Privacy PolicyLast updated September 22, 2026
This policy explains what information Street Capital and bombowave.com collect, why, who we share it with, and the choices you have. We collect only what we need to run the game, keep it fair and improve it. We do not sell your personal information for money.
1. Who we are
Street Capital and bombowave.com are run by Vasyl Kyrlyk, doing business as Bombowave, based in British Columbia, Canada ("Bombowave", "we", "us").
For any privacy question or request, email privacy@bombowave.com.
This policy covers:
- Street Capital, our mobile game for iOS and Android (the "Game").
- bombowave.com, our website (the "Site").
2. The short version
- The Game collects device and gameplay information, an anonymous player ID, your saved progress and your purchases. If you choose to sign in with Apple or Google, it also receives the account details you allow.
- Ads in the Game are served by Unity. Personalized ads use your device's advertising ID, and only with your permission where the law requires it.
- The Site has no analytics or advertising trackers. Our host keeps standard server logs, and we receive what you choose to send us by email or form.
- You can ask to see, correct or delete your data at any time by emailing privacy@bombowave.com.
3. Information we collect
In the Game
| What | Examples | Where it comes from |
|---|---|---|
| Device information | Device model, operating system and version, language, screen size, app version, approximate country (from your IP address) | Your device, automatically |
| Identifiers | An anonymous player ID created when you first play; an installation ID; your device's advertising ID (IDFA on iOS, only if you allow tracking; Advertising ID on Android) | Your device and our service providers, automatically |
| Gameplay and usage | Sessions, levels and missions played, in-game currency earned and spent, settings, crashes and performance | The Game, automatically |
| Saved progress | Your character, inventory, currencies and progress | The Game, stored in the cloud so you keep it |
| Sign-in details (optional) | If you sign in with Apple or Google: an account identifier, and the name and email address you choose to share. Apple may give us a private relay email instead of your real one. | Apple or Google, when you choose to sign in |
| Purchases | What you bought, when, the price and a transaction ID. We never see your card or payment details; Apple and Google process all payments. | Apple or Google |
| Ad interactions | Which ads were shown, whether you watched or tapped them, and whether you earned a reward | Our ad provider, automatically |
| Support messages | Your email address and whatever you write to us, including a player ID or device details you choose to add | You |
On the Site
| What | Examples | Where it comes from |
|---|---|---|
| Server logs | IP address, browser type, pages visited, date and time | Your browser, recorded by our hosting provider for security and to keep the Site running |
| Emails you send us | Your email address and message | You |
| Tester applications | If you apply to test the Game on Android: the email address linked to your Google Play account and, optionally, your Discord username | You |
The Site does not use analytics, advertising or social-media tracking cookies. The only cookies it sets are the ones WordPress needs when our own team signs in to manage the Site.
4. How we use information
| Purpose | Information used | Legal basis (EEA and UK) |
|---|---|---|
| Run the Game, save and restore your progress, and keep you signed in | Identifiers, saved progress, sign-in details | Performance of our contract with you |
| Process and restore purchases | Purchases, identifiers | Performance of our contract with you |
| Show ads, and rewards for watching them | Identifiers, device information, ad interactions | Our legitimate interest in funding a free game; your consent for personalized ads |
| Understand how the Game is played, find bugs and improve it | Device information, gameplay and usage | Our legitimate interest in improving the Game |
| Prevent cheating, fraud and abuse | Identifiers, gameplay, purchases, server logs | Our legitimate interest in keeping the Game fair and secure |
| Answer support requests and tester applications | Support messages, tester applications | Performance of our contract with you, or our legitimate interest in responding to you |
| Meet legal obligations, such as tax records for purchases | Purchases | Legal obligation |
We do not use your information to make decisions that have legal or similarly significant effects on you.
5. Ads and your choices
The Game is free to play and is funded by ads and optional in-app purchases. Ads are served through Unity LevelPlay and Unity Ads.
- Personalized ads are chosen using your device's advertising ID and your activity. Where the law requires it, including in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent in the Game before showing personalized ads. You can change your choice at any time in the Game.
- On iOS, the advertising ID is shared only if you allow tracking when the Game asks. You can change this in Settings → Privacy & Security → Tracking.
- On Android, you can reset or delete your advertising ID in Settings → Google → Ads (the path varies by device).
- Without consent or tracking permission, you still see ads, but they are not personalized.
- The Remove Ads purchase removes interstitial and banner ads. Rewarded ads stay, because you choose to watch them.
6. Who we share information with
We share information only with the service providers that help us run the Game and the Site, and only for the purposes in section 4:
| Provider | What they do for us | Privacy policy |
|---|---|---|
| Unity Technologies | Game services (anonymous and Apple/Google sign-in, cloud save, in-game economy, purchase validation), ad mediation (LevelPlay) and ads (Unity Ads) | unity.com/legal/privacy-policy |
| GameAnalytics | Gameplay analytics and crash reporting | gameanalytics.com/trust/privacy-notice |
| Apple and Google | App distribution, sign-in, and payment processing for in-app purchases | apple.com/legal/privacy · policies.google.com/privacy |
| Hostinger | Website hosting and our email | hostinger.com/legal/privacy-policy |
We may also disclose information if the law requires it, to protect the rights and safety of our players or others, or as part of a sale or reorganization of our business (for example when Bombowave incorporates). In that case this policy continues to apply to your information.
We do not sell your personal information for money. Under some US state laws, letting ad providers use your advertising ID for personalized ads counts as "sharing" or "targeted advertising". You can opt out as described in section 5, or by emailing us.
7. Where your information is stored
We are based in Canada. Our service providers store and process information in Canada, the United States, the European Union and other countries. Where information leaves the EEA or the UK, our providers use safeguards the law recognizes, such as the European Commission's Standard Contractual Clauses.
8. How long we keep it
- Game data (player ID, saved progress, sign-in details) is kept while you play. If you ask us to delete it, we delete it within 30 days.
- Purchase records are kept as long as tax and accounting law requires.
- Analytics and ad data are kept by our providers under their own retention periods, described in their privacy policies.
- Server logs are kept by our hosting provider for a short period for security.
- Emails and tester applications are kept as long as we need them to help you, then deleted.
Delete your account and data
To delete your Street Capital account and data, email privacy@bombowave.com from any address with the subject "Delete my data" and include your player ID, which is shown in the Game's settings. If you signed in with Apple or Google, you can also tell us the email address of that account instead. We confirm within 30 days once your data is deleted. Uninstalling the Game does not delete data stored in the cloud.
9. Your rights
Depending on where you live, you have the right to:
- Access the personal information we hold about you and get a copy;
- Correct information that is wrong;
- Delete your information;
- Withdraw consent, for example to personalized ads, at any time;
- Object to or restrict some uses of your information;
- Port your information to another service;
- Opt out of targeted advertising and "sharing" (US states).
To use any of these rights, email privacy@bombowave.com. We may need to confirm it is you, for example by asking for your player ID. We reply within 30 days. We will not treat you differently for using your rights.
If you are not happy with our answer, you can complain to a privacy regulator: in Canada, the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia; in the EEA or the UK, your local data protection authority.
10. Children
The Game and the Site are for people 13 and older. They are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email privacy@bombowave.com and we will delete it.
11. Security
We protect your information with reasonable technical and organizational measures, such as encrypted connections (HTTPS) and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy when the Game, the Site or the law changes. We will change the "Last updated" date at the top and, for significant changes, tell you in the Game or on the Site before they take effect.
13. Contact us
Vasyl Kyrlyk, doing business as Bombowave
British Columbia, Canada
Email: privacy@bombowave.com