Privacy Policy

Blockasaurus

Effective date: May 6, 2026 · Last updated: May 6, 2026

This Privacy Policy explains how Blockasaurus ("Blockasaurus", "we", "us", "our") collects, uses, shares, and protects information when you use our mobile games and the blockasaurus.com website (together, the "Services"). It applies to all current and future Blockasaurus games, including Snow Raiders, our current release on the Apple App Store (bundle ID com.Blockasaurus.SnowRaiders).

We are a one-person indie studio. The principles below reflect how we actually build our games: we collect the minimum we need to ship a working game, keep the lights on, and improve the experience. We do not run our own servers, we do not maintain user accounts, and we do not sell your information.

1. Information we collect

What we do collect

When you use our Services, the following categories of information may be collected automatically by us or by the third-party SDKs listed in Section 4:

• Device and technical data. Device model, operating system version, app version, language, country, time zone, screen resolution, graphics quality setting, and crash diagnostics.
• App-assigned identifiers. The Identifier for Vendors (IDFV) on iOS and the Android ID on Android. These identify an installation of the app on a device, not you personally, and reset if you uninstall and reinstall.
• Advertising identifiers. The Identifier for Advertisers (IDFA) on iOS and the Google Advertising ID (GAID) on Android. These are only used if you have granted the relevant permissions on your device. See Section 7.
• Gameplay events. Events such as starting a level, completing or failing a level, equipping a hat, purchasing an upgrade, completing a quest, watching a rewarded ad, completing the first-time user tutorial, and changing graphics quality. Each event includes contextual fields such as level number, level name, run duration, distance, and lifetime number of runs.
• Aggregate progression data. Lifetime run count and graphics quality stored as user properties for analytics segmentation.
• Purchase metadata. Product identifier (for example, com.Blockasaurus.SnowRaiders.gems.medium), localized price, and currency code for each in-app purchase. The actual payment is processed by Apple or Google; we never see your card number.
• Advertising revenue data. When the Google AdMob SDK reports the value of an ad impression, that value (in micros) and currency are recorded so Firebase can calculate lifetime revenue.
• Crash reports. Stack traces, breadcrumb logs, and device state captured at the moment of a crash, used to find and fix bugs.

What we do not collect

Our games do not ask for, and we do not receive, any of the following:

• Your name, email address, phone number, or postal address
• Your contacts, photos, microphone, or camera
• Your precise (GPS) location
• Your health, fitness, or biometric data
• Any account login credentials or social-network identity
• Payment card details — these are handled entirely by Apple and Google

Our games do not require an account. Your progress is stored on your device.

2. How we use the information

We use the information described above only for the following purposes:

• Operate, maintain, and improve our games and website
• Diagnose crashes and fix bugs (see Section 4 — Crashlytics)
• Analyze how players engage with our games so we can balance levels, identify drop-off points, and prioritize fixes
• Calculate lifetime revenue from in-app purchases and ad impressions, so we can understand whether our games are sustainable
• Serve relevant advertisements through Google AdMob (subject to your consent on iOS and in the EEA, UK, and Switzerland)
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with our legal obligations

3. Legal bases for processing (EEA, UK, Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:

• Consent for personalized advertising, advertising identifiers, and analytics events. You provide this through Google's UMP consent form on first launch, and you can change your mind at any time via Settings → Privacy Options inside the game.
• Legitimate interests for crash reporting, security, and fraud prevention. Crash reports do not contain content that identifies you and are essential to keeping the game stable.
• Performance of a contract for processing in-app purchases.
• Legal obligation where the law requires us to retain or disclose data.

4. Third-party SDKs and service providers

We rely on the following third parties to provide pieces of functionality. Each operates under its own privacy policy, and you should review the ones that matter to you. We do not control how these third parties process your data once it leaves our app.

