Privacy Policy for BWGameSpot Mobile App
1. Introduction & Scope
BWGameSpot (operated as an individual sole proprietorship with its principal place of business at E-24/3, 2nd Floor, Siddharth Nagar, New Delhi, India 110014; “we,” “our,” or “us”) operates the BWGameSpot Android application (Package ID: com.bwgamespot.app) and the official website at https://www.bwgamespot.com/.
This Privacy Policy explains how our Android mobile application collects, uses, stores, processes, and protects your personal information when you browse our catalog of gaming consoles, retro video games, and accessories, create a customer account, place orders, or contact our support team.
2. Personal Information Collected & Processed
Depending on how you interact with the BWGameSpot app, we collect and process the following categories of information:
| Data Category | Specific Data Points | Purpose | Storage Location |
|---|---|---|---|
| Account Profile | Full Name, Username, Email Address, Password (hashed) | Account creation, customer authentication, session management, and order history tracking. | Encrypted in WooCommerce database; token saved in Android Keystore. |
| Delivery & Billing | Recipient Name, Street Address, City, State, PIN / Postal Code, Country, Phone Number | Calculating live shipping rates, packaging, dispatching physical orders, and issuing tax invoices. | WooCommerce customer profile & temporary local checkout state. |
| Order & Cart Details | Products ordered, quantities, price, order status, order ID, cart token | Fulfilling orders, calculating cart totals with live shipping, 1-Year Seller Warranty tracking. | WooCommerce backend & local cached order list (cleared on logout). |
| Customer Support | Chat messages, order queries, email requests, WhatsApp communications | Resolving order issues, price requests, warranty claims, and account deletion requests. | Official customer support desk (+91 8920351777 / support@bwgamespot.com). |
Offline Demo Mode
The app offers an optional “Offline Demo Mode” allowing visitors to explore features without an account. In Demo Mode, sample customer data is generated strictly in transient device memory. Demo data is never transmitted to our servers or processed by WooCommerce.
3. Device Permissions & Non-Collection Disclosures
In accordance with Google Play Developer Policies, we disclose that the BWGameSpot Android application requires only standard internet connectivity:
android.permission.INTERNET— Required to communicate securely via HTTPS with our store backend and payment gateway.
- NO Location Access: We do not request GPS, network location, or background location.
- NO Camera or Audio: We do not access your device camera or microphone.
- NO Contacts or Media: We do not read device contacts, photos, videos, or external storage files.
- NO Device Identifiers / Advertising ID: We do not collect or track your Android Advertising ID (AAID) or hardware IMEI.
- NO Third-Party Ad Trackers: The app contains zero advertising SDKs (e.g., no AdMob, Unity, AppsFlyer, or Facebook Pixel).
4. Payment Processing & Razorpay Integration
Payment processing in the BWGameSpot Android application is conducted with the highest security standards:
- External Gateway Handling: Payments are processed securely through Razorpay Software Private Limited, an RBI-authorized, PCI-DSS Level 1 certified payment aggregator.
- In-App WebView Checkout: During checkout, you are presented with our secure WooCommerce checkout form over HTTPS. Razorpay enables payments via UPI (Google Pay, PhonePe, Paytm, BHIM, CRED), Debit/Credit Cards, and NetBanking.
- Zero Payment Instrument Storage: The BWGameSpot mobile app never collects, processes, transmits, or stores your credit/debit card numbers, CVVs, net banking credentials, or UPI PINs. All financial credentials are submitted directly to Razorpay’s PCI-DSS compliant interface or your respective UPI app.
-
Payment Confirmation: Our backend only receives transaction status tokens (e.g.,
processing,completed, orfailed) alongside the Razorpay payment ID to record order fulfillment.
5. Third-Party Service Providers
We only share limited customer data with trusted third parties strictly necessary to operate our e-commerce business:
| Third Party | Role | Data Shared | Privacy Policy |
|---|---|---|---|
| Razorpay | Payment Gateway | Order total, customer email, phone, and billing name for transaction processing. | Razorpay Privacy Policy |
| Logistics Partners (India Post, Blue Dart, Delhivery) |
Shipping & Delivery | Customer full name, delivery address, postal code, and contact phone number. | Carrier-specific shipping policies |
| WhatsApp (Meta) | Optional Customer Support | User-initiated chat messages, inquiries, and warranty communication. | WhatsApp Privacy Policy |
6. Data Security & Multi-Customer Isolation
We employ robust technical and organizational measures to protect your personal information:
- Transport Layer Security (HTTPS): 100% of network communication between the app and our servers is encrypted in transit using TLS 1.3.
- Hardware-Backed Storage: Authentication tokens are stored securely on your Android device using
expo-secure-store, leveraging the Android Keystore system. - Multi-Customer Isolation: When you log out or switch accounts:
- All stored user profile information, authentication tokens, and cached orders are instantly purged.
- In-app WebView storage (including
localStorage,sessionStorage, and cart session nonces) is completely cleared to prevent cross-account address or session data leakage.
- Server Security: The WordPress backend enforces strict role-based access controls (blocking administrator/shop manager accounts from mobile tokens), rate limiting, and customer ID verification on every API request.
7. Data Retention & Account Deletion (Google Play Compliance)
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, service your customer account, or satisfy applicable Indian tax and legal requirements.
How to Submit an Account & Data Deletion Request
- From Within the Android App: Open the app → go to the Account tab → scroll to APP & STORE → tap Request Account Deletion → select Submit via Email or Submit via WhatsApp.
- Online Web Deletion Portal: Visit our dedicated, publicly accessible deletion portal at https://www.bwgamespot.com/account-deletion/.
-
Direct Email Request: Send an email from your registered account address to support@bwgamespot.com with the subject
Account Deletion Request. - WhatsApp Support Desk: Message our verified business line at +91 8920351777 with your registered email address.
Deletion Scope & Statutory Exceptions
- Permanently Deleted: Customer login profile, email address, password hashes, mobile authentication tokens, saved billing and shipping addresses, and active shopping carts.
- Retained for Legal Compliance: In accordance with Indian commercial, taxation (GST), and accounting laws, past purchase invoices, completed transaction records, and active 1-Year Seller Warranty service records are retained for the legally mandated statutory period.
8. Children’s Privacy
The BWGameSpot application and store are not directed to children under the age of 13 (or under 18 for contractual purchasing purposes without parental supervision). We do not knowingly collect or solicit personal data from children under 13.
If we discover that personal data from a child under 13 has been collected without verified parental consent, we will promptly delete that information from our servers. Parents or guardians who believe their child has provided us with personal information may contact us at support@bwgamespot.com.
9. Your Privacy Rights
Under the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and international privacy frameworks, you have the following rights:
- Right to Access: You can view your account profile, saved addresses, and past orders at any time within the app or on our website.
- Right to Rectification: You may edit your profile and delivery address directly in the app or website.
- Right to Erasure: You can request account deletion as described in Section 7.
- Right to Withdraw Consent: You may sign out of the app at any time, which deletes your local authentication session, or discontinue using the service.
10. Contact Information & Grievance Redressal
If you have any questions, concerns, feedback, or grievance regarding this Privacy Policy or our data practices, please reach out to our dedicated support desk: