Privacy Policy

Balloonhead · Updated 11 October 2026

Who is responsible

Balloonhead is operated by Damian Mathew Bishop, a sole trader in Poland, ul. Wierzbięcice 44a/40A, 61-568 Poznań, Poland; NIP 7773472578, REGON 545258794. He is the controller of the personal data described here. Contact: [email protected].

This notice covers balloonhead.games and the Balloonhead desktop client when it connects to our services.

Data we use and why

Account and progress: a player identifier, chosen display name, sign-in token, friends, party participation, settings, inventory, coins, gems, companions, ranks, rewards and match/economy records. These let us provide your account, multiplayer features and saved progress.
Optional linked sign-in: Discord and Google may supply an identifier, display name and email address. Steam sign-in supplies a Steam identifier and can include a display name. We do not receive your provider password. Only providers available in the game can be linked.
Purchases: where gem checkout is enabled, Stripe handles payment details. Our records include a purchase identifier, account, gem pack, amount, currency, provider reference, status and timestamps. Our game server does not store full payment-card numbers.
Technical information: connections expose an IP address to our infrastructure. Error and security logs can include error messages, page URLs and account identifiers. Performance reports include frame timings, game phase, graphics counts, GPU model, screen resolution, settings, build and display name. These reports are sent periodically while connected, not only when you download an FPS log.
Messages and support: messages you send are delivered to their intended recipients. Information you send us for support, including a diagnostic file you choose to share, is used to investigate your request.

We process information needed to provide the game and purchases to perform our contract with you. We use necessary security and reliability information for our legitimate interests in preventing abuse and fixing problems, subject to your rights. Where applicable, legal obligations require us to process accounting or regulatory records. Optional processing that requires consent must be based on that consent.

What other people and services receive

Other players can see your display name, appearance, rank, gameplay and messages. Public profile features can show equipped cosmetics, companion collection/showcase information and in-game earnings history. Do not put private information in your display name or messages.

Hosting and database services process information needed to run the game. A sign-in provider receives information when you use its login flow; Stripe receives information necessary for checkout. These providers also have their own privacy notices. We may disclose information when legally required or necessary to handle a security incident or legal claim. We do not sell personal data or use it for advertising.

Provider services may involve processing outside the European Economic Area. Contact us for information about the providers and transfer arrangements applicable to your account. This notice does not claim that all processing takes place in the EU.

Storage on your device

The game uses browser storage, including localStorage, for its sign-in token, settings and local progress, and IndexedDB for local performance recordings. Downloaded desktop assets are stored on your device. Clearing site or app data removes those local copies; an unlinked guest account may then be inaccessible. It does not itself delete a server account.

The game does not integrate advertising trackers. Sign-in or payment pages may use their own cookies and storage under their providers’ notices.

Retention and deletion

Saved account and gameplay records remain available while the account is retained. You can request account deletion using the in-game Account controls or by contacting us. Account deletion removes the game account and its associated live records and unlocks; it is not a promise that separate payment-provider records, legal records, backups or earlier operational logs disappear instantly.

Operational logs rotate as their configured storage limits are reached, so there is no fixed number of days for every log entry. Device recordings remain until cleared by the app or you. Where records must be kept for a legal obligation or a specific unresolved claim, retention is limited to that purpose and its applicable period. Contact us about a particular record or deletion request.

Your choices and rights

Under applicable data-protection law, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where consent is the basis, you may withdraw it without affecting earlier lawful processing. Rights have legal conditions and exceptions. We may need proportionate information to verify your account.

Email the contact above; a guest account does not require an email address to make a request. We normally respond within one month; if a lawful extension is necessary, we explain it. You may complain to Poland’s data-protection authority (UODO) or your competent supervisory authority.

Parents or guardians with a concern about a child’s information should contact us. A provider’s sign-in availability does not establish that a child has any required permission.

Updates

We will publish revisions here and identify material changes in the game. A privacy-policy update does not itself provide consent to new optional processing.