Legal · Document 01

Privacy Policy

The short version: we collect only what the game needs to work, and there are no ads, no tracking and no third-party analytics.

Effective: October 31, 2026 Last updated: October 31, 2026 Version: 2.0 (Blox Blast Rush 1.4 and later)

01The TL;DR

Blox Blast Rush is a block puzzle game you can play on your own, against the computer, or online in 1 vs 1 matches against friends and other players, with weekly leagues and the Blox League ranking. To make the online parts work, we store a few things in a hosted database at Google (Firebase): your scores and stats, your chosen display name, your friend code, an optional avatar, your matches and league standings, and, if you allow notifications, a token so we can send you match and league invites.

i

The current build has no ads, no third-party analytics, no tracking, no location access, and no access to your contacts, photo library, microphone or camera. If you pick an avatar, Apple's photo picker hands the app only the one photo you choose.

02What we collect

The table below is the complete list. Everything maps directly to what you see in the App Store privacy nutrition label.

Category
What & why
Linked to you?
Identifiers
An anonymous user ID made automatically on first launch (a random string, no personal details), and a 6-character friend code so people can add you.
Yes
User content
Your display name, an optional small avatar (picked with Apple's photo picker), and account timestamps. Your display name is one you choose: the game doesn't use your real name from Apple or Google for it.
Yes
Contact info
Only if you sign in with Apple, Google or email: the email address tied to that sign-in. If you sign up with email, Firebase Authentication looks after your password and we can't read it. We never email you marketing.
Yes
Gameplay data
Best scores and stats for each mode (Normal, Cube Monster, Rush, Vs Computer, online), games played, lines cleared, gold balance, level, XP and rank, Blox League points, login streak, your top-10 games, power-up inventory, owned and equipped cosmetics (blocks, boards, backgrounds and the sounds you use), and claimed achievements and rewards. Settings such as sound, music and haptics stay on your device.
Yes
Online matches
When you play 1 vs 1 online: the match itself (both players' user IDs and display names, the moves, scores and result) so both phones can play it and it shows in your match history. While you look for an opponent, a short-lived queue entry that other players can see, with your user ID, display name, block skin and league points.
Yes
Leagues
If you create or join a weekly league: its invite code, members' user IDs and display names, and weekly scores.
Yes
Inbox messages
Notices from friends and leagues in your in-app inbox (league invites, match invites, "beat your score" notes): who sent them and what about. There's no free-text chat.
Yes
Notifications
Only if you allow notifications. The daily streak reminder is scheduled on your device and nothing leaves it. Match and league invites arrive as push notifications; for these we store your device's push token, which only your account and our server can read.
Yes (push token)
Friendships
If you add a friend, we store the link: your user ID and theirs. Friend codes are looked up one at a time through a list that holds only the code and the user ID it belongs to.
Yes
Reports & blocks
If you report a player, we store your user ID, theirs, their display name, the reason, where it happened and anything you choose to write. Players you block are kept in a private list only you can read.
Yes
Purchases
Coin packs and sound packs are bought through Apple. For a coin pack, the app sends Apple's signed confirmation to our server, which checks it and adds the gold. We keep the transaction ID and product so a purchase can't be counted twice and the gold from a refunded pack can be taken back. Sound packs are checked on your device. We never see your card, your Apple ID password or your billing address.
Yes
App check
When the app talks to our server, Apple's DeviceCheck and Firebase App Check confirm it's the genuine app. They use a short-lived device token that we don't store with your profile or use to track you.
No
Game Center
Your leaderboard scores are handled by Apple under your Game Center identity. We don't store your Game Center player ID.
Apple
Diagnostics
We don't collect crash reports or analytics. Our server keeps ordinary technical logs, which can include your user ID, for troubleshooting. Beyond that, the only diagnostic details we get are what you choose to include in a "Send feedback" email, typically iOS version, device model and app version.
Logs & opt-in only

03How we use what we collect

Everything we collect is used only for app functionality, which means making the game work and keeping it fair and safe. Specifically:

  • Save your progress so it follows you across devices and reinstalls.
  • Show your name, avatar, scores and rank on leaderboards, in friends' lists, in leagues and to your opponent in a match.
  • Find you an opponent, run online matches between your phone and theirs, and work out league points on our server.
  • Let people add you with your friend code, and deliver friend, league and match invites in your inbox and, if you allow it, as push notifications.
  • Process in-app purchases through Apple and give you the gold or sounds you bought.
  • Check new avatars automatically, and act on reports of offensive names, photos or behaviour.
  • Reply to support emails you send us.

The current build does not use your data for analytics, advertising, profiling, recommendation systems, or any third-party purpose. Any change to this will come with an updated policy version.

04What's not in the current build

For clarity, here's what's not in the app today:

  • No location data, precise or approximate.
  • No access to contacts, calendar, photo library, microphone, camera or health data. An avatar comes through Apple's photo picker, which gives the app only the one photo you pick.
  • No ads, no third-party analytics and no Crashlytics.
  • No chat between players: other players see your display name, avatar, scores and your moves in a match, and there are no messages to write.
  • No browsing history or device fingerprinting.
  • We do not sell your personal information.

If any of this changes in a future build, the policy version at the top of this page will go up before the change takes effect.

05Who we share data with

Three groups touch your data. The first two are service providers acting on our behalf.

Google (Firebase and Google Cloud)

Your account and game data are stored with Firebase Authentication and Cloud Firestore on Google Cloud. Our server code runs on Cloud Functions, push notifications go through Firebase Cloud Messaging, and Firebase App Check confirms the app is genuine. When you set a new avatar, it's sent to Google Cloud Vision for an automatic check for adult or violent content. If you sign in with Google, Google Sign-In handles it. Google processes this data on our behalf under Firebase's privacy terms.

Apple

Apple handles Sign in with Apple, Game Center leaderboards, StoreKit purchases, refund notices, DeviceCheck and the delivery of push notifications, under Apple's privacy policy.

Other players

Your game profile (display name, avatar, friend code, scores, stats, rank, league points, gold and cosmetics) can be read by other signed-in players. That's how leaderboards, friends, leagues and matchmaking work. In a match, your opponent sees your name, avatar, rank and moves. Your email, push token and inbox are never shown to other players.

We do not share data with anyone else, and we do not sell or rent personal information.

06Purchases

The game offers two kinds of optional in-app purchase: coin packs (gold for the in-game shop) and sound packs (extra sounds for when a block lands and when lines clear). Apple processes every payment through StoreKit, and we never see your payment details, card number or Apple ID password.

For a coin pack, our server checks Apple's signed confirmation and adds the gold to your account. If Apple refunds a coin pack, Apple tells our server and that gold comes off your balance. Sound packs belong to your Apple ID: Restore Purchases in Settings brings them back after a reinstall or on a new device signed in with the same Apple ID.

Refund requests are handled by Apple at reportaproblem.apple.com.

07Children

We do not knowingly collect personal information from children under 13 (or the equivalent age where you live). You don't need to sign in to play, and the data stored under an anonymous user ID doesn't identify you. Online, other players see only display names, avatars, scores and moves, and there's no chat. If you believe a child has given us information you'd like removed, email us and we'll delete it. The game's age rating is shown on its App Store page.

08Your rights

Depending on where you live (GDPR in the EU and UK, CCPA in California, and similar laws elsewhere), you have the right to:

  • Access a copy of the data we hold about you.
  • Correct data that's wrong. Most of it you can change yourself, like your display name or avatar.
  • Delete your account and all associated data.
  • Object to or restrict certain processing.
  • Port your data to another service.

To use any of these rights, email robbi@bloxblastrush.com from the address linked to your account (or, for anonymous accounts, include your friend code). We reply within 30 days.

09Retention & deletion

We keep your data for as long as your account is active. To delete your account:

  • In the app: Settings → Account → Delete account. Available to everyone, anonymous and signed-in players alike.
  • By email: send a deletion request to robbi@bloxblastrush.com with your friend code.

Deleting your account removes your profile and game data, avatar, friend code, friendships, inbox messages, league memberships, push token, block list and your sign-in account.

A few records stay because other people or the game's safety depend on them: finished online matches stay in your opponents' match history with the display name and score you had then, checked-purchase records (transaction ID and product) stay so refunds can be handled and a purchase can't be credited twice, and reports filed by or about you stay while they're needed to keep the game safe.

10Security

Your data is stored behind database security rules: only you can change your own data, and only within limits the game itself keeps to. League points and match results are worked out by our server. Other signed-in players can read your game profile (see section 05), but not your email, push token or inbox. An online match can be read only by its two players. Data is encrypted in transit (HTTPS) and at rest (Google Cloud).

No system is perfectly secure. If we ever discover a breach affecting your data, we'll notify you and the relevant authorities as required by law.

11Changes to this policy

If we change anything material, we'll raise the version number and date at the top of this page and mention the change in the app's update notes on the App Store. Continued use after a change means you accept the updated policy. Older versions are available on request.

12Contact

Questions, deletion requests or anything else, email:

robbi@bloxblastrush.com

Blox Blast Rush is made by an independent developer. Your data is not sold to anyone.