1. Core Principles
Privacy by default, open by design.
Zero Mandatory Registration: Players can enter and enjoy the multiplayer arena completely as guests. We never require you to reveal your real identity, email address, or phone number to play the game.
BWORM is operated by BWORM LABS ("we", "our", or "us"). This Privacy Policy applies to the web domain https://bworm.online, its localized game portals, APIs, and associated web services. We respect your autonomy and handle only the technical data strictly necessary to provide an authentic, fair, and stable multiplayer gaming experience.
2. Information We Process
What we collect and why we need it.
Networking & Technical Telemetry
To connect your browser to the closest game server and balance real-time simulation across hundreds of concurrent entities, our edge servers process transient network metadata:
- IP Address: Used strictly for geographic matchmaking, latency routing, and automated DDoS mitigation.
- Hardware & Browser Context: Screen resolution, WebGL support level, WebAssembly capability, and client frame rates to calibrate graphics and physics performance.
- Ping & Packet Metrics: Millisecond latency and packet drop rates to synchronize worm movement and collision detection fairly.
Optional Account Information
If you choose to create a persistent profile to sync achievements, unlocked species, and rankings across devices:
- Email Address: Handled securely via our authenticated backend for account sign-in and verification.
- In-Game Alias: The nickname chosen by you for display on the arena leaderboard. Aliases are public inside the game session.
- Passkeys / Password Hashes: Handled using salted cryptographic hashes. Plaintext passwords are never visible or accessible to us.
3. Storage & Trackers
Local preferences and website analytics.
BWORM uses standard HTML5 Local Storage and session storage to remember your in-game preferences locally on your device. The public website also uses Google Analytics 4 (GA4) to measure visits and page views. The GA4 tag sends measurement requests to Google and may use cookies or similar browser identifiers. This setup records standard page views; BWORM has not configured custom gameplay events.
- Audio Levels: Your custom master, sound effects (SFX), and ambient volume adjustments.
- Species & Skin Choices: Your most recently selected worm species for quick deployment into the next match.
- Preferred Arena Language: Your language selection (English, Portuguese, or Spanish) so the game loads in your native tongue.
- Authentication Tokens: If logged into an optional profile, a secure JWT session token is held to authenticate server interactions.
You can block or clear cookies through your browser settings. Clearing local storage may reset in-game preferences saved on your device.
4. Payments & Transactions
Secure, PCI-compliant Stripe checkout.
When purchasing optional digital content, game passes, or official game guides:
- Stripe Embedded Checkout: All payment interactions occur directly inside an isolated, encrypted iframe hosted by Stripe, Inc. (certified PCI-DSS Level 1 service provider).
- No Stored Financial Credentials: BWORM LABS does not collect, handle, or store credit card numbers, CVVs, or bank account details on our servers.
- Fulfillment Identifiers: We receive only a cryptographic session identifier and payment confirmation from Stripe to unlock the purchased digital assets on your session.
5. Protection & Anti-Cheat
Fair play and data security.
We implement technical safeguards to prevent unauthorized access, manipulation, and service disruptions:
- Transport Layer Security (TLS 1.3): All communications between your browser and our servers are encrypted.
- Content Security Policy (CSP): Strict headers restrict scripts and network connections to authorized origins only.
- Anti-Cheat & Exploit Prevention: Server-side authority validates speed, mass, collision geometry, and packet frequency to prevent automated bot scripts and maintain competitive arena balance.
6. Your Rights
Control over your personal data.
In accordance with the European Union General Data Protection Regulation (GDPR), Brazil's Lei Geral de Proteção de Dados (LGPD), and the California Consumer Privacy Act (CCPA), you have the following rights:
- Right of Access: Request confirmation and details of any personal information associated with your optional profile.
- Right to Rectification: Update or correct your profile alias and credentials.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account, scores, and associated database entries.
- Right to Data Portability: Request an export of your stored game profile data in a structured, machine-readable format.
To exercise any of these rights, contact our privacy officer at the address below. Requests are verified and processed promptly at no charge.
7. Children's Privacy
COPPA compliance and underage protection.
BWORM is intended for general audiences. We do not knowingly collect, request, or store personally identifiable information from children under 13 years of age (or under 16 in applicable European jurisdictions). If we discover that personal information of a child has been collected without verifiable parental consent, we will take immediate steps to delete the information from our systems.