Last updated: [LAST UPDATED DATE]
This Privacy Policy explains how Bada Studios LLC ("GrailBounty," "we," "us," or "our") handles information through the GrailBounty website, applications, and related services. Our contact details are [PRIVACY CONTACT] and 30 N Gould St #Ste R, Sheridan, WY 82801, USA. The person or entity responsible for personal-data decisions in each jurisdiction must be confirmed: [DATA CONTROLLER / BUSINESS ROLE].
We do not intentionally request sensitive personal information unless specifically identified at collection. Do not submit payment-card numbers, government identifiers, passwords, or other sensitive information in public fields or messages.
The lawful bases relied on by jurisdiction must be completed by the owner and counsel: [LEGAL BASES BY PURPOSE AND JURISDICTION]. Potential categories may include contract, consent, legitimate interests, legal obligation, and protection of vital interests, but we do not represent that any particular basis applies until confirmed.
We use Firebase and Google Cloud services, which may include Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, hosting/deployment, logs, and security services. Google and other providers process information on our behalf or as separate service providers according to the applicable agreements and configurations. The exact enabled services, provider list, subprocessors, and data-region commitments must be confirmed: [PROVIDER/SUBPROCESSOR LIST AND LINKS].
We may also use Vercel for hosting, deployment, performance, and Web Analytics, and other vendors for email, abuse prevention, monitoring, or support. The final vendor list and roles require owner confirmation: [SERVICE PROVIDER INVENTORY].
We may share information with service providers, infrastructure providers, moderators, professional advisers, authorities when legally required, and parties involved in a merger, acquisition, financing, or sale of assets. Public profiles, hunts, listings, card data, reports, and messages may be visible according to the settings and features you use. We do not sell personal information as that term is defined by applicable law unless this statement is changed after owner and counsel review: [SALE/SHARING POSITION].
We retain information only for as long as needed for the purposes described here, account operation, security, dispute handling, backups, analytics, and legal duties. Exact periods must be supplied and documented by the owner: active account data [RETENTION PERIOD], deleted-account data [RETENTION PERIOD], messages [RETENTION PERIOD], reports/moderation records [RETENTION PERIOD], logs/security data [RETENTION PERIOD], backups [RETENTION PERIOD].
Request identity verification, response deadlines, fees, and appeal process: [PRIVACY REQUEST PROCEDURE].
The Service is not directed to children under [MINIMUM AGE]. We do not knowingly collect personal information from a child in violation of applicable law. If you believe a child provided information, contact [PRIVACY CONTACT]. The legally approved age threshold and parental-consent process must be confirmed: [CHILDREN'S PRIVACY REQUIREMENTS].
Information may be processed in countries other than where you live, including countries where our providers operate. The transfer mechanism and supplementary safeguards must be confirmed: [INTERNATIONAL TRANSFER MECHANISM AND REGIONS].
We use administrative, technical, and organizational measures intended to protect information. No system, transmission, or storage method is completely secure. Do not submit information that you would not want exposed if a security incident occurred. Our incident-response contact and legally required notification process are: [SECURITY CONTACT AND INCIDENT PROCESS].
Depending on where you live, you may have rights to know/access, correct, delete, obtain portability, opt out of certain processing, limit sensitive-data use, appeal a decision, or avoid discrimination for exercising rights. The states/countries covered, categories of personal information, authorized-agent process, and appeal contact must be completed: [STATE/REGIONAL PRIVACY RIGHTS AND PROCESS].
We may update this Policy and will revise the effective date. Material-change notice methods must be confirmed: [MATERIAL CHANGE NOTICE]. Privacy requests and questions go to [PRIVACY CONTACT] at [PRIVACY CONTACT EMAIL] or 30 N Gould St #Ste R, Sheridan, WY 82801, USA.