This policy is a draft. Bracketed items must be completed and the disclosures checked against the app's actual data practices before launch.
Effective date: [effective date]
1. Who we are and what this policy covers
Bonus Round is operated and published by Bonus Round Rewards LLC, an Arizona limited liability company ("Bonus Round," "we," "us," or "our"). This policy describes personal information handled through the Bonus Round app, bonusroundrewards.com, reward requests, and our support and privacy channels.
For privacy questions or requests, email privacy@bonusroundrewards.com.
Games, app stores, and gift card providers have their own privacy practices. This policy covers our handling of information, including information we receive from those providers; it does not replace their policies.
2. Information collected
[Before publication, confirm each category below, the specific fields collected, its source, and whether it was collected during the preceding 12 months. Remove categories that do not apply.]
- Account and eligibility information
- Information used to create, identify, protect, and administer an account, such as a login identifier, contact email, and eligibility confirmation. [Confirm required and optional fields, sign-in methods, and age-check method.]
- Game activity and points
- Records needed to determine eligible activity and administer points, such as the offer selected, game identifier, tracked installation or milestone, event time, and points credited or adjusted. [Confirm the exact gameplay, purchase, and attribution events received from each source.]
- Rewards and fulfillment
- Reward selections, redemption requests, fulfillment status, and related communications. [Confirm delivery details, transaction identifiers, and whether gift card codes are retained.]
- Device, network, and diagnostic information
- Technical information used to operate and protect the service. [Specify device identifiers, model, operating system, app version, IP address, approximate location if derived, diagnostics, and security signals actually collected.]
- Support and privacy correspondence
- Information you choose to send, such as your email address, description of a problem, and attachments. Please do not send your password, full payment-card details, or identity documents in an initial email.
- Sensitive personal information and inferences
- [Confirm whether any legally defined sensitive information or inferred interests are processed; identify the data, purpose, safeguards, and applicable choices. Do not publish a blanket statement until verified.]
Sources may include you, your use of the service, and providers that report game activity or fulfill a reward. [Confirm the full source inventory and distinguish information collected directly from information received from others.]
3. Device IDs, advertising IDs, and third-party SDKs
Attribution connects an eligible game activity with the offer and account that should receive points. [Identify the device, app, account, and advertising identifiers actually used, how they are linked, and which processing requires permission or consent.]
The app's SDK and attribution inventory must identify each provider, its purpose, the data it receives, whether it acts on our instructions or for its own purposes, its privacy-policy link, and available controls.
[SDK and attribution providers: complete the verified inventory before launch. Include advertising, analytics, authentication, crash reporting, fraud prevention, messaging, and rewards fulfillment only where used.]
Device permissions and advertising settings can affect data available for attribution. An operating-system setting is separate from a request to Bonus Round to exercise a legal privacy right. Review offer requirements before starting, and contact support if tracking does not work.
4. How information is used
The draft purposes below must be matched to the confirmed data inventory:
- Provide accounts, show eligible offers, record qualifying activity, calculate points, and process reward requests.
- Answer questions, investigate missing activity, and communicate about the account or a request.
- Maintain service security, detect abuse, resolve errors, and enforce program rules fairly.
- Meet legal obligations, keep required records, and address disputes.
- [Confirm any product analytics, personalization, marketing, targeted advertising, profiling, or automated decision-making and describe the associated choices.]
Consent or another valid legal basis will be used where required. [For supported international markets, identify the legal basis for each purpose and any required regional notice.]
7. Retention and deletion
Information should be retained only for documented service needs and applicable legal obligations. Retention may differ for account records, game-event records, redemptions, support correspondence, security records, and backups.
[Publish the actual retention period or a sufficiently specific retention criterion for each category, including backup deletion cycles and records kept after account deletion.]
Visit Account & Data Deletion to request deletion. A legal exception may require limited records to be retained; where that applies, we will explain the category, reason, and applicable retention period. Deleting the app from your device does not itself delete your account.
8. Your privacy rights, including U.S. state rights
Depending on where you live and which laws apply, you may be entitled to access or obtain a copy of your personal information; correct inaccuracies; request deletion; opt out of sale, sharing, or targeted advertising; limit certain uses of sensitive information; or challenge certain automated decisions. California rights include those provided by the CCPA, as amended by the CPRA.
Send a request to privacy@bonusroundrewards.com. Tell us what you are requesting and provide only the account identifier or contact information needed to locate relevant records. An authorized agent may act for you where permitted; evidence of authorization may be required.
For access, correction, or deletion, we may need reasonable verification to protect your information. An opt-out request does not require you to create an account or provide identity documents. We may ask for the minimum information necessary to locate the records to which your choice should apply.
We will respond within the period required by applicable law, explain any permitted extension or denial, and provide appeal instructions where applicable. To appeal, email the same address with "Privacy request appeal" in the subject. [Confirm the handling workflow, regional deadlines, and applicable regulator contact details.]
We will not unlawfully discriminate against you for exercising a privacy right. [Assess whether any rewards arrangement is a regulated financial incentive. If so, add a separate notice with its material terms, opt-in and withdrawal process, and the required explanation of data value before enrollment.]
9. Children and age eligibility
Bonus Round is for adults age 18 and older. It is not intended for people under 18. If you believe someone under 18 has provided personal information to us, contact privacy@bonusroundrewards.com so we can investigate and take appropriate action.
[Confirm age assurance, handling of information from minors, and deletion procedures before launch.]
10. International users
The app is available only in its supported countries: [confirmed supported countries]. Access to this public website does not establish app eligibility.
[Identify processing locations and international transfers. For each supported jurisdiction, add required legal bases, transfer safeguards, representative or data-protection contact details, and complaint rights. Do not claim a certification or transfer mechanism that is not in place.]
11. Security
Reasonable administrative, technical, and organizational safeguards should protect personal information against unauthorized access, loss, or misuse. No method of transmission or storage can guarantee absolute security.
[Confirm safeguards, access controls, provider requirements, and incident-response practices. Publish only security claims that can be substantiated.]
12. Changes and contact
When this policy changes, the effective date will be updated. Notice and, where required, consent will be provided for material changes as required by law.
Privacy: privacy@bonusroundrewards.com
Support: support@bonusroundrewards.com