Privacy Policy
Last updated: 27 October 2026
The short version
- You need an account to play. It holds a username, a password (stored only as a one-way hash) and, if you choose to give one, an email address.
- We store your progress: your runs, your Terran Credits ledger, your items, unlocks, settings, friends and contracts. That is how the game remembers you.
- No advertising, no third-party trackers, no tracking cookies, no profiling, and we never sell your data. We set no cookies at all.
- We keep a pseudonymised copy of gameplay records for balancing the game. It has no username, email or account id.
- You can change your email and password, or delete your account, in Settings, Account. You can also email contact@funbasedgames.com.
- Our servers and database run on Google Cloud in the United States.
1. Who we are
aBetterGun (the “Game”) at abettergun.com is run by Fun Based Games Ltd. (“we”, “us”), a company based in Israel. We are the data controller for the personal data described here. This policy explains what we collect when you play, why, who we share it with, how long we keep it, and the choices and rights you have. It covers the website, the installable web app and every game mode. For anything about your data, write to contact@funbasedgames.com.
2. What we collect
Account data
You need an account to play. When you create one, we store:
- your username;
- a one-way hash of your password (bcrypt). We cannot read the password itself;
- your email address, only if you give one. It is optional;
- the date the account was created;
- moderation flags: whether the account is an administrator and whether it is banned.
We do not ask for your real name, phone number, address, date of birth or payment details. Registering is your confirmation that you are 13 or older; we do not store your age.
Your email address is used only to contact you about your account (for example a moderation decision, or to help you recover access if you contact us). We never use it for marketing or newsletters, and we never show it to other players.
Under 13
Accounts are for players aged 13 and over. If we learn that an account belongs to someone younger, we will delete it. If you are a parent or guardian and think this has happened, email contact@funbasedgames.com.
Your progress and runs
To give you progression, the server records, linked to your account:
- Runs: for each run you take part in, the map, difficulty tier, how long it lasted, whether the boss was killed, your class, level, kills, damage, downs, revives, score, medals, the credits and account experience you earned, and whether you disconnected. For co-op runs, the other participants are recorded in the same run.
- The Terran Credits ledger: every credit earned (a run payout, salvage) or spent (the Terran Vault), with the reason, the amount and the time. The ledger is append-only, so a balance can always be audited.
- Items and unlocks: the equipment you have found or bought, what you have equipped, your unlocked classes, weapons and cosmetics, your Vault purchases, your Ascension progress and your drop counters.
- Loadouts, settings and contracts: your chosen loadout, your saved game settings, and your progress on weekly contracts.
- Leaderboard entries: your best scores per board. The public leaderboards show your username with your result.
Friends, reports and presence
- Friends and invitations: friend requests and friendships between accounts, lobby invitations (valid for up to an hour), and the players you have blocked. A block is silent: the blocked player is not told.
- Presence: while you are signed in, a heartbeat records that you are online, so friends can see it. When you are offline, friends see “last seen” rounded down to 15 minutes.
- Reports: if you report a player, we store who reported whom, the reason, an optional note of up to 280 characters, and the run or room it happened in. The reported player is not told who reported them.
- Notifications: the in-game inbox (for example friend requests, invitations and run results).
Gameplay events
At the end of a run the server also stores a bounded list of events from it (for example deaths, boss phases and pickups, with a time and a position) so we can balance the game. They are linked to your account in the database.
Telemetry for balancing (pseudonymised)
To tune difficulty and rewards we export copies of finished runs, participants, ledger entries and run events to an analytics warehouse (Google BigQuery). In that copy your account is replaced by a salted one-way hash, and it contains no username, email, password hash, or free text. The salt is kept secret, so the hash cannot be reversed by the people reading the statistics. Because we can recompute the hash for an account, we can find and delete your rows on request. This is pseudonymised, not anonymous, data.
Technical data and server logs
Like almost every website, our hosting provider (Google Cloud Run) automatically records standard information when your browser connects: your IP address, browser type and version, the pages and files requested, the times, and any errors. Our servers also write operational logs (for example when a run starts or ends) that may include account identifiers. We use these logs to keep the service running, to fix problems and to spot abuse, not to profile you.
To slow down password guessing and spam, the server keeps a short count of recent sign-ups, sign-in attempts and requests for each IP address. This count lives only in the server’s memory, is forgotten within about an hour, and is never written to the database.
Emails you send us
If you write to us, we receive your email address and whatever you include, and we use it to answer you.
