Privacy Policy

This Privacy Policy explains how BAS Renovations Media ("BAS," "we," "us," or "our") collects, uses, discloses, and retains information when you visit basrenovationsmedia.com, join our email list, contact us, play BAS Tool Catch or Mansion Maze, or use another feature that links to this policy (collectively, the "Site").

This policy applies to the Site operated by BAS. A linked store, social network, video platform, affiliate merchant, or other third-party service may have its own privacy notice and practices.

Information we collect

Email subscriptions. When you join the BAS email list, we collect your email address, where on the Site you signed up, subscription status, consent and activation dates, unsubscribe date if applicable, and technical information described below. We also create random account-management and unsubscribe tokens. Your subscription becomes active when you submit the email-list form.

Leaderboard submissions. To post a BAS Tool Catch or Mansion Maze score, we collect the display name and email address you enter, your score, tools caught or recovered, collected tool identifiers (Mansion Maze), best combo (Tool Catch), game name, rank title, round length, submission time, a random round identifier, review or moderation status, and technical information described below. Your email is required to keep one player's rounds together when display names are the same or change between rounds.

Posting a score does not subscribe you to marketing. If you separately check the email-marketing box, we also create or update an email subscription record using the same address, and the subscription becomes active when you submit the score.

Partnership inquiries and communications. If you use the Work With BAS form, we collect your email address, company, the message you submit, submission time, and technical information described below. If you contact us another way, we collect the information included in that communication. A partnership inquiry does not add you to our marketing list.

Tips. If you open the Buy Me a Coffee support tool or leave a tip, Buy Me a Coffee and its payment providers collect the information needed to operate the tool and process the transaction. BAS may receive supporter and transaction details that Buy Me a Coffee makes available to creators, such as your name, email address, support amount, message, and transaction status. BAS does not receive your full payment card number.

Technical and security information. Our hosting service necessarily receives request information such as your IP address, browser user-agent, requested page, and request time. For Site forms and leaderboard activity, BAS ordinarily stores a salted cryptographic hash of the IP address rather than the raw IP address, plus a shortened user-agent string. We use these values for rate limiting, fraud and abuse prevention, score review, and security. A game round token also contains a short portion of the hashed IP so we can detect a score posted from a different connection; the token expires after 30 minutes.

Anonymous Site analytics. We use Cloudflare Web Analytics to understand aggregate Site use and performance, including pages viewed, general referral source, country, device and browser type, navigation type, and page-performance measurements. Cloudflare Web Analytics does not use cookies or local storage, create a persistent visitor identifier, or fingerprint individual visitors for analytics. It does not record URL query strings, and BAS does not send names, email addresses, form contents, leaderboard information, or other account-level information to it. We also count a limited set of first-party Site interactions: BAS shop and affiliate-link clicks, openings of the support tool, and game starts and completions. Those event records contain the event type, page path, placement, product or feature label, and calendar date. A completed-game event also contains the final game score. These records do not contain an email address, form contents, raw IP address, cookie identifier, or persistent visitor identifier. We use these aggregate reports only to operate, troubleshoot, and improve the Site.

Information stored on your device

BAS Tool Catch uses your browser's local storage to remember your best score, display name, leaderboard email address, and sound preference on that device. This makes later games easier to play and helps you submit future rounds under the same leaderboard identity. This information remains on your device until you clear it. You can turn this storage off or remove the saved information using the "Saved game data" controls below the game. BAS does not read it until you use the game, and your email is sent to BAS only when you choose to submit a score or join the email list.

Mansion Maze separately stores only your personal best and sound preference on this device. Its optional leaderboard form asks for a name and email after a successful escape; these fields stay in page memory, not local storage, and are sent only when you post. Its "Saved game data" controls clear local preferences or disable storage; they do not delete posted scores or subscriptions. Each game remembers a minimal disabled marker when you turn its storage off.

Cloudflare Web Analytics does not store analytics cookies or analytics identifiers on your device. We do not use advertising pixels or use Site analytics for cross-site behavioral advertising.

How we use information

• Provide, maintain, secure, troubleshoot, and improve the Site.
• Operate BAS Tool Catch and Mansion Maze, validate rounds, calculate placement, prevent replay or cheating, and moderate leaderboard entries.
• Keep each leaderboard player's rounds together without publishing the player's email address.
• Send welcome, unsubscribe, and other service-related email.
• Send tutorials, product picks, project guides, and gear announcements after you separately opt in.
• Receive, review, and respond to partnership inquiries.
• Receive and administer voluntary tips and related supporter messages.
• Measure aggregate Site use and performance and understand which pages are useful to visitors.
• Enforce our Terms of Use, protect users and BAS, comply with law, and establish or defend legal claims.

