Session Data

User Authentication (Session Cookie): We use a session cookie that stores a user identifier. This is solely used to confirm your login status and retrieve user details from our database during your session. This cookie is temporary and expires when your session ends (for example, when you close your browser or log out).

“Remember Me” (Persistent Login Cookie): If you choose the “Remember me” option when signing in, we store a persistent login cookie so you can remain signed in across browser sessions. This cookie is used only for authentication and account security (it is not used for advertising or tracking). You can remove it at any time by logging out, disabling “Remember me”, or clearing your browser cookies.

Account Information

Habbo Name: For account creation and management, we only collect your Habbo username. These details are used exclusively for verification purposes.

Analytics Data

Page Access Information: We have implemented a custom tracking script that collects non-personal, aggregated analytics data, also known as 'Lightweight Analytics'. This includes:

The URL path you visit.

The referrer URL (unless it matches our own domain, in which case it is omitted).

UTM parameters (if present) from the URL.

Your screen resolution.

Data Transmission: The collected data is sent via a beacon to our analytics endpoint at https://analytics.launch.bz/pixel-track/ibukau69rPalhkFa for the purpose of understanding site usage and improving user experience.

Do Not Track: Our tracking script respects Do Not Track settings. If your browser or device has Do Not Track enabled, the analytics script will not collect data about your visit.

Session cookies: Used to keep you signed in during your visit.

“Remember me” cookie (optional): Only set if you choose “Remember me”, to keep you signed in between visits.

No third-party advertising cookies: We do not use advertising or marketing cookies.

What they are
If you choose to enable push notifications, Bobba can send you browser/device notifications (for example, fishing frenzy or account-related notifications). Push notifications are optional and can be enabled or disabled at any time in your account settings and/or your browser’s notification settings.

What we store
When you enable push notifications, we store a push subscription record linked to your account, which may include:

A push subscription endpoint (a URL provided by your browser/device push service)

Associated cryptographic keys, needed to deliver encrypted push messages

Basic device metadata such as user agent and timestamps

Why we store it
We use this information solely to deliver push notifications you have opted into and to manage your subscribed devices (for example, updating or removing subscriptions). We do not use push subscription data for advertising or tracking.

Cookies used for push
If enabled, we may store a small cookie used to help remove the current device’s push subscription when needed.

How to opt out
Push notifications are strictly opt-in, and you can disable push notifications at any time from your account settings, by unsubscribing your device, logging out, and/or via your browser/device notification permissions. When you unsubscribe, we remove the corresponding push subscription record(s) from our systems.

For User Experience: The session cookie is strictly used to verify your identity, manage your login status, and pull the necessary user details from our database.

For Account Management: Your Habbo name is used to verify your account.

For Analytics: The analytics data is used solely for improving the website. This information is aggregated and does not personally identify you. It helps us analyze which pages are accessed and how users interact with the site.

No Sale or Sharing of Personal Data: We do not sell, trade, or otherwise share your personal information with third parties.

Service Providers: The only third-party involved is our analytics provider, which processes data in an aggregated and anonymized form solely for analytical purposes.

We implement reasonable security measures to protect the information collected on our site, which includes the encryption and obfuscration of data. However, no data transmission over the internet can be guaranteed as 100% secure, so while we strive to protect your data, we cannot ensure its absolute security.

Session Data: Your session data is stored only for the duration of your visit and is automatically discarded when you log out or end your session.

Account Data: Information related to your account is maintained only as long as necessary for verification and communication purposes.

Analytics Data: Data collected for analytics is stored in aggregated form and is used to improve the site. This data is not linked back to individual users.

Under the UK GDPR, you have rights over your personal data. Bobba provides tools to help you exercise these rights directly from your account settings.

Download my data
You can request a copy of the data Bobba holds about your account from the GDPR tab in your account settings. This will generate a downloadable export of your data.

Delete my account
You can request account deletion from the GDPR tab in your account settings. This will permanently delete your account and remove associated personal data from Bobba systems, subject to any legal or operational requirements (for example, security logs or abuse prevention records where required).

How to do it
Go to My Account → GDPR to request your data or delete your account.

Bobba may update this Privacy Policy from time to time. When we make changes, we will revise the “Last updated” date at the top of the policy. We encourage you to review this page periodically for any updates.