Privacy Policy

Who we are

Balloonhead is operated by Damian Mathew (damian-mathew.com). This policy covers the game at play.damian-mathew.com and the desktop (Steam) version.

What we store

• Guest accounts: a random token in your browser, your chosen balloon name, and your game progress (coins, gems, cosmetics, companions, match results, rank). No email, no real name.
• Linked accounts (Discord / Google / Steam): only the account identifier and display name the provider gives us, used to sign you in. We never see your password.
• Purchases: handled entirely by Stripe or Steam. We store only the order reference and what it unlocked - never card numbers.
• Technical logs: match events and server logs (IP addresses appear in standard connection logs) kept briefly for cheat prevention and debugging.

What we don't do

• No ads, no ad trackers, no selling or sharing of data with third parties.
• No analytics beyond our own server logs.
• No chat history retention beyond the running match.

Where it lives

Game servers run on DigitalOcean (EU), the database on Neon (EU). Traffic is encrypted (TLS).

Your rights (GDPR)

You can ask for a copy of your data or full deletion of your account and everything attached to it: email bishop.damian@gmail.com from the account in question, or use the ACCOUNT panel in-game. Deletion is permanent and includes purchases' unlocks.

Children

The game is not directed at children under 13. If you believe a child has created an account, contact us and we will delete it.

Changes

If this policy changes in a way that matters, we will say so in the game before the change applies.