Privacy Policy

1. Introduction

SOFT DEV FC LLC ("Company", "we", "us"), a company registered in Fujairah, United Arab Emirates, operates InsultHero ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Google Account Data: When you sign in with Google, we receive your display name, email address, and profile photo URL from Google OAuth.
• Game Content: Insults you write during battles and crafting sessions.
• Payment Information: Processed securely through PayPal. We do NOT store your payment card details, bank account numbers, or PayPal credentials on our servers.
• Content Preferences: Your selected age tier (PG, PG-16, R).

2.2 Information Collected Automatically

• IP Address: Used for rate limiting (daily credit system for free users) and abuse prevention. Not linked to user profiles.
• Browser localStorage: Used to store guest player data, game state, and preferences locally on your device.
• Usage Data: Battle results, ELO ratings, win/loss records, badges earned, and active skin selections stored in Firebase Firestore.

3. How We Use Your Information

• To provide and maintain the Service, including game functionality
• To persist your profile, stats, and progress across devices (Google-linked accounts)
• To operate leaderboards and badge/achievement systems
• To enforce daily credit limits and prevent abuse
• To moderate content and ensure compliance with our Acceptable Use policy
• To process Premium subscription payments
• To improve the Service through aggregate, anonymized usage analytics
• To communicate service updates or changes (via email, if provided)

4. Third-Party Services

We use the following third-party services that may process your data:

• Google Firebase: Authentication (Google Sign-In) and Firestore database for user profiles and game data. Subject to Google's Privacy Policy.
• Google AI (Gemini): Used for AI opponent generation, content moderation, and insult judging. Prompts sent to Google AI may contain your game-submitted text.
• xAI (Grok): Used as a judge for scoring insult battles. Game content is sent to xAI for evaluation.
• PayPal: Payment processing for Premium subscriptions. Subject to PayPal's Privacy Policy.
• Google Cloud Run: Hosting infrastructure. Subject to Google Cloud's Privacy Notice.

5. Data Storage & Security

Your data is stored on Google Firebase (Firestore) servers and secured with industry-standard encryption in transit (TLS) and at rest. Guest user data is stored only in your browser's localStorage and is not transmitted to our servers except during gameplay API calls.

While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

• Account Data: Retained for as long as your account is active. You may request deletion at any time.
• Battle History: Retained for leaderboard and profile purposes. Deleted upon account deletion request.
• IP Addresses: Stored in-memory only for rate limiting. Not persisted to disk. Cleared on server restart or daily reset.
• Payment Records: Retained as required by applicable financial regulations.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at support@insulthero.com.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it. The PG content tier is designed for younger teen users (13+) with parental consent.

9. Cookies & Local Storage

We use browser localStorage (not cookies) to store game state and preferences. Firebase Authentication may use cookies or similar technologies for session management. We do not use advertising cookies or third-party tracking cookies.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States (where Google Cloud and Firebase servers are located). By using the Service, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

SOFT DEV FC LLC
Fujairah, United Arab Emirates
Email: support@insulthero.com