Privacy Policy

Last updated: Oct 8, 2026

Bombermon is an online bomb battle. This page explains, plainly, what data the site stores, why, and what you can ask us to do with it.

1. Who is responsible

The site is run independently by an individual, the same person who runs Pokemon.com.br, with no affiliation with Nintendo, Game Freak, The Pokémon Company or Konami. Bombermon and Pokemon.com.br are the same service: the same server, the same database and the same accounts. Contact for any privacy matter: [email protected].

2. Playing without an account

You can play without signing up. In that case we store:

• A random browser identifier (a UUID drawn on your first visit), kept in local storage and in a cookie, so your score and history are still there when you come back. It doesn't contain your name, email or anything that identifies you outside the site. The bombermon.com identifier is a different one from what the same browser uses on Pokemon.com.br.
• The nickname and avatar you choose to play with.

Clearing the site's data in your browser deletes this identifier and, with it, the link to your previous history.

3. Creating an account

If you create an account with a username and password, we store your username, email and a hash of your password (we don't store the password itself).

If you sign in with Google or Discord, the provider only sends us:

• an identifier of your account with the provider, used only to recognize you the next time you sign in;
• your email;
• your name or username, which we only use to suggest your initial username. You can change it later on Pokemon.com.br.

We don't receive your Google or Discord password, we have no access to your contacts, servers, messages or any other data from those accounts, and we don't post anything on your behalf. You can revoke this access at any time in your Google Account or Discord settings.

4. What we store while you play

• Matches: the nickname and avatar used in that match, the arena, your placing, kills and result, plus your score (wins, losses, draws and kills) and your wins for the week on the leaderboard (accounts only).
• Replays: the moves of each match, so anyone with the link can watch it again.
• Which site you came from: whether the account was created, and whether each match was played, on bombermon.com or on Pokemon.com.br, only so we know how much each site is used.
• IP address: used only as a temporary counter to limit abuse (rate limiting). We don't build browsing profiles or access history from it.

5. What is public

Account holders have a public profile (/u/your-name on bombermon.com and the Trainer Card /t/your-name on Pokemon.com.br) with their name, avatar, Bombermon stats and latest matches. The leaderboard shows the names and wins of account holders. Your email is never shown publicly.

If you change your username, the old profile address stops working.

Finished matches appear in the history of the people who played, in replays and in the "Últimas atividades" (latest activity) feed on Pokemon.com.br, with each player's nickname. A guest nickname doesn't reveal the browser identifier or anything about you.

6. Who we share data with

We don't sell or rent data. We use these services to run the site:

• Server: the site and the database run on a rented server in Brazil.
• Cloudflare: the network that delivers the site and protects it from abuse.
• Google and Discord: only if you choose to sign in with them.
• Google Fonts: loads the site's fonts.

We may also share data if we are legally required to.

7. Cookies

We don't use advertising or analytics cookies. The site only sets three cookies:

• pkbr_visitante: stores the random identifier from section 2, so you stay the same guest when you come back. It's renewed on every visit and only expires if you don't visit the site for 400 days.
• a temporary 10-minute cookie that protects social sign-in against fraud and disappears as soon as the sign-in finishes.
• bm_lang: stores the language you picked in the language selector, for 1 year. It only exists if you pick one.

Everything else (your session, sound and game preferences) stays in your browser's local storage.

8. How long we keep data

Account data and your score are kept for as long as the account exists. Match history and replays are deleted after 90 days (your overall score stays).

9. Your rights

Under Brazil's General Data Protection Law (LGPD, Law 13,709/2018) you can request access to, correction, portability or deletion of your data, and withdraw your consent. Write to [email protected] and we'll get back to you as soon as possible. Since the account is the same as on Pokemon.com.br, a deletion request removes the account and its data on both sites.

10. Children

Anyone can play, but creating an account is intended for people aged 13 or older. If you're the parent or guardian of a child who created an account and want it removed, write to the email above.

11. Changes

If this policy changes, the date at the top is updated. Relevant changes will be announced on the site itself. For the other games on Pokemon.com.br, that site's privacy policy applies.

Terms of Use · Play Bombermon