Privacy Policy
Last updated: 13 July 2025
Your privacy matters. This Policy explains what personal data Boketto Hub collects, why we collect it, how long we keep it, and the rights you have under UK data-protection law (UK GDPR). Boketto Hub is a personal, non-commercial fan site run by an individual in the United Kingdom (“Site Owner,” “I,” “me,” “my”). Questions? Email boketto@bokettools.com.
1 Data we collect & why
| Category | Data points | Purpose | Legal basis |
|---|---|---|---|
| Account / sign-in | Google UID, display-name, e-mail (received via Google OAuth) |
Authenticate you; let you access saved progress; show your name in future social features | Contract |
| Gameplay progress | Teams, gear setups, favourites, notes (stored in Firebase only when you press Save) | Resume on any device | Legitimate interests |
| Analytics & usage | Anonymised IP, browser type, pages, events (via GA-4 cookies) | See which tools people use; fix bugs; plan improvements | Consent (banner) |
| Optional donations | Ko-fi passes display-name & message (Ko-fi handles payment data) | Thank you publicly (future donor wall) | Legitimate interests |
| Support contacts | Info you include in e-mails or Discord DMs | Respond to your request | Legitimate interests |
We do not collect phone numbers, precise location, biometrics, or advertising IDs.
2 Cookies & similar tech
| Cookie | Provider | Purpose | Lifespan |
|---|---|---|---|
_ga, _gid, _ga_<id> | Google Analytics | Anonymous traffic stats | 1 day – 2 years |
firebase_session | Firebase | Keep you signed in | Session |
A banner lets you reject non-essential cookies (Google Analytics). Essential cookies (Firebase) are required for sign-in and cannot be disabled.
3 Who can see your data
- Google Firebase – stores account UID & progress documents
- Google Analytics – processes usage stats (IP truncated in the EU)
- Ko-fi – sees your payment details; I see only your name/message
- Discord – receives your Discord ID if you contact me there
I do not sell or rent data to advertisers.
4 Data retention
| Data | Retention period |
|---|---|
| Account & progress | Until you delete your account or after 24 months of inactivity |
| Analytics events | 26 months |
| Ko-fi donor messages | 24 months |
| Support e-mails | 12 months after ticket closes |
5 Your rights
Under UK GDPR you can:
Email from your signed-in Google address and I’ll respond within 30 days. Unhappy? You can complain to the UK ICO.
6 Data security
- Firebase security rules ensure only your UID can read/write your progress.
- All traffic is encrypted (HTTPS / TLS 1.3).
- Admin access protected by hardware security key + 2FA.
7 International transfers
Google Analytics and Firebase may store data outside the UK. Google relies on Standard Contractual Clauses and other approved safeguards.
8 Children
The Site is not directed to children under 13. If you believe a child has provided data without consent, email me and I will delete it.
9 Changes to this Policy
I may update this Policy; the “Last updated” date will change and major changes will be announced on the Site. Continued use after the effective date means you accept the new Policy.
10 Contact
Questions or requests? Email boketto@bokettools.com.
Thank you for trusting Boketto Hub. Have fun and stay safe!