Legal · Document 01

Privacy Policy

The short version: we collect the bare minimum to run the game and we don't run third-party analytics or trackers in the current build.

Effective: May 1, 2026 Last updated: May 1, 2026 Version: 1.0

01The TL;DR

Blox Blast Rush is a single-player block puzzle game with optional friends and leaderboards. To make those features work, we store a few things in Firebase (Google's backend service) — your scores, your chosen display name, your friend code, and an optional avatar.

That's basically it.

i

The current build has no third-party analytics, no location access, and no access to contacts, photos library, microphone, or camera. If you saw a permission prompt, it was Apple's, not ours.

02What we collect

The table below is the complete list. Everything maps directly to what you see in the App Store privacy nutrition label.

Category
What & why
Linked to you?
Identifiers
An anonymous user ID generated automatically on first launch (a random string — no PII). If you choose to sign in with Apple or Google, we also receive your email address and the display name your provider returns. We generate a 6-character friendCode so people can add you.
Yes
User content
Your chosen display name, an optional 128×128 avatar (if you pick one), your friend code, and account timestamps. Stored in our Firestore database under your anonymous user ID.
Yes
Contact info
Only collected if you sign in with Apple or Google — we receive the email associated with that sign-in. We never email you marketing.
Yes
Gameplay data
Score totals (best, total, lines cleared, games played, power-ups used, revives), gold balance, rank/XP, login streak, your top-10 games, inventory (bombs, undos, hammers, lightning), owned and selected cosmetics, claimed achievements, and settings flags (sound, haptics, color-blind mode, etc.).
Yes
Notifications
If you opt in, we schedule a single local notification each day at 8pm reminding you about your login streak. Local only — nothing leaves the device, no APNs, no tracking. Toggle anytime in Settings.
On-device only
Friendships
If you add a friend, we store the link — your user ID and theirs — under friendships/{uid}/links/*. Friend codes are looked up via a public lookup collection; only the code itself is exposed, not your other data.
Yes
Purchases
If you buy a coin pack, Apple processes the transaction and sends us a receipt. We grant you the gold. We never see your card, your Apple ID password, or your billing address.
Yes
Game Center
Your score submissions to our leaderboards are handled entirely by Apple under your Game Center identity. We don't store your Game Center player ID.
Apple
Diagnostics
We do not auto-collect any. The only diagnostic info we ever receive is what you choose to type or paste into a "Send Feedback" email — typically iOS version, device model, and app version, included by you, in a message you compose.
Opt-in only

03How we use what we collect

Everything we collect is used only for app functionality — making the game work. Specifically:

  • Save your progress so it follows you across devices and reinstalls.
  • Show your name, avatar, and score on leaderboards and on your friends' lists.
  • Let people add you using your friend code.
  • Process in-app purchases via Apple and credit the right amount of gold.
  • Reply to support emails you send us.

The current build does not use your data for analytics, profiling, modeling, recommendation systems, or any third-party purpose. Any future change to this will be reflected in an updated policy version.

04What's not in the current build

For clarity, here's what's not in the app today:

  • No location data (precise or approximate).
  • No access to contacts, calendar, photos library, microphone, camera, or health data.
  • No third-party analytics — no Firebase Analytics, no Crashlytics, no Cloud Messaging. Only Firebase Auth and Firestore.
  • No remote push. The daily streak reminder is a 100% on-device local notification scheduled by your phone — nothing goes to a server.
  • No browsing history or device fingerprinting.
  • We do not sell your personal information.

If any of the above changes in a future build, the policy version at the top of this page will bump and the in-app notice on launch will surface the change before it takes effect.

05Who we share data with

Three parties touch your data, all as service providers acting on our behalf:

Google (Firebase)

Firebase Authentication and Firestore store your account and gameplay data on Google Cloud infrastructure. Google processes this data on our behalf under their Firebase privacy terms.

Apple

Apple handles Sign in with Apple, Game Center leaderboards, and StoreKit purchases. They operate under Apple's privacy policy.

Other friends

If you add another player as a friend, your display name, avatar, and public score totals become visible to them. That's the point of having friends in a game.

We do not share data with anyone else, and we do not sell or rent personal information.

06Purchases

The game offers optional coin packs as in-app purchases. These are processed entirely by Apple via StoreKit. We receive a transaction receipt — enough to verify the purchase and grant the matching gold balance — but never your payment details, card number, or Apple ID password.

Refund requests are handled by Apple at reportaproblem.apple.com.

07Children

Blox Blast Rush is rated 4+ and is suitable for all ages. We do not knowingly collect personal information from children under 13 (or the equivalent age in your jurisdiction). We do not require an account to play, and the data we do store under an anonymous user ID is not personally identifying. If you believe a child has provided us with information you'd like removed, email us and we'll delete it.

08Your rights

Depending on where you live (GDPR in the EU/UK, CCPA in California, and similar laws elsewhere), you have the right to:

  • Access a copy of the data we hold about you.
  • Correct data that's wrong (most of this you can do yourself — change your display name or avatar in the app).
  • Delete your account and all associated data.
  • Object to or restrict certain processing.
  • Port your data to another service.

To exercise any of these rights, email robbi@bloxblastrush.com from the address linked to your account (or, for anonymous accounts, include your friend code). We respond within 30 days.

09Retention & deletion

We keep your data for as long as your account is active. To delete your account:

  • In the app: Settings → Account → Delete account. Available to everyone — anonymous players and signed-in players alike.
  • By email: send a deletion request to robbi@bloxblastrush.com with your friend code.

Deletion removes your Firestore players/{uid} document, your friend-code lookup entry, and your friendship links. Game Center scores are governed by Apple and can be removed via your Game Center settings.

10Security

Your data is stored in Firestore with security rules that prevent other players from reading or modifying your private fields. Public fields (display name, avatar, friend code, public score totals) are readable by anyone with your friend code so that "add a friend" actually works. Data is encrypted in transit (HTTPS) and at rest (Google Cloud).

No system is perfectly secure. If we ever discover a breach affecting your data, we'll notify you and the relevant authorities as required by law.

11Changes to this policy

If we change anything material, we'll bump the version number at the top of this page and surface a notice in the app the next time you launch it. Continued use after a change means you accept the updated policy. Older versions are kept on request.

12Contact

Questions, deletion requests, or anything else, email:

robbi@bloxblastrush.com

Blox Blast Rush is operated by an independent developer. There is no parent company, no investors, no data brokers in the loop.