Privacy Policy

Last updated: 23 October 2026

This Privacy Policy explains how the BossRan team, which develops and runs BossRan Mobile together with GreenShield Developments and Prime Developments ("BossRan", "we", "us", or "our"), collects, uses, shares, and protects information about you when you use the BossRan Mobile app for Android and iOS, our mobile website, our tester sign-up, our top-up service, and related services (together, the "Services"). By using the Services you agree to the practices described here.

1. Information we collect

Information you provide

Account information: username, password (stored hashed), and email address when you create a game account.
Tester sign-up: when you join the test list on our mobile website, your Facebook name, your phone type (Android or iPhone/iPad), your phone model and system version, and an email address: your Google account email on Android, so we can add you to our Google Play test, or your Apple ID email on iPhone and iPad, so we can send your TestFlight invite.
Payment and top-up information: the amount, date, payment method, and transaction reference of credits you purchase, and the account that receives them. Payments are processed by third-party payment providers or by the app store; we do not receive or store your full card number, bank credentials, or e-wallet PIN.
Communications: messages you send to our support team by email, Facebook Messenger, Discord, or in-game, including any attachments.
User content: character names, guild/club names, in-game chat, and other content you create within the game.

Information collected automatically

Device and technical data: IP address, phone or tablet model, operating system and version, device identifiers needed to run the game and recognise your devices, and language settings.
Gameplay and usage data: login times, play sessions, character progress, items, trades, in-game purchases, and interactions with other players.
Log data: server logs, crash reports, and diagnostic information used to keep the Services working and secure.
Game files: the app downloads and updates game files from our servers. To do this it checks which files and versions are on your device; it does not read your photos, contacts, or other apps' files.

Information from other sources

If you contact us through Facebook, Discord, or another platform, we receive the profile information that platform makes available (such as your public name and ID).

2. How we use information

To create and manage your account and deliver the game and related Services.
To contact you about mobile testing, pick testers across different phones, and invite them to test builds.
To process top-ups and credit purchases, and to keep transaction records required by law.
To provide customer support and respond to your requests.
To detect, prevent, and respond to cheating, fraud, abuse, and security incidents, and to enforce our rules.
To monitor performance, fix bugs, and improve the Services.
To send service announcements (maintenance notices, security codes and alerts, changes to our policies). These are not marketing messages and you cannot opt out of them while you hold an account.
To send news and promotions, only if you have opted in; you can opt out at any time.
To comply with legal obligations.

3. Legal bases for processing

Where applicable law (such as the Philippine Data Privacy Act of 2012 or the EU/UK GDPR) requires a legal basis, we rely on: (a) performance of a contract — to provide the Services you signed up for; (b) legitimate interests — to keep the Services secure, prevent cheating and fraud, and improve the game; (c) consent — for the tester list and optional marketing communications; and (d) legal obligation — to keep transaction records and respond to lawful requests.

We do not sell your personal information or share it with advertisers. We share it only:

With the GreenShield Developments and Prime Developments teams, who help develop and run BossRan, only as needed to do that work.
With service providers who help us operate the Services (hosting, form and email services, payment processing, website security, community platforms), under arrangements that limit their use of your data to providing services to us.
With Apple and Google, only as needed to invite you to a test build (for example, your Google account or Apple ID email for a closed test or TestFlight).
With other players, to the extent you choose to make information public in-game (character name, guild, chat, leaderboards).
For legal reasons, if required by law, court order, or government request, or to protect the rights, property, or safety of BossRan, our players, or others.
In a business transfer, such as a merger, acquisition, or asset sale, in which case we will notify you.
With your consent or at your direction.

5. Third-party services

The Services use or link to third-party services that have their own privacy policies. We encourage you to review them:

Service	Purpose
Google Sheets (via Google Apps Script)	Storing the mobile test list; only our team can open the sheet
Google Public DNS	Checking that the email provider you enter exists when you sign up (only the part after @ is sent)
Payment providers used for top-ups (e.g. GCash, Maya, bank transfer)	Processing your purchases
Apple App Store, TestFlight, and Google Play	Test builds, downloading the app, and, where offered, in-app purchases
Postmark	Sending account emails such as verification and security codes
Cloudflare	Website security, bot protection, and delivery (your IP address passes through Cloudflare)
Discord	Community and support
Facebook and Facebook Messenger	Community, news, support, and claiming top-ups

If you download the app from the Apple App Store or Google Play, those platforms may also collect information under their own policies (for example, for in-app purchases made through the store).

6. Data retention

We keep your personal information for as long as your account is active and as needed to provide the Services. Tester sign-up details are kept until testing ends or until you ask us to delete them. After you delete your account, we delete or anonymise your personal data within 30 days, except that we may retain: transaction records for up to 5 years as required by tax and accounting law; records of rule violations (such as bans) to prevent repeat abuse; and data we must keep to resolve disputes or comply with legal obligations. Backups are purged on a rolling schedule of up to 90 days.

7. Security

We use reasonable technical and organisational measures to protect your information, including hashed passwords, encrypted connections (HTTPS) for our websites and top-up pages, email security codes, access controls, and monitoring. No system is completely secure; please use a strong, unique password and never share your login details, even for guild packages. If we become aware of a data breach affecting you, we will notify you and the relevant authorities as required by law.

8. Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you and receive a copy.
Correct inaccurate or incomplete information.
Delete your sign-up details, account, and personal information — email us from the address you signed up with and tell us your username.
Object to or restrict certain processing, and withdraw consent where processing is based on consent.
Data portability — receive your data in a structured, machine-readable format.
Opt out of marketing — use the unsubscribe link in any marketing email or contact us.
Complain to your data protection authority. In the Philippines this is the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, email [email protected]. We may need to verify your identity before acting on a request. We will respond within 30 days.

9. Children's privacy

The Services are intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, contact us at [email protected] and we will delete it promptly. Users between 13 and 18 should use the Services only with the consent of a parent or guardian, who is responsible for any purchases made.

10. International transfers

We are based in the Philippines. If you access the Services from elsewhere, your information will be transferred to and processed in the Philippines and in the countries where our service providers operate. We take steps to ensure your data receives an adequate level of protection wherever it is processed.

11. Cookies and tracking

The BossRan Mobile app and our websites do not use advertising cookies, advertising IDs, or cross-site tracking. The mobile website (mobile.bossran.net) sets no cookies at all. Our account and top-up pages use session cookies that are strictly necessary to keep you logged in and protect against abuse. You can control cookies through your browser settings; disabling them may affect some features.

We do not respond to "Do Not Track" browser signals because there is currently no common standard for them.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on our website, on our Facebook page, in the app, or by email at least 7 days before the changes take effect. The "Last updated" date at the top shows when this policy was last revised.

13. Contact us

BossRan Mobile — Data Protection Contact
The BossRan team, with GreenShield Developments and Prime Developments
Email: [email protected]
Facebook: facebook.com/bossran.mobile
Discord: discord.gg/b9RcN6WBd
Philippines