Privacy Policy

Game progress and purchases

Your saved round, best scores, settings and owned skins are stored on your device. Purchases and Restore Purchases use Apple's StoreKit. Pro removes ads, unlocks every block and board skin, and provides one ad-free revive per round. In version 2.0.0 the Customizer is included. We do not receive your payment-card details.

Version 2.0.0 needs no login or email address. Its online leaderboards create a device-bound guest account after the first finished round unless you turn Leaderboards off in Settings > Privacy.

Earlier versions: Game Center

Earlier versions used Apple's Game Center for online scores when the player was signed in. Game Center is an Apple service; scores and the associated Game Center identifier were sent to it. Version 2.0.0 does not use Game Center. Apple's handling is described in Apple's Privacy Policy.

Online leaderboards (version 2.0.0 and later)

Gridblitz 2.0.0 has online leaderboards for Original and Blitz, all-time and weekly. Leaderboards are on by default. When you finish your first round, the app creates a guest account for this installation with a random identifier and a generated player name. You can change the name in the app. Your player name and best scores are public; do not put personal information in your player name. No email, password or sign-in is required.

We store the random account identifier, a hash of its secret key, your player name, best scores by mode and period, timestamps, and the identifiers and fingerprints of submitted rounds. The secret itself stays in your iPhone's Keychain. The app sends placement history to check a score; move histories are processed and not stored in the database.

In version 2.2.0, you choose a player name when you join the leaderboards. Each leaderboard account has a friend code. Anyone you give your code to, or who sees you on a leaderboard, can open your profile and add you to their friends list. They can see your player name and your scores and places on each board. Adding a friend is one way: the player you add is not notified, and there are no messages. You can reset your friend code and remove friends. The service stores the friend code and your friends list; it does not access your phone's address book.

Names refused by the name rules are kept for up to 90 days for review. Deleting your leaderboard account or turning Leaderboards off also deletes your friend code, friends list and any such name-review record.

Accounts and all-time scores stay until you delete the account. Daily cleanup removes round receipts after 90 days and old weekly score rows after the eight-week retention window. For abuse prevention, the database keeps salted daily IP digests and request counters; daily cleanup removes entries older than two days, normally within three days. Raw IP addresses are not stored in that database. The hosting provider still processes network metadata to deliver the service.

The service runs on Cloudflare Workers with an EU-jurisdiction D1 database. This describes the database jurisdiction; it does not mean all Cloudflare network processing happens only in the EU. Worker error logging records a route and error event, not account secrets or request bodies. Operational request logs are sampled.

Turn Leaderboards off in Settings > Privacy > Leaderboards, or choose Delete leaderboard account on the Leaderboards screen, to delete the account, scores and round receipts from the server. Local scores, skins and game progress stay on your phone. Deletion needs a network connection; if it fails, the app reports the failure so you can retry. Rounds finished while Leaderboards is off remain local.

Hide player stores a list on this device so the hidden player's rows do not appear here. It is not sent to the leaderboard service. Report name copies the player's name, board, date and public player identifier to your clipboard and opens support. It does not automatically send a report. If you choose to contact support, you send that report and any contact information you include through the contact method on the support page.

Advertising (Google AdMob)

Google AdMob provides the app's ads. In version 1.3.0 and later, free users may see a banner on the home screen and occasional full-screen ads between completed rounds. Ads do not interrupt active gameplay. Players can also choose rewarded ads for one revive per run and selected cosmetic unlocks. Earlier versions only offer the optional rewarded formats. Gridblitz Pro removes all these ads for new and existing owners.

To serve, measure and improve ads, Google may process IP addresses and the approximate/general location derived from them, device identifiers including IDFA when permitted, advertising and interaction data, crash logs and performance diagnostics. With your permission, data may be used for personalized advertising. Google describes these data categories in its iOS SDK data disclosure.

Google's handling of this data is described in How Google uses information from sites or apps that use its services and Google's Privacy Policy.

Analytics & diagnostics

Version 2.0.0 does not include GameAnalytics or send gameplay or purchase events to it. Google's advertising and consent SDKs may still process their own diagnostic, interaction and advertising data as described above.

Earlier versions: the following GameAnalytics explanation applies to versions before 2.0.0. The separate analytics-sharing control is available from version 1.2.3; older versions lack that separate control.

Sharing is off by default. You can enable “Share gameplay analytics” in the app's Settings to help us understand play and purchases. If enabled, the app sends mode choices, scores, revive and cosmetic events, paywall views and purchase outcomes to GameAnalytics. Its SDK also processes session, device and diagnostic information. Events are linked to a persistent device identifier (IDFV, used as the SDK's user identifier), and may include the advertising identifier (IDFA) when iOS tracking permission allows it. This is pseudonymous data, not anonymous data.

Turning sharing off stops new analytics event submission and local event caching, including SDK session and diagnostic events. Requests already in flight may finish, and SDK configuration requests may continue until the app is restarted. On the next launch, GameAnalytics is not initialized while sharing remains off. Turning sharing off does not delete previously received data; contact us for a data request.

Advertising and tracking choices

Google's consent flow runs before the ad SDK starts. Where required, it asks for your ad privacy choices; you can revisit these through “Ad privacy options” in the app's Settings. In earlier versions, analytics sharing is a separate choice and is not enabled by agreeing to ads.

iOS also asks for App Tracking Transparency permission before the advertising identifier is used. Declining tracking does not limit gameplay. Optional ad rewards remain available when Google can serve an eligible ad; availability can depend on consent choices and network fill. You can change tracking permission in Settings → Privacy & Security → Tracking.

Children

Gridblitz is not directed to children under 13 and does not knowingly collect personal information from children. This policy covers leaderboards, support correspondence, advertising and analytics in earlier versions.

Support messages and name reports

If you contact support, we use your message and the contact information you provide to answer your request or handle your name report. We keep the correspondence while the issue is open and delete it from our active support mailbox within 90 days after it is resolved. If specific information must be retained to handle an ongoing abuse investigation or a legal obligation, we keep only what is necessary for that purpose and remove it when it is no longer needed. You can request deletion through the contact details on our support page. We respond without undue delay, normally within one month.

Services and sharing

We do not sell your personal data. In version 2.0.0, Apple provides purchases, Google provides advertising and consent, and Cloudflare hosts the online leaderboards. Earlier versions also used Game Center and optional GameAnalytics. These services handle data for the purposes described above. If you contact support, your chosen email provider and our support-mail service also handle your correspondence.

Your choices

• In version 2.0.0, turn Leaderboards off in Settings > Privacy, or use Delete leaderboard account, to delete the guest account and its scores. A network connection is required.
• Request deletion of support correspondence through the published contact details below.
• Decline tracking at the prompt, or change it in iOS Settings.
• Review Ad privacy options in the app's Settings when available.
• In earlier versions, change gameplay analytics sharing in Settings. Restart after turning it off to fully stop the GameAnalytics SDK; this does not delete previously received data.
• Deleting the app removes local game data. It does not delete data held by Apple, Google, Cloudflare or GameAnalytics. Use the account-deletion controls or contact us for a data request.

Changes

If this policy changes, we will update the date above and post the new version at this URL.

Contact

Questions about this policy? Email hej@valorstudio.se.