Privacy policy

Who we are

Unbroken Software, LLC is a US company that makes LaunchBox, Big Box, the LaunchBox Games Database (GamesDB) and Music Box Alpha. We’re responsible for the information covered by this policy (the “controller” under European data protection law).

This policy covers:

• our websites: unbrokensoftware.com, launchbox-app.com (including checkout, GamesDB, the forums and the feedback board) and musicboxalpha.com
• your Unbroken Account
• LaunchBox and Big Box for Windows, LaunchBox for Android, and Music Box Alpha
• emails we send and giveaways we run

This policy doesn’t cover other companies’ services, including those you connect to LaunchBox, such as Steam and GOG, or social networks where we have a page. Their own privacy policies apply.

Our websites

All our websites use Cloudflare, which receives your IP address, browser and device type, requested page and referring page to deliver content and block attacks. Our servers also log requests to help diagnose problems.

Some pages load fonts or code from Google Fonts, jsDelivr and cdnjs. These services receive your IP address.

Your Unbroken Account

One account signs you in to LaunchBox, GamesDB and our feedback board.

• What we store: your email, GamerTag, password in a form we can’t reverse, and any app passwords you create. We also record your sign-up, email confirmation and last sign-in dates.
• Sign-in security: we temporarily use your IP address to block password guessing. We don’t store an account history of IP addresses or devices.
• What’s public: your GamerTag appears on GamesDB if you share collections or post high scores. See GamesDB.
• Deletion: delete your account in the settings at login.unbrokensoftware.com. This also deletes your GamesDB profile. We keep licenses and purchase records for license access and tax requirements. We also keep email preferences so unsubscribed addresses stay off our mailing list. Email us to request removal of these records.

Buying a license

Stripe processes LaunchBox Premium payments. We never see or store your card details.

• What we keep: your name, email, billing address and country, product, price, purchase date and license key. Stripe also reports fraud flags, refunds and disputes.
• Why: to issue and recover licenses, handle refunds, prevent fraud and meet tax requirements.
• Gifts: we store the recipient’s name and email to send their license.
• Your license file: contains your name and email, stays on your computer and is checked offline. LaunchBox doesn’t send it to us.

LaunchBox and Big Box for Windows

LaunchBox stores your games, play history, ratings, settings, license file and saved store logins on your computer. Online features send the data listed below.

• Install ID: a random number created during installation.
• Machine ID: a code derived from your motherboard, processor, graphics card, boot drive and BIOS identifiers. We can’t reverse it to recover those identifiers. It recognizes a PC after reinstallation so we can count unique PCs and detect license abuse.

When you connect other services

LaunchBox connects directly to Steam, GOG, Epic, Amazon, EA, Xbox, RetroAchievements and EmuMovies. Saved passwords and sign-in tokens stay on your PC; we don’t receive them.

• For sign-in, EA receives hardware identifiers, including serial numbers and your network adapter’s MAC address. Amazon receives your Windows machine ID.
• GOG achievements use the sign-in saved by GOG Galaxy.
• Sites providing emulators and other tools you install through LaunchBox receive your IP address.

LaunchBox for Android

LaunchBox for Android has no ads and doesn’t access your location, contacts, camera or microphone.

• Permissions: storage access for games and media; the list of installed apps to find emulators (it stays on your device); package installation for updates; notifications and background playback.
• Update checks send your install ID and license ID.
• Crash and usage reports: sent to Sentry with no setting to turn them off. They include device model, Android version, screens opened, buttons tapped, settings, library size, game launches, playlist names and occasional performance samples.
• GamesDB, themes and cloud sync work the same as on Windows. Star ratings you give are sent to GamesDB even if cloud sync is off.
• Connected services: connections to Steam, RetroAchievements and EmuMovies are direct. We don’t receive your sign-in details.

Games in Google Drive, OneDrive or Dropbox

Newer versions can import games from Google Drive, Microsoft OneDrive or Dropbox. LaunchBox requests read-only access to your files and account email. It never creates, changes or deletes files in your cloud storage.

