Privacy Policy

1. Introduction

Bam! respects your privacy. This policy describes what personal data we collect, how we use it and what your rights are under the General Data Protection Regulation (GDPR - EU Regulation 2016/679).

Bam! is a file sharing service: files are transferred between users' browsers via cloud streaming in chunks. This means we never have access to the whole content of your files.

2. Data Collected

The data collected varies based on the level of service usage:

Anonymous User (Guest)

No personal data collected
Only a technical session cookie, strictly necessary for the service to function

Pro Free User

Email address
Username
OAuth provider used (Google, GitHub)

Pro Premium User

Same data as Pro Free plan
Billing information (managed entirely by the external payment provider)

For all levels: we collect metadata related to transfers (file size, hash, timestamp) for statistical and security purposes. We NEVER collect the content of transferred files.

3. Data Usage

Collected data is used exclusively for the following purposes:

Authentication and user account management
Aggregated and anonymized usage statistics to improve the service
Gamification system (XP, badges, levels)
Billing and Premium subscription management

4. Third-Party Sharing

We do not sell, trade or transfer your personal data to third parties. We use the following technical services for platform operation:

Supabase — Database, authentication and real-time signaling
Firebase Hosting — Web application hosting
Google AdMob — Advertising for free tier users (Anonymous and Pro Free)

Each service processes data in accordance with its own privacy policies and in compliance with GDPR.

5. Encryption & Security

The security of your data is our priority. Bam! implements multiple layers of protection:

Native E2E encryption — All transfers are protected by TLS 1.3 over HTTPS
AES-GCM encryption — Premium users can add an extra layer of encryption with a custom password (PBKDF2 key derivation)
Zero-knowledge architecture — Our servers cannot see or access the content of transferred files

File chunks transit through Cloudflare R2 over HTTPS and are deleted immediately after download. Bam!'s own servers never store or access file content.

6. Cookies & Tracking

Bam! uses the following tracking technologies:

Technical session cookies — Strictly necessary for application operation
Anonymized analytics — Aggregated and anonymous data to understand service usage
AdMob — Advertising cookies active only for free tier users (Anonymous and Pro Free)

7. Advertising

Bam! uses Google AdMob to display advertisements. Advertising is managed as follows:

Anonymous User — Banners and interstitial ads
Pro Free User — Banners and interstitial ads
Pro Premium User — Zero ads, completely ad-free experience

Advertisements may use cookies and identifiers to personalize displayed content. You can manage your advertising preferences in your browser settings or through Google Ads options.

8. User Rights (GDPR)

Under GDPR, you have the right to:

Access — Request a copy of your personal data in our possession
Rectification — Correct inaccurate or incomplete personal data
Erasure — Request the deletion of your personal data ("right to be forgotten")
Portability — Receive your data in a structured, machine-readable format
Objection — Object to the processing of your personal data for specific purposes

To exercise your rights, contact us at privacy@bam.app. We will respond to your request within 30 business days.

9. Data Retention

Data is retained for the minimum time necessary for the purposes for which it was collected:

Transfer metadata — Retained for a maximum of 30 days, then automatically deleted
Account data — Retained until account deletion by the user
Billing data — Retained according to applicable tax and legal obligations

10. Contacts

For any questions or requests regarding this privacy policy, you can contact us at:

Privacy Email: privacy@bam.app
DPO (Data Protection Officer): dpo@bam.app