Last updated: September 16, 2026 · Version 2026.09.16
This Privacy Policy explains how Bada Studios LLC ("GrailBounty," "we," "us," or "our") handles information through the GrailBounty website, applications, and related services. Our contact details are support@grailbounty.com and 30 N Gould St #Ste R, Sheridan, WY 82801, USA. Bada Studios LLC is the data controller responsible for personal-data decisions.
We do not intentionally request sensitive personal information unless specifically identified at collection. Do not submit payment-card numbers, government identifiers, passwords, or other sensitive information in public fields or messages.
Where required, we process personal information on the following bases: performance of our contract with you (accounts, hunts, matching, messaging), your consent (notifications and optional profile fields), our legitimate interests (security, abuse prevention, product improvement, and analytics), compliance with legal obligations, and protection of vital interests.
We use Firebase and Google Cloud services, which may include Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, hosting/deployment, logs, and security services. Google processes information on our behalf according to the applicable Google Cloud and Firebase agreements.
We also use Vercel for hosting, deployment, performance, and Web Analytics. Our current provider list is: Google/Firebase (authentication, database, storage, functions, messaging) and Vercel (hosting, analytics).
We may share information with service providers, infrastructure providers, moderators, professional advisers, authorities when legally required, and parties involved in a merger, acquisition, financing, or sale of assets. Public profiles, hunts, listings, card data, reports, and messages may be visible according to the settings and features you use. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
We retain information only for as long as needed for the purposes described here, account operation, security, dispute handling, backups, analytics, and legal duties. Active account data is kept while your account is open; deleted-account data is removed within 90 days except records we must retain; messages are retained while both parties' accounts exist; reports and moderation records are kept for up to 2 years; logs and security data for up to 12 months; and backups cycle out within 90 days.
To make a privacy request, email support@grailbounty.com from the address on your account. We verify requests against your account, respond within 45 days where required, do not charge a fee for reasonable requests, and will explain any denial with an appeal path by reply.
The Service is not directed to anyone under 18. We do not knowingly collect personal information from a child in violation of applicable law. If you believe a child provided information, contact support@grailbounty.com and we will delete it.
Information may be processed in countries other than where you live, including the United States, where our providers operate. Where required, transfers rely on the providers' applicable safeguards such as standard contractual clauses.
We use administrative, technical, and organizational measures intended to protect information. No system, transmission, or storage method is completely secure. Do not submit information that you would not want exposed if a security incident occurred. To report a security issue or incident, contact support@grailbounty.com; we notify affected users and authorities when legally required.
Depending on where you live, you may have rights to know/access, correct, delete, obtain portability, opt out of certain processing, limit sensitive-data use, appeal a decision, or avoid discrimination for exercising rights. To exercise any of these rights, email support@grailbounty.com; you may use an authorized agent where the law allows, and we will describe any appeal process in our response.
We may update this Policy and will revise the effective date. For material changes we will post a notice on the Service before the change takes effect. Privacy requests and questions go to Bada Studios LLC at support@grailbounty.com or 30 N Gould St #Ste R, Sheridan, WY 82801, USA.