Privacy Policy

1. Introduction

Welcome to BeamOut. This Privacy Policy explains how RobotHead LTD ("we", "us", or "our") collects, uses, and protects your personal information when you use our mobile game (available on Android and iOS) and our website at beamout.me (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Account & Identity Information

When you sign in through a gaming platform, we collect:

• Your display name from Google Play Games Services (Android) or Apple Game Center (iOS)
• Your platform-specific player identifier (prefixed with your platform, e.g. "android:" or "ios:")
• Your avatar image, if provided by the platform
• Authentication tokens used to verify your identity (not stored long-term)

2.2 Gameplay Data

During gameplay, we collect:

• Game scores, level progression, and session duration
• Deterministic replay recordings (timestamped input events such as tap coordinates and their outcomes)
• Game state checksums used for replay validation
• The random seed used to generate your game session

2.3 Device & Security Information

To ensure fair play and protect the integrity of our leaderboards, we may collect:

• Device attestation data via Google Play Integrity (Android) or Apple App Attest (iOS), which confirms your device and app are genuine
• Your IP address, used for rate limiting and abuse prevention

2.4 Push Notification Data

If you opt in to notifications, we collect:

• Your device push token (via Firebase Cloud Messaging on Android or Apple Push Notification service on iOS)

2.5 Website Data

When you visit beamout.me, we may collect:

• Cookie consent preferences (stored locally in your browser)
• Standard web server logs (IP address, browser type, pages visited)

3. How We Use Your Information

We use your information to:

• Display your scores on public leaderboards (all-time, monthly, and weekly rankings)
• Validate your gameplay replays server-side by re-running them to confirm scores are legitimate
• Generate and publish video replays of your gameplay on our website
• Send you push notifications when your video replay is ready or your score has been validated
• Detect and prevent cheating, including seed grinding and replay manipulation
• Moderate usernames for inappropriate content
• Enforce rate limits and prevent abuse of our services
• Improve and maintain the Service

4. Video Replays

When you choose to share a replay, your gameplay is re-rendered server-side into a video. These video replays:

• Are publicly visible on our website at beamout.me/replays
• Display your display name, avatar, score, and platform
• Are automatically deleted after a retention period (typically 30 days)
• Can be viewed, shared, and downloaded by anyone visiting the website
• Are delivered via a content delivery network (CDN) for fast global access

Replays are only created when you actively choose to share. If you use a "Continue" (extra life) during a game session, that session is not eligible for replay sharing or leaderboard submission.

5. Data Retention

• All-time leaderboard entries are retained indefinitely
• Monthly leaderboard entries expire automatically after approximately 30 days
• Weekly leaderboard entries expire automatically after approximately 7 days
• Video replays are automatically deleted after the configured retention period (typically 30 days)
• Authentication tokens and upload tokens expire within minutes and are not retained
• Device attestation nonces expire within 5 minutes
• Identity verification cache expires after 1 hour

You may request deletion of your data at any time — see Delete My Data.

6. Third-Party Services

BeamOut integrates with the following third-party services:

• Google Play Games Services (Android) — for sign-in, identity verification, and player profiles
• Apple Game Center (iOS) — for sign-in, identity verification, and player profiles
• Google Play Integrity API (Android) — for device and app attestation
• Apple App Attest (iOS) — for device and app attestation
• Google AdMob — for serving interstitial and rewarded advertisements in the game
• Firebase Cloud Messaging — for delivering push notifications to your device
• Amazon Web Services (AWS) — for hosting our backend infrastructure, storing video replays, and delivering content via CloudFront CDN

Each of these services has its own privacy policy governing how it handles your data. We encourage you to review their respective policies.

7. Advertising

BeamOut displays advertisements through Google AdMob. AdMob may collect and use data to serve personalized or non-personalized ads, including:

• Device identifiers (such as the Advertising ID)
• General location information
• App usage data

You can opt out of personalized advertising through your device settings. For more information, see Google's advertising privacy policy.

8. Data Security

We take reasonable measures to protect your data, including:

• All communications between the game, website, and our servers use HTTPS encryption
• Replay submissions are authenticated with short-lived, one-time-use tokens
• Internal service communications are secured with cryptographic signatures
• Sensitive credentials are stored in encrypted secrets management systems
• Our infrastructure is protected by a web application firewall (WAF) with rate limiting

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

BeamOut is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately so we can delete it.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (including leaderboard entries and video replays)
• Object to or restrict the processing of your data
• Withdraw consent for push notifications at any time through your device settings
• Opt out of personalized advertising through your device settings
• If you are located in the EEA/UK and wish to revoke or modify your ad data consent preferences, you may clear your local application cache

To exercise any of these rights, please contact us using the details below.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us.