Effective: October 24, 2026
The Badger Airsoft app ("the App"), the app website at badgerairsoft.app, and the channel website at 6mmbadger.com are operated by 6mm Badger LLC, a California limited liability company ("we", "us"). We are the business responsible for the personal information described here.
Questions, requests, or complaints: [email protected]. The current version of this policy always lives at https://badgerairsoft.app/privacy.
Account information. When you sign up we store a display name, a handle, your email address, and optionally a phone number and avatar. You can sign in with Apple, Google, an email link, or an email and password. For Apple and Google sign-in we verify the token your device sends us and keep the account identifier and email the provider confirms. Passwords are stored only as a salted hash. Email sign-in links expire after ten minutes. If you connect your YouTube account to verify a channel membership, we store your YouTube channel ID (section 11 explains exactly what we read from Google and why).
Things you create. Loadouts, gear items, drills, shot-timer and pack sessions, and home-screen preferences are stored on your device. When you are signed in, they sync through our servers so they appear on your other devices, along with your armoury (for members), your profile, starred places, a few settings and the photos you attach. Before a device first syncs, a copy of its data is kept on our servers in case that sync goes wrong. If you turn on Cloud Backup, a compressed copy (up to 10 MB) is stored on our servers so you can restore it on another device.
Social features. Friend connections, direct messages, group and team chat, team memberships and applications, event RSVPs, shared loadouts and drills, reactions, and read receipts are stored on our servers so the people you share with can see them. Reports you file about messages or users are stored for moderation.
Field directory. Places, fields and businesses you add or edit, reviews, tips, and photos are stored and may be shown to other users. If you claim a business listing, we send a verification code to the phone number you enter, using an SMS provider, and keep a record of the claim.
Feedback. If you use the in-app Suggest form, the text and any photo you attach are relayed to a private Discord channel we run, and a copy is kept in our database. Feedback is not tied to your account unless you include contact details.
Purchases and membership. Paid tiers are sold on badgerairsoft.app through Stripe. Stripe processes the payment and tells us the subscription status, the plan, the renewal date and the email used, so we can set your membership level; we keep Stripe's customer and subscription identifiers against your account. We never receive card numbers. YouTube channel members can instead verify their membership with Google: we read the ID of your YouTube channel and check it against the channel's member list (section 11).
Device and technical data. Session tokens; push-notification tokens with platform, app version and a device label (only if you allow notifications); request rate-limit counters; and an audit log of administrative actions. When you subscribe to email from us we record your consent with the IP address and browser identifier at that moment, as evidence of opt-in.
Cookies and storage on your device. The App and badgerairsoft.app keep your sign-in session and your app data in your device's or browser's local storage, set one first-party cookie that identifies your device (kept for up to two years), and cache the site's own files so it works offline. We do not use advertising, analytics or tracking cookies, and no third party serves ads in the App; the only third-party content is the map tiles and address search described under Approximate location. When you choose to verify a membership, Google's sign-in window (accounts.google.com) is run by Google under the Google Privacy Policy.
Approximate location. If you allow the location prompt, your device uses its location to sort fields by distance and to centre the map. That location is used on the device and is not stored on our servers. Map tiles and address search are fetched from Esri and OpenStreetMap (Nominatim), which receive the map area or search text and your IP address as part of serving those requests.
Email. We send transactional email (sign-in links, confirmations, verification codes) through our email provider. Newsletters go only to people who opt in and confirm. Our provider reports delivery, opens, clicks, bounces and unsubscribes per message.
On 6mmbadger.com. Newsletter sign-ups (your email and the page you came from) are sent to our newsletter platform, which sends a welcome email. Giveaway entries (name, email, the YouTube, Instagram or Reddit handle we use to match your entry, and your newsletter choice) are stored so we can run the draw and contact the winner. Surveys and forms you choose to fill in are used only for the purpose described on the page.
In-app purchases on iPhone. If you buy Badger Membership in the iPhone app, Apple takes the payment under your Apple ID; we never see your card, your name or your Apple ID. Apple sends us a signed record of the purchase, from the app and directly from Apple when it renews, lapses or is refunded: the plan, Apple's transaction numbers, the purchase, renewal and expiry dates, whether it will renew, billing problems and refunds. To connect the purchase to your Badger account we create a random identifier for the account and hand it to Apple when you buy; Apple returns it with every record. The app checks your App Store country on your device, only to show the purchase options allowed there; it is not sent to us.
What we do not collect. No advertising identifiers, no analytics or crash-reporting SDKs, no contacts, no background location, no precise location on our servers.
We do not use your information for targeted advertising and we do not build profiles for sale to others.
We share personal information only with service providers who process it for us under contract, and only what each needs:
We may also disclose information when the law requires it, to protect the rights and safety of users or the public, or as part of a sale or merger of the business (you would be notified). We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Our servers are run by Cloudflare and our providers operate mainly in the United States. If you use the App from elsewhere, your information is transferred to and processed in the United States.
California and other US privacy laws. Depending on where you live you may have the right to know what personal information we hold, to have it deleted or corrected, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights. We honour these requests for all US residents. To make one, email us; we will verify the request against your account email. You may use an authorised agent; we will ask for proof of their authority. We do not use or disclose sensitive personal information for purposes other than providing the service.
UK and EU residents. You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR and UK GDPR, and the right to complain to your local data protection authority. Our lawful bases are performance of the service you asked for, your consent (email marketing, notifications, location), and our legitimate interests in keeping the service secure.
Connections use TLS. Passwords are stored as salted hashes. Sign-in tokens from Apple and Google are verified on our servers before an account is issued. The Google access token used for membership verification travels only over TLS, is checked with Google before use, is used for one YouTube request and is never stored. Administrative access is logged. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as the law requires.
The App is not directed at children under 13 (see its age rating on the App Store and Google Play). We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email us and we will delete it.
We will update this policy when the App or websites change what they collect. The effective date at the top shows the latest version. For material changes we will notify you in the App or by email before they take effect.
Badger Airsoft uses YouTube API Services for one optional feature: confirming that you are a member of the 6mm Badger YouTube channel, so we can switch on member features. By using it you agree to be bound by the YouTube Terms of Service. Google's own handling of your data is covered by the Google Privacy Policy.
6mm Badger LLC · [email protected] · put "Privacy" in the subject line.