Privacy Policy

Introduction

Base Drop (“we”, “our”, or “us”) operates https://cocbasedrop.com and the Base Drop mobile application (collectively, the “Service”). This Privacy Policy describes how we collect, use, store, and share information about you when you use our Service. By accessing or using Base Drop, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect several types of information to provide and improve our Service:

• Account Information: When you sign in with Google or email, we receive your name, email address, and profile photo. This information is used to create and manage your account.
• Usage Data: We collect information about how you interact with our Service, such as bases viewed, saved, downloaded, and search queries. This helps us understand which content is most valuable.
• Uploaded Images: When you use the Find My Base feature, uploaded screenshots are processed by our AI service to identify matching bases. These images are not stored permanently and are deleted after processing.
• Device Information: We may collect information about the device you use to access our Service, including device type, operating system, browser type, and screen resolution.
• Log Data: Our servers automatically record information when you access our Service, including your IP address, browser type, referring URL, pages visited, and timestamps.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Sync your saved bases and preferences across devices
• Process Find My Base image search requests
• Send important notifications about your account or the Service
• Analyze usage patterns and improve user experience
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect and track information about your activity on our Service. Cookies are small data files stored on your device, while web beacons are small transparent image files that allow us and third parties (including Google) to measure page views, ad impressions, and user interactions. We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for the Service to function properly, including authentication and session management.
• Analytics Cookies: Used by Google Analytics 4 to understand how visitors interact with our Service. These cookies collect information about page views, session duration, and user behavior.
• Advertising Cookies: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to our site and/or other sites on the Internet.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Service may not function properly without cookies. Users may opt out of personalized advertising by visiting Google Ads Settings or the Digital Advertising Alliance opt-out page (AdChoices). For more information about how Google uses cookies in advertising, see How Google uses information from sites or apps that use our services.

GDPR and EU User Consent

If you access our Service from the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and the EU ePrivacy Directive. We request your explicit consent before placing non-essential cookies or serving personalized advertisements. You may withdraw consent at any time through our cookie banner, browser settings, or the Google Ads Settings link above. The legal basis for processing your personal data under GDPR includes: (a) your consent for analytics and advertising cookies, (b) our legitimate interests in operating and improving the Service, and (c) compliance with legal obligations. EU users have the right to lodge a complaint with their local data protection authority.

Third-Party Services

We use the following third-party services that may collect data about you in accordance with their own privacy policies:

• Cloudflare - Website hosting (Cloudflare Workers), content delivery (CDN), DNS, and security/bot protection. Cloudflare may temporarily log request metadata (IP, user agent, timestamps) for security and uptime. See Cloudflare's Privacy Policy.
• Google Firebase - Authentication (Google sign-in), Firestore database, and Cloud Functions for account management, base saves/views tracking, and tournament data
• Google Analytics 4 - Website and app analytics to understand usage patterns and improve our Service. Uses cookies to collect aggregated data about page views, session duration, and general geographic region
• Google AdSense - We display advertisements provided by Google AdSense. Google uses cookies (including the DoubleClick DART cookie) and web beacons to serve ads based on your prior visits to this and other websites
• Razorpay - Payment processing for Pro subscriptions, tournament registrations, and donations. When you make a payment, Razorpay collects payment card details, billing information, and transaction data directly (we do not store card details on our servers). See Razorpay's Privacy Policy.
• Google Cloud Run - Hosts our AI base matching service for the Find My Base feature. Uploaded screenshots are processed in-memory and discarded after the matching response is returned

Data Storage and Retention

Your data is stored in Google Firebase (Firestore) servers located in the United States. We follow industry-standard security practices to protect your data, including encryption in transit and at rest. We retain your personal data only for as long as necessary to provide the Service and fulfill the purposes described in this policy. Account data is retained until you delete your account. Usage analytics data is retained for up to 26 months. Uploaded images for the Find My Base feature are processed in real-time and not stored permanently.

Data Sharing

We do not sell your personal data to third parties. We may share your information only in the following circumstances: with service providers who assist in operating our Service (as listed above), when required by law or to respond to legal process, to protect our rights, privacy, safety, or property, or in connection with a merger, acquisition, or sale of assets.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt out of personalized advertising and analytics tracking

You can delete your account and all associated data at any time through the app settings or by contacting us at the email below. We will process deletion requests within 30 days.

Children's Privacy (COPPA Compliance)

Our Service is not directed to children under the age of 13, and we comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided personal information to us may contact us at the email below to request deletion. In accordance with COPPA and Google's advertising policies, we do not use interest-based advertising or remarketing targeted at users known to be under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. You are advised to review this page periodically for any changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@cocbasedrop.com. You can also reach us through our Contact page.