Privacy Policy

Last updated: June 14, 2026

This Privacy Policy explains how Blitzball (“Blitzball”, “we”, “us”), operator of blitzball.io, collects, uses, and protects information when you play our browser game and use our services (the “Service”). By using the Service you agree to this Policy.

1. Information we collect

Account information

If you create an account, we collect your email address, a display name, and a hashed password (for email accounts).
If you sign in with Google, we receive your Google account identifier and basic profile (name, email) from Google. We never receive your Google password.

Gameplay information

Game statistics (matches, kills, deflects, speed records, in-game credits and purchases) tied to your account or, for guests, to a randomly generated guest identifier.
In-game chat and (if you enable it) voice communication.

Technical information

Your IP address and an approximate, region-level geolocation derived from it (used for matchmaking, server routing, abuse prevention, and aggregate analytics).
Device/browser information your browser sends automatically.
Data stored locally in your browser (localStorage): your session token, a guest identifier, and your game settings. This stays on your device.

2. How we use information

To run the game: accounts, matchmaking, leaderboards, stats, the in-game economy, chat and voice.
To keep the Service safe: rate limiting, anti-cheat, moderation, and ban enforcement.
To improve the Service through aggregate, non-identifying analytics.
To display advertising (see below), where applicable and with consent where required.

3. Cookies and similar technologies

We use browser storage and cookies for two purposes:

Essential:sign-in/session, your settings, and security. The Service does not work without these.
Advertising:our advertising partners (see below) may set cookies to deliver and measure ads. Where required by law, these are only used with your consent.

4. Advertising and Google AdSense

We use Google AdSense (including H5 Games Ads) to show ads, such as optional rewarded ads you can watch in exchange for in-game credits.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Service and/or other sites on the Internet.
You may opt out of personalized advertising by visiting Google Ads Settings.
You can opt out of third-party vendors’ use of cookies for personalized advertising at aboutads.info/choices and (in the EU) youronlinechoices.eu.

For more information on how Google uses data when you use our partners’ sites, see Google’s policy.

5. Your consent choices (EEA, UK, and Switzerland)

If you are in the EEA, UK, or Switzerland, we ask for your consent before personalized advertising cookies are used, through a Google-certified consent message. You can change or withdraw your consent at any time:

Consent options load with our advertising partner. If you do not see options, advertising may not be enabled in your region yet.

6. Legal bases (GDPR)

Contract:to provide the game and your account.
Legitimate interests:security, abuse prevention, and improving the Service.
Consent:personalized advertising and any optional features that ask for it. You may withdraw consent at any time.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing. To exercise these rights, contact us (below). You can also delete your account in-game, which removes your account data.

8. California privacy rights (CCPA/CPRA)

We do not sell your personal information for money. Some sharing of advertising identifiers for personalized ads may be considered a “sale” or “sharing” under California law. California residents may opt out using the “Manage ad & cookie consent” control above and the ad-vendor opt-out links in Section 4, and have the right to know, delete, and not be discriminated against for exercising these rights.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it. Advertising shown is configured as non-personalized for users we cannot confirm are of age where required.

10. Data retention

We keep account and gameplay data for as long as your account is active. Guest tallies and rolling activity records expire automatically. Moderation and audit records may be kept longer where needed for safety and legal compliance.

11. Security and international transfers

We use reasonable technical and organizational measures to protect your data. The Service runs on servers that may be located in the United States and the European Union; using the Service may involve transferring your information across borders.

12. Third-party services

Google:sign-in (OAuth) and advertising (AdSense).
Cloudflare:network relays for proximity voice (when enabled), to protect player IP privacy.

These providers process data under their own privacy policies.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

14. Contact

Questions or requests, including privacy and data requests: support@blitzball.io.