Privacy Policy
Last updated: October 4, 2026
This policy explains how Yodsoft ("we", "us") handles information for the Blokfall mobile game and blokfall.com (the "Service").
Information we process
- Account. The first time you open the game, Google Firebase Authentication creates an anonymous account for you: a random ID, with no name, email or password. On the web or in the Android app you can choose to sign in with Google; Google then shares your Google account ID, name and email address with Firebase to sign you in, and the same account then opens in both. On Android, if you use Google Play Games, Blokfall signs in with it automatically. Google then shares your Play Games player ID and gamer name with Firebase so your progress can follow you to another Android phone. We use these only to recognize your account and never show them to other players.
- Progress. Under that ID we keep your trophies, the arenas you reached, a hidden skill rating used to balance matches, your wins and losses against people, your match scores with the counts they came from (blocks cleared, chains, time), your nickname and champion as shown on the leaderboard, and whether you chose to hide from it.
- Leaderboard. The leaderboard is public: it shows your nickname (or, if it contains offensive words, your champion and a number instead), your champion and your score. You can hide yourself in Settings, under Account.
- Purchases. Emote packs are bought through Google Play on Android, or through RevenueCat and Stripe on the web. We receive which packs you own and purchase identifiers, never your payment details.
- Nickname. The name you choose is sent to our game server for matchmaking, shown to your opponent and on the leaderboard. Use a nickname rather than your real name or other personal information.
- Gameplay. The server processes your moves, board state, and match events to run the game and synchronize both players.
- Room invites. A room code exists only while its host is waiting and is used only to pair the two players. If you install the app from an invite link, Google Play passes that invite to the app when it first opens, and it is used only to open the room.
- Quick chat. Emotes are preset phrases. When you send one, the server passes only its code to your opponent's app, which shows it in their language. There is no free text, and emotes are not stored.
- Settings on your device. The app remembers your last nickname, champion, language, sound settings, emote shortcuts and whether to show your opponent's emotes on your device so you do not have to enter them again. They are not sent anywhere else.
- Connection information and logs. Our servers and infrastructure providers process IP addresses, request and connection metadata, timestamps, and error or gameplay event logs to deliver, secure, and troubleshoot the Service.
- Messages you send us. If you contact us by email, we receive your email address and the information you include so we can respond.
The app does not ask for access to your contacts, photos, microphone, or precise location. It requires internet access for online play. We do not use advertising or analytics SDKs, and this website does not load third-party fonts or analytics scripts. The web game loads its code from blokfall.com; to keep your account signed in it contacts Google's Firebase Authentication servers.
How we use information
We use this information to find opponents, run matches, show nicknames, keep your trophies, scores and purchases, show the leaderboard, maintain service reliability and security, investigate problems, and respond to support requests. We do not sell personal information or use it for advertising or profiling.
Storage and retention
Your account, progress, scores and owned packs are stored in Google Cloud Firestore, in Google's São Paulo region, and kept until you delete your data. Active gameplay state is held in server memory while you are connected, queued, or playing; we do not keep match replays.
Operational logs, which may include IP addresses, connection metadata, and gameplay events, are retained for troubleshooting and security. Their retention depends on the server and infrastructure logging configuration; this policy does not promise a fixed deletion period. Support correspondence may be retained to handle your request and related follow-up.
Who processes information
- Your opponent receives your chosen nickname, the gameplay information needed for the match, and the emotes you send.
- Other players see your leaderboard entry, unless you hide it.
- Google Firebase (Authentication and Cloud Firestore) provides your account and stores your progress.
- RevenueCat processes purchases and tells our server which packs you own.
- Google Play handles purchases in the Android app, and Stripe handles purchases on the web.
- Oracle Cloud Infrastructure hosts our game server and website infrastructure.
- Cloudflare provides domain, network delivery, and security services for blokfall.com. It may process IP addresses and request metadata when handling traffic.
- Support and legal requests. Our email provider processes support correspondence. We may disclose information when required by law or necessary to protect the Service and its users.
Infrastructure providers may process information in countries other than your own.
Security
The production website uses HTTPS, and the production game connects using encrypted secure WebSockets (WSS). We use these protections to secure information in transit, but no transmission or storage method is completely secure.
Your choices and requests
You can choose a nickname that does not identify you, hide yourself from the leaderboard, cancel matchmaking, or close the game to stop sending gameplay data.
To delete your data, open Settings, then Account, then Delete my data. This erases your account, on every device signed in to it, along with your trophies, arenas, scores and leaderboard entries, and the purchase history RevenueCat keeps for you. Google Play and Stripe keep their own records of purchases; packs bought on Android can be restored to a new account with Restore purchases; packs bought on the web cannot. You can also ask us by email to delete your data.
Depending on your location, you may have rights to access, correct, or delete personal information. Contact us to make a request; we will assess it in light of the information we hold and applicable requirements.
Children's privacy
We do not ask players for their age or knowingly request personal information from children. Avoid putting personal information in a nickname. Nicknames with offensive words are replaced on the public leaderboard, and any player can hide from it. If you believe a child has shared personal information through the Service, contact us so we can investigate and address it.
Changes to this policy
We will update this page and its date when our practices change, including if advertising or analytics are introduced.
Contact
For privacy questions or requests, contact Yodsoft at contato@yodsoft.com.