Privacy Policy

Last updated: October 23, 2026

In short: we collect only what the game needs to work, we do not sell your personal information, and you can delete your account at any time.

1. Who we are

Baghchal Online ("the App") and this website are run by Bibash Shrestha ("we", "us") in Nepal. This policy explains what information we collect, why we collect it, who can see it and what choices you have. If you have a question, write to [email protected].

2. Information we collect

Information you give us

Account: when you sign in with Google, Google sends us your e-mail address, your name and the address of your profile picture. We do not receive your Google password. We use your first name as your starting display name, and you can change it in the App.
Profile: your display name, an optional country flag and your avatar.
Feedback: the message you write in the feedback form, and its category (bug, idea or other).
Delete-account requests: if you use the form on this website, your e-mail address, Player ID, sign-in method, and the optional country or city and app version you type.

Information created when you play

Your Player ID, level, XP, rank, trophies, coins and gems.
Your results and statistics, win and play streaks, creature progress, weekly leaderboard points, and the rewards you claim (free coins, ads, streaks).
Your games, including the moves, so that results can be checked on our servers and you can replay a game.
Online matches: who you played, the room code of a friend game, and the result.

Information collected automatically

Technical data: device type, operating system version, app version, and your IP address when the App connects to our servers.
Usage data (Microsoft Clarity): the screens you open, your taps and game events, and session replays and heatmaps that show how the App is used.
Crash reports (Firebase Crashlytics): logs and device details when the App crashes.
Ads (Google AdMob): when you choose to watch a rewarded ad, Google may collect your advertising ID, IP address and device details to show and measure the ad. Google tells us when you have finished an ad, so that we can give you the reward.

Stored on your device

Your settings and choices are stored on your phone. Reminder notifications are set by the App on your device. We do not send push messages.

We do not collect your precise location, contacts, photos, microphone, camera or payment details.

3. What other players can see

Your display name, Player ID, avatar, country flag, level, rank, trophies, game statistics, streaks and creature progress are visible to other players and appear on leaderboards. Opponents see your moves during a game. Your e-mail address, coins and gems are never shown to other players. Please do not put personal details in your display name.

4. How we use your information

To create your account, run the game and keep your progress, coins and rewards.
To match you with opponents, run leaderboards and show your public profile.
To check results on our servers and to find cheating, abuse and repeated use of rewards.
To answer feedback and support requests.
To fix crashes, understand how the App is used and improve it.
To show rewarded ads and give you the reward.
To keep the service secure and to follow the law.

If you live in the European Economic Area, the United Kingdom or a similar region, our legal bases are: providing the service you asked for, our legitimate interests in security, fair play and improving the App, your consent where the law requires it, and legal obligations.

We do not sell your personal information. We share it only with:

Supabase hosts our database, sign-in and server functions. Privacy policy
Google provides Google Sign-In, Firebase Crashlytics and AdMob. Privacy policy
Microsoft provides Clarity usage analytics. Privacy policy
Cloudflare hosts this website. Privacy policy
Other players see the public information described in section 3.
Authorities and others when the law requires it, or to protect our rights, the safety of players or the security of the service.

These providers use your information under their own privacy policies.

6. Where your information is processed

Our providers run servers in several countries, so your information may be processed outside the country where you live, including outside Nepal. We use well-known providers and rely on their safeguards to protect it.

7. How long we keep it

Account and game data: for as long as your account is active.
After you delete your account: your profile, coins, gems, progress, statistics and feedback are deleted after a waiting period of 7 days. A record of a finished online match may stay in your opponent's history without your name.
Sign-up bonus: to stop the sign-up bonus from being claimed again and again, we keep an unreadable code (a one-way hash) made from the e-mail address for 30 days after deletion. It cannot be turned back into your e-mail address.
Crash reports and usage data: kept by Google and Microsoft under their own rules (typically about 90 days for Crashlytics and 13 months for Clarity).
Server logs: kept for a short time for security.

8. Your choices and rights

Delete your account: in the App, or with the form at baghchalonline.com/delete-account.
Change your details: edit your display name and country in the App.
Play without an account: some modes work as a guest. We then collect only usage and crash data.
Ads: rewarded ads are optional. You can reset or turn off ad personalisation in your phone settings.
Other rights: depending on where you live, you may have the right to access, correct, delete, export or limit the use of your information, to object to it, or to withdraw your consent. Write to us and we will answer within 30 days.

9. Children

The App is not meant for children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal information from children under 13. If you think a child has given us information, write to us and we will delete it.

10. Security

We use encrypted connections, access rules on our database and checks on our servers. No method of storing or sending information is completely secure, so we cannot promise absolute security.

11. This website

This website does not use cookies, advertising or analytics tools. Cloudflare, our host, processes visitors' IP addresses to deliver the pages and keep them secure. If you use the delete-account form, we use the details only to find and process your request.

12. Changes to this policy

We may update this policy. We will change the date at the top and, for important changes, tell you in the App. Using the App after a change means you accept the new policy.

13. Contact us

E-mail: [email protected]