Legal bases where required

Where applicable law requires a legal basis, we process information as needed to provide features you request and perform our agreement with you; with your consent, including for marketing email; to comply with legal obligations; and for legitimate interests such as securing the Site, preventing abuse, moderating the leaderboard, responding to inquiries, and improving our services. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

What is public on the leaderboard

The public leaderboard and its public data feed may display your chosen display name, best visible score, rank title, placement, and the date and time associated with that score. Your leaderboard email address, IP hash, browser information, detailed round statistics, and moderation notes are not included in the public leaderboard response.

Score submissions may be automatically held for review. Authorized BAS personnel can review leaderboard email addresses and round details and can hide or restore a score. Hiding a score removes it from the public board but does not delete the underlying record.

Email choices

You may unsubscribe from marketing email at any time by using the link in an email or contacting us. Unsubscribing stops future marketing messages, but we may retain a suppression record so we can honor your choice. We may still send a message that is necessary to complete a request you make, such as a response to a privacy request.

How we disclose information

We may disclose information in the following circumstances:

• Hosting, analytics, and security. Cloudflare hosts the Site and database, processes web requests, and provides privacy-focused aggregate Web Analytics, operational logging, and network security. Cloudflare handles information under its Privacy Policy.
• Email delivery. Resend receives the recipient address and email content needed to deliver subscription messages and partnership-inquiry notifications. Confirmed subscriber information may also be exported to an email service provider acting for BAS.
• Tip processing. Buy Me a Coffee and its payment providers process voluntary support payments and provide BAS with related supporter and transaction records.
• Public leaderboard. We publish the leaderboard fields described above at your direction when you submit a visible score.
• Professional and legal purposes. We may disclose information to professional advisers, regulators, law enforcement, courts, or others when reasonably necessary to comply with law, protect rights and safety, or address fraud and misuse.
• Business changes. Information may be transferred as part of a financing, reorganization, sale, merger, or transfer of all or part of BAS, subject to appropriate protections.
• With your direction or consent. We may disclose information for another purpose that we explain when asking you to provide it.

We do not sell your personal information for money. We also do not use information collected through the Site to provide cross-site behavioral advertising.

Third-party content and services

The Site requests fonts from Google Fonts. It also uses a click-to-play YouTube player: the YouTube frame is not loaded until you choose to play a video. When those resources load, Google or YouTube receives technical information from your browser and may use cookies or similar technologies under Google's own privacy policy and settings.

The Buy Me a Coffee frame is not loaded until you open the support tool. When it loads, Buy Me a Coffee receives technical information from your browser and may use cookies or similar technologies. Information you enter in that frame is handled under Buy Me a Coffee's Privacy Policy, and payments are also subject to its Terms.

If you follow a link to the BAS store, an affiliate merchant, or a social platform, that destination receives information associated with your visit and handles it under its own terms. BAS may receive an affiliate commission from a qualifying purchase, but we do not receive your payment card information from the Site covered by this policy.

Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including to operate the all-time leaderboard, maintain subscription and unsubscribe records, respond to inquiries, prevent abuse, comply with legal obligations, and resolve disputes. At present, Site records do not all have an automatic deletion date.

In general, leaderboard rounds may remain until they are no longer needed or you request deletion; subscription records may remain while your subscription is active and afterward as needed to document consent or honor an unsubscribe request; and partnership inquiries may remain while we evaluate or manage the relationship and for reasonable business recordkeeping. Service providers may keep operational logs and delivery records under their own retention schedules. Cloudflare currently makes Web Analytics reports available to BAS for the previous six months. Our limited first-party interaction event records are retained in Cloudflare Analytics Engine for up to three months. Local browser data remains until you clear it.

Your privacy choices and rights

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information; receive a portable copy; object to or restrict certain processing; withdraw consent; or appeal a denied request. You may also ask us to hide or remove your leaderboard entry. BAS will not discriminate against you for exercising a privacy right.

To make a request, email contact@basrenovationsmedia.com. Please specify whether your request concerns the email list, leaderboard, partnership inquiry, or another interaction. We may need to verify your control of the relevant email address before acting. Some information may be retained when permitted or required by law, including unsubscribe suppression records, security information, and records needed to resolve disputes.

Security

We use reasonable administrative and technical safeguards designed to protect information, including encrypted connections, access-controlled moderation tools, random email-management and unsubscribe tokens, salted IP hashing, rate limits, and encryption provided by our hosting platform. No Internet transmission or storage system can be guaranteed completely secure.

Children

The Site is intended for a general audience and is not directed to children under 13. Children under 13 may not submit an email address, leaderboard score, inquiry, or other personal information through the Site. If you believe a child under 13 has provided personal information, contact us so we can review and delete it.

Processing in the United States

BAS and its service providers may process information in the United States and other countries where they operate. Those locations may have privacy laws different from those where you live.

Changes to this policy

We may update this policy as the Site or applicable requirements change. We will post the revised version here and change the "Last updated" date. If a change materially affects how we use information already collected, we will provide additional notice when required by law.

Contact

Questions or privacy requests may be sent to contact@basrenovationsmedia.com.