• Purpose: to browse folders, identify games and match artwork, download games for play, check for added or removed games, and display the connected account.
• Storage: LaunchBox connects directly to the provider. Files, folder listings and sign-in details aren’t sent to us. Downloads and imported file names stay on your device, except that cloud sync sends game file names when enabled. Crash reports may include file names, but never file contents.
• Limits: we don’t sell or share your cloud storage information, use it for advertising or train AI models with it.
• Removing access: sign out in Options › Remote Storage. For Google Drive and Dropbox, this also removes LaunchBox’s access. You can remove access in any provider’s account settings. Deleting a game or platform removes its downloaded files; uninstalling LaunchBox removes saved sign-ins.

LaunchBox’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

GamesDB

GamesDB (gamesdb.launchbox-app.com) provides game information and artwork. Sign in with your Unbroken Account.

• What we store: GamerTag, email, collections, lists, synced play stats, ratings, MAME high scores, edits, uploaded images and moderation decisions. Connected device records include device name, Windows computer name, app and version.
• What’s public: anyone can view collections by GamerTag. Leaderboards show GamerTag, initials, score and date. Edits aren’t publicly linked to your name; moderators can see who submitted them.
• Uploaded images: stored as uploaded. Remove any embedded location data first.
• Signed-out ratings: a random browser ID prevents duplicate ratings.
• Deletion: deleting your Unbroken Account removes your profile, collections, stats, scores and edit history. Approved edits and anonymous ratings remain without a link to you.

Ads and analytics on GamesDB

GamesDB shows ads to signed-out visitors on browse, search and game pages. Nitro (NitroPay, run by Overwolf) and its partners use cookies and similar tools to select and measure ads and prevent fraud. They collect online identifiers, IP address, approximate location, browser and device details, pages viewed, searches, and ad views and clicks. Ads may be personalized.

• Where consent is required, including the EU and UK, optional ad tracking, personalization and analytics run only with your consent.
• Elsewhere, they’re on unless you opt out. GamesDB honors your browser’s Global Privacy Control signal.
• Change your choices through GamesDB’s “Advertising privacy choices” link.

These choices also apply to Google Analytics and the Meta pixel on GamesDB. We remove search text before sending data to them, and delete their cookies when you withdraw consent. Nitro’s privacy policy covers its partners and data retention.

Music Box Alpha

• Update checks: send the app version, random install ID and license ID if present at startup.
• Error reports: crashes automatically send error details, install ID, license ID, version and time. Reports are currently kept only in our server logs. File paths may include your Windows username or song file names.
• Your license: contains your name and email, stays on your computer and is checked offline.
• Artwork: requests for missing artwork go directly to fanart.tv, which receives your IP address and the artist name.
• CD ripping: tools may send the disc ID and your IP address to AccurateRip, the CUETools database, MusicBrainz or similar services.
• musicboxalpha.com: has no accounts, checkout or email sign-up, and we don’t set cookies. Google and other providers receive your IP address when loading code and fonts.

Emails from us

• Account, license, purchase and download emails: sent through Postmark as part of the service, without an unsubscribe option.
• News, updates and offers: sent through Amazon Web Services. Requesting a download or getting a license adds you to this list. Every email lets you unsubscribe or choose topics. We keep unsubscribed addresses to prevent further marketing emails.
• Open tracking: email images and countdown timers record when you open a message, your IP address, and your email app’s name and version. Disable images in your email app to stop open tracking.
• Click tracking: links through go.launchbox.gg record the link, email, click time, IP address, and browser name and version. A 45-day cookie helps measure purchases from email links.

Forums, feedback and support

• Forums (forums.launchbox-app.com): use a separate account with a display name, email and password. Posts and profiles are public. Private messages are stored on our server; staff may read them for moderation or legal reasons. Sign-up uses hCaptcha. The forums use Google Analytics and the Meta pixel. Forum news is optional at sign-up.
• Contact form: sends your name, email, message and current page to our Google Workspace support inbox. The form uses hCaptcha.
• Feedback board (feedback.launchbox-app.com): signing in with your Unbroken Account shares your account ID, email and GamerTag with Featurebase, which runs the board.
• Support: staff can look up licenses and purchases by email address.

