback: text feedback stays on your device. Only the star rating is sent with analytics.
• Diagnostics log: stays on your device.

Linked sign-in

If a version of the game lets you link your account with Google, Apple or Google Play Games, we store the provider and the account id that provider gives us, so you can load your progress on another device. We do not store your email address.

Device permissions

Yukiboo uses internet access and vibration (for haptic feedback). After your first win the game may ask to send notifications. You can say no or change it at any time. The game does not use your location, camera, microphone or contacts.

What other players can see

Your display name, flag, trophies, rank and profile card can be seen by other players. Friends and party members can see when you are online and in a party. Party members see your live position during a race. Ghost replays of your races may appear in other players' races under a generated name.

Advertising

The current version of Yukiboo does not contain an advertising SDK and shows no ads. If we add optional rewarded ads in a future update, we will use Google AdMob, update this policy before that version is released, list every ad partner here, ask for your consent where the law requires it, and give you an ad choices option in the game.

Service providers

We use these services to run Yukiboo. They process data on our behalf or, where stated in their own terms, as independent controllers.

• Google Firebase (Authentication, Cloud Firestore, Realtime Database, Cloud Storage, Cloud Functions, Hosting for invite links, Analytics, Crashlytics, Remote Config, Cloud Messaging, Installations), provided by Google. Firebase privacy · Google Privacy Policy
• Google Play (Play Billing, Play Developer API to check purchases, In-App Review, Install Referrer). Google Privacy Policy
• Apple App Store (StoreKit for purchases, when the iOS version is released). Apple Privacy Policy
• Sign in with Google, Sign in with Apple and Google Play Games, only if account linking is offered in your version and you choose to use it. Google · Apple

We may also disclose information if the law requires it, to protect players and our games, or as part of a sale or merger of our business (you would be told).

Legal bases (EEA and UK)

• Contract: running your account, game progress, multiplayer, friends, parties, purchases and support.
• Legitimate interests: security, fair play and anti-cheat, preventing abuse of invites, and crash reports so we can fix bugs. You can object at any time by emailing us.
• Analytics: analytics is on when you start the game and you can turn it off at any time in Settings > Privacy. Turning it off also stops crash reports. We rely on legitimate interests to improve the game.
• Consent: push notifications, and personalised ads if ads are ever added. You can withdraw consent at any time.
• Legal obligation: keeping purchase records for tax and accounting.

International transfers

Our game services run on Google Cloud in the United States. When data is transferred outside the EEA or UK, it is protected by the European Commission's Standard Contractual Clauses and the UK addendum, and by Google's certification under the EU-US Data Privacy Framework and its UK extension where it applies.

How long we keep data

Account, progress, notification settings, linked sign-ins, leaderboard rows

Until you delete your account (deletion runs after a 30-day grace period).

Race tickets and race paths

About 30 days.

Hashed IP for sign-up limits

1 day.

Parties

Removed after about 30 minutes without activity.

Friend invites

3 minutes.

Profile card, friend code, friends, ghost replays, invite, import and link records

Until you delete your account. They are deleted together with it.

Purchase and subscription records

Kept after account deletion as long as tax and accounting law requires.

Fair-play and safety records, invite abuse check

12 months after account deletion.

Deletion record

A hashed id and the date, kept for 3 years.

Analytics and crash data

Not linked to your name. Event-level analytics data is deleted by Firebase after at most 14 months, crash reports after 90 days.

Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent. Email privacy@wabomo.com and include your display name and friend code so we can find your account. We may need to check that the account is yours. We reply within one month (EEA/UK) or 45 days (California).

If you are in the EEA or UK, you can also complain to your local data protection authority.

California residents

In the last 12 months we collected these categories of personal information: identifiers (account id, random device id, IP address, display name), commercial information (purchase records), internet or other electronic activity (gameplay, analytics and crash data), and coarse location (country only). We use them for the purposes in this policy and disclose them to the service providers listed above.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We do not collect sensitive personal information. If we ever add personalised ads, that may count as "sharing" under California law, and we will update this policy and offer an opt-out in the game before it happens. You have the right to know, delete and correct your information, and we will not treat you differently for using your rights. An authorised agent may make a request for you.

Children

Yukiboo is meant for players aged 13 and over and is not directed at children under 13. The game does not ask for your age. If you are a parent or guardian and believe your child under 13 has played Yukiboo, email privacy@wabomo.com with the child's display name or friend code and we will delete the account.

Security

Data is encrypted in transit between the game and our services. Access to game data is limited by security rules, and players cannot read other players' private game data. No system is perfectly secure, so please tell us if you find a problem.

Changes to this policy

We will update this page when the game changes, for example if we add ads or new partners. If a change is important, we will also tell you in the game. The date at the top shows the latest version.

Contact

Wabomo, Wabomo, Vilnius, Lithuania. Privacy questions: privacy@wabomo.com. General support: hello@wabomo.com.