Privacy Policy

Who we are and scope

Browser Boxing is an independently operated browser game available at browserboxing.com. In this Policy, “Browser Boxing,” “we,” “us,” and “our” mean the operator of the Browser Boxing website, game, account services, matchmaking, realtime fights, spectator features, and related services (collectively, the “Service”). Browser Boxing is the controller of personal information described in this Policy.

This Policy applies when you visit or use the Service as a guest, account holder, player, or spectator. It does not apply to a third-party service governed by its own privacy terms.

Information we collect

• Account information: public handle, email address, boxer name, password hash, email-verification state, account status, account creation and update times, and requests to change or recover an account. We do not store your password in readable form.
• Guest and boxer information:guest and session identifiers, boxer name, appearance, build and stats, Career XP and level, fight record, rating, placement status, and belt history. A guest appearance is also saved in your browser's local storage so it remains available on that device.
• Gameplay information: matchmaking and queue activity, accepted fight inputs, timing and connection events, participants, replays, results, round statistics, scorecards, progression and rating changes, and spectator activity needed to provide a live fight.
• Device, session, and security information: the Browser Boxing session cookie, browser user-agent, session creation, last-use, expiration and revocation times, protected token hashes, and protected network-address or request identifiers used for security and rate limiting. Infrastructure providers may process IP addresses, request headers, and diagnostic or access logs when delivering and protecting the Service.
• Communications: the destination email address and transactional message details needed to send verification, password-recovery, and account security messages, plus information you send when contacting us.

We collect information directly from you, automatically from your browser and use of the Service, from other players' interactions with you, and from the infrastructure and email providers that help operate the Service.

How and why we use information

• Provide guest play, accounts, boxer customization, matchmaking, fights, spectators, public records, rankings, and account communications.
• Authenticate sessions, recover accounts, maintain fight continuity, verify official results, and resolve gameplay or account disputes.
• Detect cheating, fraud, abuse, security incidents, service failures, and violations of the Terms.
• Debug, maintain, secure, and improve the Service and understand aggregate Service performance.
• Enforce our agreements, protect players and the Service, comply with law, and establish or defend legal claims.

Where applicable law requires a legal basis, we process information to perform our agreement with you; for our legitimate interests in operating, securing, improving, and protecting the Service; to comply with legal obligations; with consent when we specifically request it; and to protect vital interests in an emergency. Automated matchmaking, scoring, rating, and moderation-support systems affect only access to and records within the game; they do not make decisions with legal or similarly significant effects.

Information visible to others

The Service is multiplayer and maintains public game records. An eligible account profile may display your handle, boxer name and appearance, permanent build, Career facts, placed rating, record, belt state, and published fight history. Published fight pages may display participant snapshots, results, replays or event timelines, scorecards, statistics, and progression, rating, or belt effects. Other players and spectators can also see information needed to present a live matchup.

Choose a handle and boxer name you are comfortable making public. Do not use your legal name or other identifying information unless you want it associated with your public game activity. Email addresses, password hashes, session credentials, verification credentials, recovery credentials, and protected network identifiers are not public. Test, staff, disabled, unverified, and otherwise ineligible accounts are excluded from public rankings and profile search. Automated opponents may be used for matchmaking and showcase fights without being identified as automated in a particular matchup.

When we disclose information

We may disclose the categories described above:

• To hosting, content-delivery, security, database, realtime coordination, and transactional-email providers that process information to provide services to us, including Cloudflare and Amazon Web Services.
• To other players, spectators, and the public as described under “Information visible to others.”
• When reasonably necessary to comply with law or legal process, protect rights or safety, investigate abuse or fraud, or enforce our Terms.
• As part of a merger, financing, reorganization, sale, transfer, insolvency, or similar change involving the Service, subject to applicable legal protections.
• At your direction or with your consent.

We do not sell personal information, share it for cross-context behavioral advertising, or use third-party advertising cookies. We do not knowingly sell or share the personal information of anyone under 16.

Cookies, local storage, and tracking choices

Browser Boxing uses one necessary first-party cookie named bb_session. It contains a random session token and is HTTP-only, SameSite=Lax, restricted to this site, and HTTPS-only in production. The server stores a protected hash of the token. The cookie and session can remain valid for up to 30 days unless revoked or replaced. Blocking it prevents guest, account, and online-play features from working.

For guests, local storage keeps the boxer appearance selected on that device. You can remove it by clearing site data in your browser. Browser Boxing does not use advertising or cross-site analytics technologies in this release, and other parties do not collect information through the Service to track your activity over time and across unrelated websites. Because we do not perform that tracking, Global Privacy Control and “Do Not Track” signals do not change how this release operates.

International processing

Browser Boxing is operated from Illinois in the United States. If you use the Service elsewhere, your information will be transferred to and processed in the United States and may be processed where our service providers operate. Those locations may have privacy laws different from the laws where you live. Where required, we and our providers use legally recognized transfer safeguards. Contact us to request more information about safeguards applicable to your information.

Retention

We keep information for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining the integrity of public game records, securing accounts, resolving disputes, enforcing agreements, and meeting legal obligations. The current release applies these criteria:

• Realtime tickets, matchmaking state, presence, reconnect data, and security rate-limit records expire automatically, generally within seconds, minutes, or hours.
• Sessions stop authorizing access after 30 days or earlier revocation. Email-verification links stop working after 24 hours and password-reset links after one hour.
• Guest appearance data in local storage remains until it is replaced, cleared after account adoption, or removed through browser controls.
• Guest identities, accounts, boxer progression, ratings, belt history, and completed-fight records are durable game records and may be kept for the life of the Service unless deletion or de-identification is required by law.
• Security, diagnostic, support, and provider records are kept according to operational need and provider retention settings, then deleted or de-identified when no longer reasonably necessary.

A deletion request does not necessarily require deletion of information that must be retained for security, fraud prevention, legal compliance, exercise or defense of claims, or the integrity of completed public fights. Where appropriate, we may de-identify account information while retaining non-identifying fight records. Residual copies may remain temporarily in restricted backups until those backups are overwritten.

Your rights and choices

Account controls allow you to change your email or password and revoke individual or all browser sessions. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or a portable copy; withdraw consent where processing relies on consent; and appeal our refusal of a request. You may also have the right to complain to your local privacy or data-protection authority.

Submit a request to [email protected]. Describe the request and the account email or public handle involved. To protect players, we may need to verify your control of the account or email before acting. An authorized agent may submit a request where applicable, but we may require proof of authority and direct identity verification. We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.

Because Browser Boxing does not sell personal information or share it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out needed for the practices described in this Policy.

Children's privacy

The Service is intended for people age 13 and older and is not directed to children under 13. Do not use the Service or provide information to us if you are under 13. We do not knowingly collect personal information from children under 13. A parent or guardian who believes a child under 13 has used the Service should contact us so we can investigate and delete or de-identify the information as required. Users who are not old enough to agree to the Terms where they live may use the Service only with a parent or legal guardian's permission.

Security

We use administrative, technical, and organizational measures designed to protect information, including password hashing, protected or opaque credentials, access and origin controls, rate limits, restricted account responses, and encrypted production transport. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. We will provide legally required notice if a qualifying data breach occurs.

Changes to this Policy

We may update this Policy to reflect changes to the Service, our practices, or the law. We will post the revised Policy here and change its effective date. If a change is material, we will provide additional notice reasonably suited to the change, such as a prominent notice in the Service or an account email. We will request consent before applying a materially different practice to previously collected information when law requires it.

Contact

Questions, privacy requests, and concerns may be sent to the operator of Browser Boxing at [email protected]. Browser Boxing is operated from Illinois, United States.