Privacy Policy

Last updated: October 4, 2026

Kaboomly has no user accounts and no backend of its own. We do not ask for your name, email address, or any other personal details to use the simulator.

Who is responsible

The data controller is the individual developer operating Kaboomly ("we").Privacy, support, and rights requests:[email protected] (monitored by a person; we aim to reply within 2 business days). See also ourTerms of Use.

What we collect

Payments

Payments for Kaboomly Pro are handled by Waffo Pancake (Waffo.com Limited) as Merchant of Record. Card and payment data is processed by Waffo under PCI-DSS standards and is never stored on our servers. Waffo is an independent controller of the data it collects for payment, tax, and fraud prevention, under its own privacy policy andbuyer terms.

No sale of data

We do not sell your personal information.

How long we keep data

Your rights

You may ask to access, correct, or delete your personal data, or object to its use. Email [email protected]and we will respond within 30 calendar days.

What stays in your browser

Your scenario (the location, yield, and burst type) is calculated entirely in your browser. It is not sent to us.

The site stores one small value in your browser's local storage to remember that you have acknowledged the education-only notice, so it is not shown on every visit. It contains no personal information. You can remove it at any time by clearing this site's data in your browser settings.

Map tiles

The map is drawn with MapLibre GL JS using map tiles, styles, and fonts from OpenFreeMap. To show the map, your browser requests these files directly from OpenFreeMap's servers. Like any web request, this reveals your IP address, your browser type, and which map areas are being loaded. We do not receive or control this information.

While you type, suggestions come from a list of cities built into the site; that text is not sent anywhere. Only if you chooseSearch "…" as an address (or press Enter on text that is not a listed city) is your search text sent to an address lookup service run by the OpenStreetMap community:Photon (by Komoot), and if that does not answer,Nominatim(by the OpenStreetMap Foundation, see itsprivacy policy). Your browser sends that request directly to them, so they see your IP address and the search text, like any web request. We never send what you searched for, or the resulting coordinates, to Google Analytics or anywhere else; analytics only records that a place was picked by address search (or by location), without saying which.

Use my location

The Use my location button asks your browser for your position only when you press it, and your browser asks for your permission first. The position is used only on this page, in your browser, to move the map there. It is not stored (not in cookies or local storage) and not sent to us, to analytics, or to the address search services. The only requests it causes are the ordinary map tile requests for that area. If you decline, nothing else happens.

When you press Share, a link containing the coordinates of ground zero, the yield, and the burst type is copied to your clipboard. Nothing is sent to us. If the location came from an address search or fromUse my location, the coordinates in the link are rounded to about 1 km, and the share image names only the city or area, not the street address. If you post the link, anyone who opens it can see those coordinates, so consider this before sharing a location that is personal to you.

Analytics

We may use Google Analytics 4 to understand how the site is used in aggregate, for example which pages are visited and roughly where visitors come from. Google Analytics is currently enabled on this site. If it is enabled, the following applies:

To opt out, you can install the Google Analytics opt-out browser add-on, block cookies for this site in your browser settings, or use a content blocker. The simulator works the same either way.

Hosting

The site is served as static files by a hosting provider, which may keep standard server logs (such as IP address, time, and requested page) for security and reliability. We do not use these logs to identify individual visitors.

Children

The site and Kaboomly Pro are intended for people aged 16 or over. We do not knowingly collect personal information from anyone under 16; if you believe we have, email us and we will delete it.

Changes and contact

If this policy changes, for example when analytics is turned on or off, we will update this page and the date at the top. Questions are welcome through the contact page.

Back to Kaboomly.