Privacy policy

Last updated: 2 November 2026

PULSEBOUND is made by PULSEBOUND Studio ("we"). This policy explains what the game and this website collect, why, and the choices you have. We do not sell personal data and we do not use it for cross-app advertising tracking.

1. What we collect

Always (needed for the game to work)

• A random account id and device id. On first launch the game creates an anonymous account so your progress can be backed up. It is not linked to your name, phone number or advertising id.
• Your game progress (coins, upgrades, unlocks, records, songs you made, settings) so it can be restored on a new device.
• Purchases: product, store transaction id, price and date, as reported by Apple or Google through our payment processor RevenueCat, so purchases are never lost. We never see your card or payment details.
• Leaderboard entries, only if you choose a stage name: the name, score, run statistics, instrument, orb, platform (for example iPhone or web) and song code. These are public.
• Without your consent for analytics the game sends one anonymous daily ping containing only the platform and app version (no identifier), so we can count launches.
• Abuse protection: to stop spam, our server counts requests by IP address when nobody is signed in, the daily ping included, and by email address on the launch waitlist. It keeps only a one-way hash of the address, never the address itself, for up to three days after the last request.

Only if you turn on “Share gameplay stats” (the consent prompt, or Settings)

These are stored with your random device id and, if you have one, your account id, so they are linked to your game account. They are not used for advertising.

• Gameplay events (for example: tutorial finished, run started and ended with time, level, kills and cause of death, screens opened, upgrades bought, offers shown), session length, device platform, operating system version, language and app version.
• Crash and error reports (error message, technical stack trace, game state at the time).
• How you found the game (campaign tags in the link you opened, or the website that sent you).

Only if you give it to us

• Email address, if you link an account with an email code, or Sign in with Apple / Google identifiers if you use those. Used only to sign you in and restore your progress and purchases.
• Bug reports: your message, an optional email for our reply, device and performance information and, if you leave the box ticked, a screenshot of the game.
• Launch waitlist: your email and the platforms you picked, if you join it (see below).

Launch waitlist

On this website and in the browser version you can ask to be told when PULSEBOUND launches on iPhone, iPad, Android or macOS.

• What we store: your email address, the platforms you picked, your browser language, where you signed up (for example the website or the game, and the campaign tag of the link you opened) and the date.
• Why: to send you one email when the game launches on the platforms you picked. Nothing else, and it is never sold or shared for anyone else's marketing.
• Legal basis: your consent, which you can withdraw at any time.
• Who handles it: the list is stored with Supabase (EU). The launch email is sent through our email provider, which receives only the addresses on the list.
• How long: until the launch email for your platforms is sent, then the list is deleted; earlier if you leave it. Abuse protection keeps a one-way hash of your email address, not the address itself, for up to three days after you join or leave.
• Leave the list: on the unsubscribe page or through the link in the launch email. The waitlist is separate from game accounts: deleting your account does not remove your email from it, and leaving it does not touch your game.

Advertising

The mobile apps may show optional rewarded video ads (only when you tap to watch one). Ads are served by Google AdMob as non-personalized ads. Google may process your IP address and device information to deliver ads, measure them and prevent fraud; in the EEA/UK you are asked for consent through Google's consent form. Premium removes ads entirely.

2. Why we use it (legal bases)

• To provide the game, cloud save, purchases and leaderboards — performance of our agreement with you.
• Analytics and crash reports — your consent, which you can withdraw at any time in Settings.
• The launch waitlist — your consent, which you can withdraw at any time on the unsubscribe page.
• Security, fraud and cheating prevention, moderating public names — our legitimate interests.
• Keeping purchase records — legal obligations (accounting and tax).

3. Who processes it

• Supabase (database and sign-in), hosted in the European Union (Frankfurt).
• Vercel (this website), RevenueCat (purchase validation), Apple and Google (app stores, Sign in with Apple / Google), Google AdMob (rewarded ads), and our email provider (sign-in codes and the launch email).
• On CrazyGames and Poki, ads are served by those portals instead of AdMob, under their own privacy policies.

These providers act on our instructions under data-processing agreements. Some may process data outside the EU under the European Commission's standard contractual clauses.

4. How long we keep it

• Analytics events: 180 days. Run and session statistics: up to 400 days. Your device's record (platform, system version, language, how you found the game): 400 days after the game last sent stats. Error reports: 120 days after last occurrence.
• Bug reports: up to one year after they are resolved.
• Cloud save and account: until you delete them. Purchase records: as long as required by accounting law, unlinked from you if you delete your account.
• Daily leaderboards: 60 days; weekly: 180 days; all-time entries until you delete your data. Each ranked result behind them (stage name, score and run statistics, not shown to others): 400 days.
• Launch waitlist: until the launch email is sent, or until you leave it.
• Abuse protection: a one-way hash of your IP address or email address, for up to three days after the last request.

5. Your choices and rights

• Analytics: turn “Share gameplay stats” on or off in Settings at any time.
• Launch waitlist: leave it at any time on the unsubscribe page.
• Delete everything: in the game, Settings → Account → Delete my account and data, or on pulsebound's data-deletion page. Deletion is immediate and permanent.
• You can also ask us for access to, correction of, or a copy of your data, object to processing, or complain to your data-protection authority (in Romania: ANSPDCP, dataprotection.ro).

6. Children

PULSEBOUND is a general-audience game and is not directed to children under 13. We do not knowingly collect personal data from children under 13; analytics are off unless enabled, ads are non-personalized, and public stage names are filtered and moderated. If you believe a child gave us personal data, contact us and we will delete it.

7. Security

All traffic is encrypted (HTTPS). Each player can only read and change their own save; the database enforces this with row-level security. Payments are handled entirely by Apple and Google.

8. Changes and contact

We will update this page when the game changes what it collects. Questions: the in-game bug reporter (Settings → Report a bug).