Last updated 14 September 2026
BlitzBotz is a general-audience game. It is not directed to children, and we do not knowingly collect information from children under 13. If you believe a child has created an account, contact us and we will delete it.
| What | Why |
|---|---|
A provider subject identifier (sub) from Google or Apple |
It is your account. It is the only thing we take from sign-in, and it is how we recognise you next time. |
| The call sign you choose | Shown to you, and to opponents in a match. |
| A session cookie | Keeps you signed in on this device. |
| Game state — squads, chassis collection, credits, rating, Boltz, match history | The game is server-authoritative: this is the game itself, not a record kept about you on the side. |
| Error reports — the message, script, line, column, stack trace, and the match involved | Sent by the app to our own server when something breaks, so it can be fixed. |
| Your email address, when you sign in with Google | Taken only from Google's verified sign-in token — never typed into our pages — so we can find your account when you contact us for support. Apple sign-in does not share an email with us at all. |
| Play-session times — when your connection to a match opens and closes | Recorded by our own server to understand how long play sessions last, so we can make the game better. Never collected by a third-party SDK. |
Performance diagnostics — for each match: frame timing, input and
loading times, connection interruptions, the device's thermal state, the
device model (such as iPhone14,6), operating system version,
whether you were on Wi-Fi or cellular, and the app build |
Sent by the app to our own server after a match, so we can find what makes the game stutter or load slowly. Stored with the match it came from but not with your account; never your device's name or any device identifier. It never affects a match result, rating or reward. |
We never see your password. You have no password with us at
all — sign-in happens entirely with Google or Apple. Google sign-in requests
the openid and email scopes and nothing else, so we
receive your account identifier and email address but no name, photo or other
profile information. Apple sign-in uses an empty scope: it shares only the
account identifier, never an email.
We do not use advertising SDKs, a mobile measurement partner, or third-party product-analytics SDKs. Nothing in the game is designed to follow you across other apps or websites.
The provider subject identifier is a persistent identifier, and we treat it as personal data. It is stored in our database, it is how your progress is attached to you, and it is deleted with your account. Your email address and play-session times are tied to your account the same way and are deleted with it; session times are analytics data, and we may delete them earlier than that.
Your data is held in our own database, hosted on Railway, and processed by Google or Apple only at the moment you sign in.
Server error monitoring may forward diagnostic information — error messages, stack traces and request context — to Sentry when it is enabled for an environment. That is a diagnostic channel, not an analytics or advertising one.
We do not sell your data, and we do not share it for advertising.
| What | Kept |
|---|---|
| Account and progress | Until you ask us to delete it. Alpha progress may be reset at any time while the game is in private alpha. |
| Match records | Indefinitely. They are how we study and balance the game, and they are match-local: they identify seats in a match, not you. |
| Derived match analytics | Retained by default; they can be regenerated from match records and are the first thing dropped under storage pressure. |
| Error reports | Kept only as long as needed to diagnose the fault. |
| Performance diagnostics | 90 days, then deleted. |
You can ask us to delete your account and the progress attached to it. Match records are deidentified and may be retained as research data after the account link is removed; the mechanics of separating that link are still being built, and until they ship we will handle deletion requests by hand.
You can stop error reports and performance diagnostics at any time by not using the game.
If this policy changes in a way that affects what we collect, we will update the date at the top and say so on the sign-in screen.
Questions, deletion requests, or anything else: eric@herbrandson.com.