3. Data stored in your browser
The Game keeps your settings in your browser’s local storage so they survive a reload. We use no cookies. Your sign-in token (a signed token that expires after 24 hours) is kept in local storage so you stay signed in.
| Key | What it is for | Lifetime |
|---|---|---|
abg.auth.token | Your sign-in token. | Until it expires (24 hours), you sign out, or you clear site data. |
abg.settings, abg.fx | Your game settings (audio, graphics, controls) and visual effects level, so they apply before you sign in. | Until you clear site data. |
abg.resume | A reconnect record for a run in progress (session storage), so you can rejoin after a dropped connection. | Until the tab is closed. |
abg.hud.upgrades.* | Whether you have seen the upgrade hints in the HUD. | Until you clear site data. |
abg.a2hs.dismissed, abg.fullscreen.off | That you dismissed the install hint, or turned the fullscreen prompt off. | Until you clear site data. |
Every item above makes the Game work or remembers a choice you made. None is used for tracking or advertising. The Game also registers a service worker that keeps copies of game files (code, models, sounds) in your browser so the Game loads faster. These copies contain no personal data. You can remove all of this at any time by clearing site data for abettergun.com in your browser.
4. What we do not do
We do not use third-party analytics, advertising trackers, social-media pixels or fingerprinting. We do not show advertising. We do not collect your precise location, your contacts, or anything from other apps or sites, and we do not buy data about you from anyone. We do not sell your data. We do not collect payment details, because there are no purchases.
5. Why we use your data
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Running the Game: your account, sign-in, progression, matchmaking and co-op. | Account data, runs, ledger, items, settings. | Performance of our contract with you (the Terms). |
| Friends, invitations and the leaderboards. | Username, friends, presence, scores. | Performance of our contract with you. |
| Contacting you about your account, if you gave an email. | Email, username. | Performance of our contract with you. |
| Security, fair play and moderation: spotting cheating and abuse, handling reports. | Logs, IP counts, reports, run records. | Our legitimate interest in a safe, fair service. |
| Balancing the Game (telemetry). | Pseudonymised run data. | Our legitimate interest in improving the Game. |
| Meeting legal obligations and answering legal claims. | As needed. | Legal obligation; legitimate interest. |
6. Who we share it with
- Other players see your username, class and equipment in runs and lobbies, your presence if you are their friend, and your username with your score on the leaderboards.
- Google Cloud (Cloud Run, Cloud SQL and BigQuery, in the United States) hosts the Game and its database and acts as our processor.
- Authorities, when the law requires it.
We do not sell or rent your data to anyone. Because our servers are in the United States and we are in Israel, your data is transferred internationally; we rely on our processors’ standard contractual safeguards where the law requires them.
7. How long we keep it
| Data | Kept |
|---|---|
| Account, runs, ledger, items, unlocks, settings, contracts | While the account exists. When you delete the account they are cut loose from it (see section 8). |
| Run events (the per-run event list) | Pruned from the database 35 days after they are exported for telemetry. |
| Notifications | Read ones for 30 days, unread for 90, run results for 14; at most 100 per account. Deleted with the account. |
| Lobby invitations | Up to an hour. |
| Telemetry copy (pseudonymised) | Runs, participants and ledger for 790 days; run events for 400 days. We delete a player’s rows on request. |
| Server logs (including IP addresses) | For as long as Google Cloud keeps request logs for this service (30 days by default). |
| IP request counts | In memory only, about an hour. |
| Emails you send us, and reports | As long as needed to deal with them, and no longer than 12 months afterwards unless the law requires more. |
8. Your rights, and deleting your account
Wherever you live, we will let you:
- Access the personal data we hold about you, and get a copy;
- Correct it. You can change your email and password yourself in Settings, Account;
- Delete it. Settings, Account, Delete account removes it right away: your username is replaced by a random name that is freed for others, your email address is erased, your password is made unusable, the account is closed for good, and your notifications and the notifications you caused are deleted. Run, ledger and item records are kept without any link to a name or email, so game statistics stay consistent. On request we also delete your pseudonymised telemetry rows;
- Object to, or ask us to restrict, processing based on our legitimate interests;
- Move your data: ask us for a copy in a common format;
- Complain to your data protection authority. In Israel that is the Privacy Protection Authority.
To use a right that Settings does not cover (a copy of your data, deleting telemetry rows, an objection), email contact@funbasedgames.com from the address on the account, or from any address with your username. We may need to confirm that the account is yours. We aim to answer within 30 days. If you have no email on the account, tell us your username and one fact only the account owner would know.
9. Security
Passwords are stored only as bcrypt hashes. Connections to the Game are encrypted with HTTPS. The Game’s server decides what happens in a run, and the client cannot grant itself rewards. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.
10. Changes to this policy
If we change this policy, we will update the “Last updated” date and, for important changes, give notice in the Game or on this page before they take effect. If we ever add advertising, purchases or analytics from third parties, we will say so here first.
11. Contact
contact@funbasedgames.com
Fun Based Games Ltd.