BOATBRAWL

XCELAUDIT · BoatBrawl

Privacy policy

Last updated: 27 September 2026

This policy explains how XCELAUDIT (“we”) handles information when you use BoatBrawl on the web, Android, iPhone/iPad, Mac or Windows, and when you contact us. For privacy questions, email rehaancubes@gmail.com.

Information we handle

InformationUse and handling
Login and accountIf you use Google or Apple sign-in, Firebase Authentication processes your account identifier, provider, name and email when supplied. Apple may supply a private relay email. We do not receive your Google or Apple password. Authentication credentials are stored by the app or its authentication provider to maintain your session.
Gamer tag and preferencesYour gamer tag, selected boat/map, audio and controller settings are saved on your device or browser. A gamer tag is not a unique account identifier. Your tag, selected boat and match results are shown to players in your multiplayer room.
Multiplayer activityThe server processes connection identifiers, room codes, game inputs, boat positions, health, pickups and scores to run and secure matches. A signed-in player's Firebase identifier is used to authenticate the connection. Guests can play without a Firebase login.
PurchasesWhere purchases are available, Apple/Google and RevenueCat process product and transaction identifiers, receipts or purchase tokens, purchase status and premium-boat entitlement information. RevenueCat uses a customer identifier that can be linked to your Firebase account, or an anonymous identifier. We do not receive your full payment-card details.
Ads (Android app only)The Android app shows an ad when you leave the results of an online match. Google AdMob serves these ads and may process your device's advertising ID, IP address (used for approximate location), device and app information, and how you interact with ads, to deliver, measure and, where you allow it, personalise ads and to prevent fraud. RevenueCat receives ad events (for example, that an ad was shown or clicked and the revenue it earned), linked to your RevenueCat customer identifier. Ads are not shown in LAN, local-party or solo games, to premium boat owners, or in the iPhone/iPad, Mac, Windows or web versions.
Technical and support informationHosting and authentication providers process IP addresses, connection/request information and technical logs for delivery, security and troubleshooting. Email support receives your email address and the information you choose to send. Do not send passwords, sign-in codes or payment-card details.
Platform game servicesIf you use Game Center or Google Play Games features, those services may process your platform player identity, achievements and leaderboard scores under their own settings and privacy policies.

Why we use this information

We use information to provide sign-in, multiplayer, purchases and restores; show and measure ads in the Android app; remember preferences; prevent abuse; troubleshoot problems; answer requests; and meet applicable legal obligations. Where a legal basis is required, these activities may rely on providing the service you request, legitimate interests in secure operation, legal obligations, or consent where required. You can play as a guest instead of creating a BoatBrawl login.

Service providers and sharing

We use Google Firebase for authentication and web hosting, Google Cloud (Compute Engine and Cloud Run) for multiplayer simulation, Photon Realtime (Exit Games) for multiplayer networking where enabled, RevenueCat for purchase management and ad revenue measurement, Google AdMob for ads in the Android app, and Apple/Google for sign-in, billing and platform game features. Photon processes connection identifiers and IP addresses and relays game messages, including gamer tags, room membership, inputs and match state. They receive information needed for those functions. Multiplayer peers see public match information, not your login email through the game's roster.

See Firebase privacy information, Google's privacy policy, Photon's privacy policy, Apple's privacy information, and RevenueCat's privacy policy, and how Google uses information from apps that use its services. We may also disclose information when required by law or necessary to address fraud, security threats or legal claims.

Advertising, tracking and device storage

The Android app shows ads through Google AdMob, as described above; the other versions of BoatBrawl do not show ads. In the European Economic Area, the UK and Switzerland we ask for your consent through Google's consent form before ads are personalised, and you can change your choice at any time from Settings → Ads → Ad privacy in the app. On any Android device you can reset or delete your advertising ID, or opt out of personalised ads, in your device's privacy or Google settings. We do not sell personal information for money. Login, purchases, multiplayer and service-provider operational data are described above. The website and app use local storage and authentication storage for functionality. Clearing browser site data or app data can remove local preferences and sign you out; it does not delete server accounts or store purchases.

Retention and deletion

Firebase account information remains until the account is deleted. Local preferences remain until reset, cleared or removed with the app/site data. Multiplayer rooms are held in server memory and are removed when closed or the server restarts; operational logs are separate from room state. Support correspondence is retained as needed to handle your request and any applicable legal obligations.

Current purchase-data limitation: deleting your BoatBrawl login in the app does not automatically delete RevenueCat customer or purchase records. Those records currently remain in RevenueCat. Apple and Google also maintain their own billing records. Contact us to request review or deletion of additional account-linked data; do not assume uninstalling or deleting your login removes these records.

Use our account and data deletion page for the in-app steps and an external request route. Any information that must be retained under applicable law should be limited to that purpose; we will explain relevant retention when responding to your request.

Security and international processing

We use encrypted network connections for the hosted game and authentication. No service can guarantee absolute security. Our multiplayer server is currently in Mumbai, India; authentication, hosting, purchase and support providers may process information in other countries. Do not put sensitive information in your public gamer tag.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete or obtain a copy of your personal information, restrict or object to processing, withdraw consent where processing relies on it, or complain to a data-protection authority. Email us with your request. We may ask for information needed to verify ownership, but never your password or sign-in code. Some rights have legal exceptions.

Age and policy updates

BoatBrawl is intended for ages 13 and up, not children under 13. Additional age or parental-permission requirements may apply where you live. If you believe a child under 13 has provided personal information, contact us so we can investigate. We will update this page when our practices change and show the revised date above.