Privacy Policy

Bible Bolt is a Bible-trivia game published by an independent developer. This page explains, in plain language, exactly what data we collect, why we collect it, and how to remove it.

What we collect

You can use Bible Bolt entirely as a guest. If you stay a guest, the only data we hold on a server is:

• A randomly-generated player ID (UUID) tied to your device so your scores persist across sessions.
• A username you choose at first launch. It appears on leaderboards with your scores unless you turn off Show me on leaderboards in Settings.
• Gameplay data: total score, best Daily Bolt score, current streak, verses played, perfect verses, which Bible verses you have placed exactly and how many verses you've seen from each book (for signed-in accounts), your selected avatar, your favorite verse if you add one, your in-app invite code, and who invited you if you joined from an invite.
• Friends: the players you add as friends, and friend requests you send or receive, so Ranks can show your friends' scores. Only players you choose are on this list; we never read your phone's contacts.
• Error reports: if the app hits an error, it sends us the error message, where in the app's code it happened, the app version and the platform (iOS or web), so we can fix it. No personal information is included.
• Reports: if you report a name on a leaderboard, we store the report with your player ID so we can review it. The reported player is never told who reported them.
• Match records: each Daily Bolt or Daily Verse you complete (mode, score, round count, perfects, how long it took, timestamp, and the calendar date it counted for), plus for each verse in it: the verse, the reference you guessed, how close it was, the hints used, the time taken and the points. We use the per-verse results to tune how hard each verse is rated, game times to break ties on leaderboards, and daily totals (never names) to see how many players come back.

If you create an account to recover your progress on a new device, we additionally store:

• Email address (used solely as your login identifier).
• A bcrypt hash of your password (we never store the plaintext password, and we cannot read it).
• An optional display name.
• A password-reset code, only while a reset is in progress: stored hashed, it expires after 15 minutes and is deleted once used.

That is the complete list. We do not collect your phone's contacts, location, photos, microphone, camera, advertising identifiers, or device sensors.

What we do not do

• We do not use any third-party analytics, advertising, or tracking SDKs, and the app loads no third-party resources. Fonts and the King James text are bundled; ESV text is fetched by our server from Crossway's ESV API, which receives only the verse references, never anything about you.
• We do not sell or rent any data.
• We do not share your data with advertisers or data brokers.
• We do not track you across other apps or websites.
• We do not require an account to play.

Where data is stored

Your data is stored on managed infrastructure (Neon Postgres in the United States) and accessed by a server we operate (Railway, United States). All traffic between the app and the server is encrypted with HTTPS.

If you ask for a password reset, the code is emailed to you through Resend, an email delivery service, which receives your email address and the message for that purpose only.

Cookies & sessions

The server sets a single first-party session cookie (biblebolt.session) so we can authenticate you across requests. The cookie is HTTP-only, transmitted only over HTTPS, and used solely to identify your player record. We do not set advertising or third-party cookies.

Children

Bible Bolt does not knowingly collect any personally identifiable information from children under 13. The game is intended for general audiences.

How to delete your data

You have two options, both of which delete your data immediately and permanently:

• In-app: open the You tab → Settings → Delete account (guests: Delete my data). This removes your player record, all your match history, your username, your avatar selection, your friends and friend requests, your invite code, and (if you have one) your email and password hash.
• By email: send a request from the email address on your account to the address below. We will confirm deletion within 7 days.

Your rights

You can request a copy of the data we hold on you, or ask us to correct it, by emailing the address below. Residents of jurisdictions with privacy laws (e.g. GDPR, CCPA) have the additional rights granted by those laws and we will honor them.

Changes to this policy

If we materially change this policy we will update the date at the top of this page.

Contact

Questions, deletion requests, or data-access requests: hello@playorders.com