Data Policy
Last Updated: February 26, 2026
1. Overview
This Data Policy supplements our Privacy Policy and provides detailed information about the cookies, tracking technologies, local storage, AI data processing, and third-party services used on www.bonusbell.com and related services (the "Platform"), operated by Murdock Solutions LLC d/b/a BonusBell.
This Data Policy should be read together with our Privacy Policy (which covers what data we collect, how we use it, and your rights) and our Terms of Service. If there is any conflict between this Data Policy and the Privacy Policy, the Privacy Policy takes precedence.
4. Third-Party Services
The following third-party services may set cookies or process data in connection with the Platform. Each operates under its own privacy policy.
| Service | Purpose | Data Involved | Sets Cookies? |
|---|---|---|---|
| Firebase (Google) | Authentication, database, push notifications | Account data, FCM tokens | Yes (__session) |
| Google Analytics 4 | Usage analytics | Anonymized usage data | Yes (_ga, _gid, _ga_*, _gat) |
| Google Tag Manager | Tag management and deployment | Page load metadata | No (manages other tags) |
| Google Gemini API | Bella AI assistant processing | Conversation text (see Section 6) | No |
| Stripe | Subscription billing (PCI DSS Level 1) | Payment token only — we never see your card | Yes (on checkout page only) |
| Vercel | Hosting, edge delivery, analytics | Performance data, anonymized IP | No |
| SendGrid (Twilio) | Transactional and marketing emails | Email address, name | No |
| ip-api.com | Geolocation (state detection) | IP address | No |
| The Odds API | Sports odds data provider | None (inbound data only) | No |
| API-Sports | Live scores, game stats, predictions | None (inbound data only) | No |
Google and Apple OAuth (coming soon): When we enable social sign-in, Google and/or Apple will process your authentication credentials under their respective privacy policies. We will update this Data Policy at that time.
5. Local Storage and Session Storage
In plain English: Some data is stored directly in your browser (not on our servers) to remember your preferences and save your calculator inputs. You can clear this anytime in your browser settings — it just means your preferences will reset.
In addition to cookies, we use your browser's built-in storage APIs. This data stays on your device and is not transmitted to our servers unless you explicitly submit it.
localStorage (Persistent)
| What's Stored | Purpose | How to Clear |
|---|---|---|
| Theme preference | Remember dark/light mode across visits | Settings page or browser |
| State selection | Remember your selected state for platform filtering | Profile settings or browser |
| Calculator inputs | Persist your last-used values in calculators | Browser settings |
| Cookie consent choice | Remember whether you accepted/declined cookies | Browser settings |
| Practice game state | Save current game session and simulated balance | Browser settings |
sessionStorage (Temporary)
We use sessionStorage for temporary data that is automatically cleared when you close the browser tab:
- Form data in progress (so you don't lose your work if you navigate away and come back)
- Temporary UI state (expanded/collapsed sections, scroll position)
To clear all localStorage and sessionStorage: Open your browser's developer tools (usually F12), go to Application → Storage, and click "Clear site data." This will reset all preferences but will not affect your BonusBell account.
6. AI Data Processing (Bella AI)
In plain English: When you chat with Bella AI, your messages are sent to Google's Gemini API for processing. We store your conversation history so you can refer back to it. You can delete your chat history anytime. Your conversations are not used to train AI models.
BonusBell includes an AI-powered assistant called Bella AI, which is powered by Google's Gemini 2.0 Flash API. Here is exactly how your data is handled:
What Data Is Processed
- Your messages: The text you type into the Bella AI chat interface
- Bella's responses: The AI-generated replies
- Conversation context: Previous messages in the current conversation thread (for context continuity)
How It's Processed
- Your messages are sent to Google's Gemini API servers for processing
- Google processes the request and returns a response
- Both your message and the response are stored in our Firebase/Firestore database so you can view your conversation history
Usage Limits
- Free tier: 10 messages per day, 10 messages stored in history
- Pro tier: Unlimited messages, 50 messages stored in history
- Rate limit: Maximum 10 messages per 60 seconds (all tiers)
What Your Data Is NOT Used For
- Training or fine-tuning AI models
- Advertising or profiling
- Sharing with third parties (beyond Google's Gemini API processing)
How to Delete
You can clear your Bella AI conversation history at any time through the chat interface. All conversations are also deleted when you delete your BonusBell account. See our Privacy Policy Section 9 for full retention details.
7. Managing Your Preferences
You have several options for controlling cookies and tracking:
Cookie Consent Banner
When you first visit the Platform, a cookie consent banner allows you to accept or decline non-essential cookies. Your choice is remembered for one year. You can change your preference at any time by clearing your browser cookies and revisiting the site.
