Privacy Policy

Last updated: [effective date]

Draft for review. This is a working template, not legal advice. Have it reviewed and finalized by qualified counsel — and confirm it against the actual data practices of each product — before relying on it with real users.

This Privacy Policy explains how Mudbug Software, LLC ("Mudbug Software," "we," "us") collects, uses, and shares information when you visit this website or use our products, including Mudbug Bourré (collectively, the "Services").

Information we collect

Account information. When you create an account, we collect your email address and a display name. If you sign in with Google, we receive basic profile information (your name, email, and a Google account identifier) from Google. If you register with a password, we store your email and a securely hashed password — never the password itself.
Gameplay information. For our games, we keep information needed to run and improve play — for example your in-game name, avatar, and game history.
Messages you send us. If you use our contact form or email us, we receive the information you provide (such as your name, email, and message).
Technical information. Like most websites, we automatically receive standard log data (such as IP address, browser type, and pages requested) and use strictly necessary cookies to keep you signed in and to protect requests.

How we use information

To provide, operate, secure, and improve the Services;
To create and manage your account and authenticate you;
To respond to your messages and provide support;
To detect, prevent, and address fraud, abuse, and security issues;
To comply with legal obligations.

Cookies

We use cookies that are necessary for the Services to function — for example, to keep you signed in (a session cookie) and to guard against cross-site request forgery. We do not use advertising cookies.

Service providers

We share information with vendors who process it on our behalf, only as needed to run the Services. These currently include hosting (Railway), sign-in (Google OAuth), and transactional email (MailerSend). If we add paid features, we will use a payment processor (such as Stripe) that handles payment details directly. We do not sell your personal information.

Data retention

We keep information for as long as your account is active or as needed to provide the Services, resolve disputes, and meet legal obligations. You may ask us to delete your account.

Your choices and rights

You may request access to, correction of, or deletion of your personal information by contacting us. Depending on where you live, you may have additional rights under applicable law.

Children

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children.

Security

We take reasonable measures to protect information, including hashing passwords and serving the Services over encrypted connections. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Changes

We may update this policy from time to time. When we do, we will revise the "last updated" date above.

Contact

Questions about this policy? Email [email protected] or use our contact form.