Effective Date: May 6, 2026

1. Introduction

Welcome to Brag ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, application, and platform (collectively, the "Platform").

By accessing or using Brag, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

2. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked to you ("Personal Information"). The categories of information we collect include:

A. Information You Provide to Us

• Account Data: When you register, we collect your firstname, lastname, username, email address, password, birthdate, and gender.
• Profile Data: Information you choose to display publicly, such as your avatar, biography, social links, and showcase cards.
• Financial Data: When you purchase Diamonds or engage in transactions, we or our third-party payment processors (e.g., HitPay) collect payment information. For manual payments, we collect the proof of payment, transaction IDs, and associated comments.
• User-Generated Content: Communications, battle chat logs, forum posts, feedback, and support tickets you submit.

B. Information Generated by Your Platform Usage

• Gaming & Platform Data: We log your activity on the platform, including your Battle history, win/loss records, digital cards collected, templates forged, and marshall history.
• AI Generation Data: When you use our text-to-image features to forge cards, we collect the text prompts you submit. Please do not include personally identifiable information in your image generation prompts.
• Connection Data: To facilitate real-time Battles, we process real-time connection data (via WebSockets) including your online status and active room participation.

C. Information Collected Automatically

• Device and Technical Data: IP addresses, browser types, operating systems, and device identifiers.
• Usage Data: Pages viewed, links clicked, interactions with other users, and timestamp logs for anti-cheat and security monitoring.
• 3rd party provider: All data provided by Google Analytics

3. How We Use Your Information

We use the collected information for various purposes, including to:

• Provide and Maintain the Platform: Operate the core mechanics of Brag, including template forging, Digital Card ownership tracking, and Battle resolution.
• Process Transactions: Manage your Diamond ledger, verify manual payments, and process digital package purchases securely.
• Power AI Features: Send your generation prompts to our third-party AI partners (e.g.,  Google Gemini / Other AI models) to return your custom card art and remove background from images.
• Enhance Security & Fairness: Monitor for cheating, fraud, abusive behavior, and unauthorized access. We log battle actions and snapshots to ensure dispute resolution and fair play.
• Communicate with You: Send you administrative emails, battle notifications, payment receipts, password resets, and policy updates.
• Improve the Platform: Analyze usage trends to optimize the user interface, balance platform economies, and develop new features.

4. How We Share Your Information

We do not sell your Personal Information. We may share your information in the following circumstances:

• Publicly on the Platform: Your username, avatar, profile data, digital card inventory, collected trophies, and public battle history are visible to other Brag users and public viewers.
• With Third-Party Service Providers: We share necessary data with trusted partners who assist in operating our platform, such as:
  • Payment processors (e.g., HitPay)
  • AI Text-to-Image Generation APIs
  • Image background removal APIs
  • Cloud hosting and database providers
  • Email delivery services
• For Legal Reasons: We may disclose your information if required to do so by law, or in response to a subpoena, court order, or other legal requests.
• To Protect Rights: We may disclose information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or violations of our Terms of Service.

5. Third-Party AI Services

Brag utilizes external AI services to generate imagery for your templates and removal of background in images. By using the image generation tools, you acknowledge that your text prompts and images are transmitted to these third-party services for processing. These partners do not use your personal profile data, but the prompts and images themselves are subject to the respective third party's privacy policies and content moderation filters.

6. AI Content Policy 

We utilize AI to generate card art. In compliance with NPC 2026 guidelines:

• Safeguards: We implement filters to prevent the generation of harmful or non-consensual imagery.
• Removal Rights: If an AI-generated image inadvertently depicts an identifiable individual, users may contact us for immediate content removal.

7. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to store your session data, remember your preferences, and maintain your authenticated state across the Platform. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent, but some features of the Platform may not function properly without them.

8. Data Security

We implement reasonable technical, administrative, and physical security measures to protect your Personal Information. However, no internet transmission is ever fully secure or error-free. While we strive to protect your Personal Information (especially regarding your Contact Information and Diamond ledger), we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your jurisdiction (such as the GDPR in Europe or the CCPA in California), you  may have the following rights:

• Access: Request a copy of the Personal Information we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion (Right to be Forgotten): Request the deletion of your account and Personal Information. (Note: Deleting your account will permanently burn/forfeit your Digital Cards and Diamond balance).
• Opt-Out: Opt-out of marketing communications.

To exercise these rights, please contact us at the email address provided below. We will respond to your request in accordance with applicable laws.

10. Age Restrictions and Children’s Privacy

A. Minimum Age: Brag is a competitive platform intended for a general audience. You must be at least 18 years of age to create an account independently.

B. Minor Users (Ages 13–17): Users between the ages of 13 and 17 ("Minor Users") may only access the Platform with the Verifiable Parental Consent of a parent or legal guardian. By allowing a Minor User to use the Platform, the parent/guardian agrees to be bound by these Terms and assumes full responsibility for the minor's activity, including all virtual transactions involving Diamonds.

C. Children Under 13: Brag strictly prohibits use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has created an account, we will permanently terminate the account and delete all associated data (including any digital inventory or Diamond balances) without notice.

 D. Virtual Mechanics: Users acknowledge that the "forging" and "competitive challenges" involve virtual assets (Diamonds and Digital Cards) that have no real-world monetary value and cannot be exchanged for fiat currency. These mechanics are designed for skill-based entertainment and are not intended for users who do not meet the age requirements specified above.

11. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this policy, posting an announcement on the Platform, or requiring you to re-agree to the updated policy upon your next sign-in.

12. Local Storage & PWA Mechanics 

To provide an "app-like" experience, we use IndexedDB, LocalStorage, and Cache Storage on your device to store card assets and session states. You can clear this data via your browser settings, though it may require you to re-download assets. 

13  Security & Breach Notification 

We implement Privacy by Design. In the event of a data breach, we will notify affected users and the National Privacy Commission within 72 hours of discovery, as required by law. 

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: bragarenagame+privacypolicy@gmail.com