Browser Settings
Most browsers allow you to block or delete cookies, clear localStorage, and manage site data. Common options:
- Block third-party cookies: Prevents analytics and marketing cookies while allowing essential functionality
- Clear all cookies: Removes all cookies (you will be logged out and preferences reset)
- Clear site data: Removes cookies, localStorage, and sessionStorage for the site
Google Analytics Opt-Out
You can opt out of Google Analytics tracking specifically by installing the Google Analytics Opt-out Browser Add-on.
Push Notification Control
If you have enabled push notifications, you can disable them through your device settings or your BonusBell settings. Disabling push notifications will remove your FCM token from our system.
Note: Disabling essential cookies will prevent the Platform from functioning correctly. You will not be able to log in or maintain a session without the authentication cookie.
8. Global Privacy Control and Do Not Track
Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, we treat it as a valid opt-out of the "sale" or "sharing" of your Personal Information under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) and the Colorado Privacy Act (CPA).
You can enable GPC in supported browsers (Firefox, Brave, DuckDuckGo) or through browser extensions. Learn more at globalprivacycontrol.org.
Do Not Track (DNT)
There is currently no universally accepted standard for how websites should respond to Do Not Track (DNT) browser signals. We do not currently alter our data collection practices in response to DNT signals. However, you can use the Global Privacy Control (described above) or the cookie management options in Section 7 to control tracking.
9. Data Processing Purposes
We process your data for the following purposes:
- Service provision: Processing necessary to provide the features you use — authentication, platform recommendations, odds data, calculators, Bella AI, subscription management, and push notifications
- Your consent: Where you have explicitly opted in — marketing emails, push notifications, non-essential cookies, and analytics tracking
- Platform improvement: Aggregated, anonymized analytics to understand usage patterns, identify errors, and improve the Platform
- Legal compliance: Processing required by law — tax records for subscription payments (7 years via Stripe), breach notification obligations, state privacy law compliance, and law enforcement requests
- Safety and security: Fraud prevention, abuse detection, rate limiting, and protecting the integrity of the Platform and our users
- Responsible gaming: Processing self-exclusion requests, PGSI assessments, and activity limits to support responsible gambling behavior — this data is processed with heightened care and, in the case of permanent self-exclusion, is retained indefinitely to honor the irreversible nature of that commitment
10. Data Retention
In plain English: We keep different types of data for different lengths of time. Account info: until you delete it. Server logs: 30 days. Payment records: 7 years (tax law). Self-exclusion: forever (by design, to protect you). Full details in the table below.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account information | Until deletion request + 30 days | Service provision |
| Bella AI conversations | Until you clear them or delete your account | User control |
| Self-exclusion records | Permanent (irreversible by design) | Responsible gaming obligation |
| PGSI assessment data | Until account deletion | Responsible gaming |
| Subscription / payment records | 7 years after last transaction | Tax and legal compliance |
| Server logs | 30 days | Security and debugging |
| Analytics data (GA4) | 26 months | Analytics retention setting |
| FCM push tokens | Until you unsubscribe or delete your account | Service provision |
| Cookie consent preferences | 1 year | Legal compliance |
| Practice game data | Client-side only (never transmitted) | N/A — stays on your device |
This retention schedule is identical to the one in our Privacy Policy Section 9. After account deletion, some anonymized or aggregated data may be retained for analytics purposes. Anonymized data cannot be linked back to you.
11. Changes to This Data Policy
We may update this Data Policy from time to time. For material changes (such as new tracking technologies, new third-party services, or changes to data retention periods), we will provide at least thirty (30) days' advance notice via email or prominent Platform notice before the changes take effect.
For non-material changes (such as adding a cookie name to the table, formatting updates, or typographical corrections), we may update this Data Policy without advance notice.
Your continued use of the Platform after any changes constitutes acceptance of the updated Data Policy.
12. Contact Us
For questions about this Data Policy, cookie management, or data processing practices, please contact us:
Murdock Solutions LLC d/b/a BonusBell
Privacy inquiries: privacy@bonusbell.com
General support: support@bonusbell.com
Legal inquiries: legal@bonusbell.com
Version History
- February 26, 2026: Complete rewrite — expanded from 10 to 12 sections. Added specific cookie names, 10 third-party services (was 3), Bella AI data processing section, localStorage details, GPC disclosure, data retention table aligned with Privacy Policy, removed GDPR-specific language, added UX improvements.
- January 3, 2026: Initial publication.