Giveaways

Entrants must be at least 18. Each giveaway’s rules explain eligibility and winner selection.

• Entries: we collect your email, acceptance of the rules, prize preferences and marketing email choice. To prevent duplicate entries, we store a code made from part of your IP address that we can’t reverse, rather than the address itself. Cloudflare Turnstile checks for bots.
• Winners: we collect your name, shipping address and tax details (possibly a tax ID) only to confirm eligibility, deliver prizes and meet tax requirements. We may also ask whether you want a public display name.

Cookies

Cookies are small files stored in your browser. You can delete or block them in browser settings. Essential cookies are required for sign-in.

Who we share with

These companies help run our services. Unless stated otherwise, they may use your information only for that work.

We may also share information:

• For legal or safety reasons: to meet legal requirements or protect users, our company or others from fraud, abuse or harm.
• In a sale or merger: a new owner must honor this policy or notify you and give you a choice before changing it.
• At your request, such as when you connect a service to LaunchBox.

Ads and “selling” your data

We don’t sell your information for money. Under some US state laws, including California’s, “selling” or “sharing” also covers data collected for targeted ads. This includes:

• the Meta pixel and Google Analytics on our websites
• Nitro’s ad partners on GamesDB

This involves cookie IDs, IP addresses, browsing activity on our sites and approximate location.

How to opt out:

• GamesDB: use “Advertising privacy choices” or enable Global Privacy Control in your browser.
• Other sites: use browser privacy settings, a content blocker, Google’s Analytics opt-out add-on or Meta’s setting for activity from other businesses.
• For help: email [email protected] with “Do Not Sell or Share” in the subject.

Clearing cookies or switching browsers can reset browser-based choices. Opting out of personalized ads doesn’t remove all ads.

Your choices and rights

Everyone can

• Request a copy of your information.
• Correct it in your account settings or by contacting us.
• Request deletion, or delete your account at login.unbrokensoftware.com.
• Stop marketing emails with the unsubscribe link.
• Turn off optional reports on Windows in LaunchBox’s Options › General.
• Control ads as described in Ads and “selling” your data.

Email [email protected] with “Privacy request” in the subject. We may verify your identity through your email address. Requests are free. We’ll respond within 30 days or explain why we need more time.

If you’re in the EU, the UK or Switzerland

You can object to our use of your information, ask us to limit it, or request a copy in a format you can move to another service. You can withdraw consent at any time where we rely on it, and complain to your local data protection authority.

If you’re in California or another US state with a privacy law

• You can ask what we collect, request deletion or correction, and opt out of “sale” or “sharing” for targeted ads.
• Data categories include identifiers, purchase records, online activity, approximate location, uploaded images and giveaway winners’ tax details.
• We use sensitive information, such as passwords and winners’ tax IDs, only for the purpose you provided it.
• We don’t make decisions about you based solely on automated profiling.
• You can use an authorized agent to make requests. We won’t discriminate against you for exercising your rights.
• To appeal a denied request, reply with “Appeal” in the subject. We’ll review it again.
• We don’t share personal information with other companies for their own direct marketing, as described in California’s “Shine the Light” law.

Legal bases (EU and UK)

We rely on these legal bases to use your information:

Where we store data

Our servers and most providers store data in the US. Cloudflare operates worldwide. Information from outside the US is transferred here. Where required, we and our providers use safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

Security

Our sites use encrypted connections (HTTPS). Passwords are stored in a form we can’t reverse, card details stay with Stripe, and access to your information is limited to people who need it. No system is completely secure. We’ll notify you of data breaches as required by law.

Keep your device secure to protect locally stored data, including saved store logins.

Children

Our services aren’t intended for children under 13. We don’t knowingly collect their information. EU and UK users under 16 need a parent’s permission to create an account. Email us if a child under 13 has provided information, and we’ll delete it.

Changes to this policy

We’ll post updates here with a new date. For significant changes, such as collecting new types of information, we’ll notify you by email or in the app before they take effect.

Contact us

Contact us with privacy questions or requests: