# Blocade — Privacy Policy
**Last updated: 17 June 2026**
Blocade ("the app", "we", "us") is an online strategy game developed and operated by Francis Chukwuma, an individual developer ("the developer"). This policy explains what data the app collects, why, and the choices you have. By using Blocade you agree to this policy.
Contact: **[email protected]**
---
## 1. The short version
- You do **not** create an account with your name, email, or password. The app signs you in **anonymously** so you can play and keep a rating across sessions.
- We collect the minimum needed to run online matches, ranked ratings, and leaderboards.
- We do **not** sell your data, show third-party ads, or use third-party advertising trackers.
- You can **delete your account and all associated data at any time** from inside the app: **More → Settings → Delete Account**.
---
## 2. Who is responsible for your data
The data controller is the developer (Francis Chukwuma). For any privacy question or request, email **[email protected]**.
---
## 3. What we collect
We only collect what the game needs to function. We do not ask for your real name, email address, phone number, or contacts.
**a. Account identifier (anonymous).** When you first open the app we create an anonymous account managed by our authentication provider (Supabase). It is a random identifier. It is not linked to your real-world identity unless you choose to tell us who you are (for example, by emailing support).
**b. Profile and progress.** A display name (auto-generated, e.g. "Player-A1B2C3", and editable by you), your casual and ranked ratings, win/loss records, streaks, and achievement progress.
**c. Gameplay data.** For online matches: the moves made, timestamps, match results, and a move-by-move log used for live play, anti-cheat validation, timeouts, and the in-app game review/replay feature.
**d. Safety data.** If you report another player, we store the report (who reported whom, the match, and the reason) and your block list. This is used solely to keep the game safe and to act on abuse.
**e. Technical and diagnostic data.** Basic technical information needed to deliver the service and diagnose problems — for example, connection and crash/error logs. We do not use this to build an advertising profile.
We do **not** collect: precise location, your contacts, microphone or camera input, health data, financial account details, or browsing history.
---
## 4. Purchases and subscriptions
If you buy a subscription or one-time unlock inside Blocade, the purchase is processed entirely by **Apple** (App Store) or **Google** (Play Store). We never see or store your full payment-card details. We receive a confirmation that an entitlement is active so we can unlock the corresponding features. Billing, renewals, refunds, and receipts are handled by the App Store or Play Store under their terms.
---
## 5. Why we collect it (legal bases)
We process your data to:
- provide the game and online multiplayer (performance of our service to you);
- maintain fair, server-authoritative ratings and prevent cheating (legitimate interest in a fair game);
- keep the community safe by handling reports and blocks (legitimate interest in safety; legal obligation where applicable);
- diagnose and fix problems and improve the app (legitimate interest);
- comply with the law.
Where the GDPR or UK GDPR applies, these are our lawful bases. You may object to processing based on legitimate interest by contacting us.
---
## 6. Who we share it with
We use a small number of service providers ("processors") to run the app. They process data only on our instructions:
- **Supabase** — authentication, database, and realtime infrastructure (hosting our backend). Data is stored on Supabase infrastructure in the **United States**.
- **Apple** and **Google** — app distribution and, if you make a purchase, payment processing and basic crash reporting on their platforms.
We do **not** sell your personal data, and we do **not** share it with advertising networks or data brokers.
We may disclose data if required by law, to protect our rights, or to investigate fraud, abuse, or safety threats.
---
## 7. International transfers
Our backend is hosted in the United States. If you use the app from outside the United States, your data will be transferred to and processed there. Where required, we rely on appropriate safeguards (such as the processor's standard contractual clauses) for these transfers.
---
## 8. How long we keep it
- **Profile, ratings, and progress:** kept while your account exists.
- **Match logs:** retained to support replay/review, anti-cheat, and integrity of the ladder. When you delete your account, your identity is removed from these logs (your moves are anonymised).
- **Reports:** retained as long as needed to keep the service safe.
When you delete your account, your profile and personal data are erased promptly (see Section 10).
---
## 9. Your choices and rights
Depending on where you live, you have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. Because accounts are anonymous, the most reliable way to exercise these rights for your data is from the device where you are signed in. To make a request or ask a question, email **[email protected]**. You also have the right to complain to your local data protection authority.
California residents: we do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising.
---
## 10. Deleting your account
You can permanently delete your account at any time: **More → Settings → Delete Account**. This erases your profile, ratings, stats, achievements, and match history from our active systems, and anonymises your moves in any shared match logs. Deletion is immediate and cannot be undone. After deletion the app creates a new anonymous account so you can keep playing as a fresh player.
If you cannot access the app, email **[email protected]** and we will help you delete your data.
---
## 11. Children
Blocade is a general-audience game and is **not directed to children under 13** (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children under that age. If you believe a child has provided us data, contact us and we will delete it.
---
## 12. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) and server-side access controls that restrict each player to their own data. No system is perfectly secure, but we work to protect your information.
---
## 13. Changes to this policy
If we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Continued use after changes means you accept the updated policy.
---
## 14. Contact
Questions or requests: **[email protected]**