Google Firebase Analytics

Used to measure aggregate gameplay behavior, balance levels, and calculate lifetime revenue. Receives the gameplay events listed in Section 1, plus the IDFV/Android ID and (with consent) the IDFA/GAID. Analytics collection is automatically disabled in our app if you decline tracking on iOS or decline analytics consent in the EEA.
Firebase privacy and security · Google privacy policy

Google Firebase Crashlytics

Used to capture crash reports so we can fix bugs. Crash reports include a stack trace, recent breadcrumb logs (level state, FTUE step), and device state. They do not include the contents of your saved progress, photos, or any data you have entered. Crashlytics is enabled regardless of your tracking choice because we treat crash diagnostics as a legitimate interest essential to app stability. If you object to this, contact us and we will work with you on an alternative.
Firebase privacy and security

Google AdMob

Used to serve rewarded video ads (for example, "Watch ad for triple coins" at the end of a run, "Watch ad for a free gem" in the shop) and occasional interstitial ads. AdMob may use the IDFA/GAID to serve personalized ads. If you decline tracking on iOS, or decline personalized ads via the EEA consent form, AdMob serves contextual (non-personalized) ads instead. The "No Ads" in-app purchase removes banner and interstitial ads permanently; rewarded ads remain available as an opt-in reward.
How Google uses information from sites or apps that use our services · AdMob and AdSense personalized vs. non-personalized ads

Google User Messaging Platform (UMP)

Used to display the GDPR consent form to players in the EEA, UK, and Switzerland on first launch and on demand from the in-game Privacy Options screen. UMP determines your region from your IP address.
About the IAB Europe Transparency & Consent Framework

Google Firebase Remote Config

Used to remotely tune game configuration values (for example, enabling or disabling interstitial ads). It does not transmit information about you to us.

Apple StoreKit (iOS) and Apple App Tracking Transparency

Apple processes all in-app purchases on iOS. We receive only the product identifier, price, and currency for each successful purchase — we never see your Apple ID or payment card. App Tracking Transparency is the system-level prompt that decides whether the IDFA is available to our app and SDKs.
Apple Privacy Policy

Apple Game Center

Used to host per-level smash-score leaderboards, a global "total coins" leaderboard, a "levels beaten" leaderboard, and achievements. Authentication is handled by Apple using your Apple ID. We see only anonymous Game Center player handles for the purpose of submitting and displaying leaderboards.

Unity Purchasing

The Unity Purchasing SDK wraps Apple StoreKit and Google Play Billing and exposes a unified API to our app. It does not send purchase data to Unity Technologies in identifiable form.

5. How we share information

We share information only as follows:

• With the service providers listed in Section 4, and only as necessary for them to perform the function they provide.
• With platform providers (Apple, Google) as required for app distribution, in-app purchases, and platform-level services such as Game Center.
• To comply with the law, respond to lawful requests and legal process, or protect our or others' rights, property, or safety.
• In connection with a business change, such as a merger, acquisition, or asset sale. If that ever happens, we will update this policy and notify users in the games.

We do not sell your personal information as the term is defined under the California Consumer Privacy Act (CCPA) or analogous laws.

6. International data transfers

Blockasaurus is based in British Columbia, Canada. Most of our service providers are based in the United States. By using our Services, you understand that your information may be transferred to, stored, and processed in Canada, the United States, and other countries where our service providers operate, under appropriate safeguards required by applicable law (such as standard contractual clauses for transfers out of the EEA).

7. Your choices

iOS App Tracking Transparency

The first time you launch one of our games on iOS 14.5 or later, the system shows Apple's tracking prompt. If you decline, the IDFA is not shared with our app and personalized ads are not served.

EEA, UK, and Switzerland — GDPR consent form

The first time you launch one of our games in the EEA, UK, or Switzerland, Google's UMP consent form appears. You can grant or decline consent for personalized advertising. You can re-open this form at any time by going to Settings → Privacy Options inside the game.

Device-level controls

• iOS: Settings → Privacy & Security → Apple Advertising → toggle Personalized Ads, or Settings → Privacy & Security → Tracking → toggle per-app permissions.
• Android: Settings → Google → Ads → Reset advertising ID, or Delete advertising ID.

Restore purchases

To move non-consumable purchases (such as "No Ads") to a new device, sign in with the same Apple ID and tap Restore Purchases in the in-game Shop.

Uninstall

Uninstalling the game from your device stops all future data collection by us and our SDKs from that installation.

8. Your rights

EEA, UK, and Switzerland (GDPR / UK GDPR)

You have the right to: access the information we hold about you; request correction or deletion; restrict or object to processing; receive your information in a portable format; and withdraw consent at any time. To exercise any of these rights, email support@blockasaurus.com. Because we do not maintain user accounts and do not collect personal identifiers, we may need to ask for the IDFV/Android ID associated with your installation to find any data tied to it. You also have the right to lodge a complaint with your local data protection authority.

California (CCPA / CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of "sales" or "sharing" of personal information. We do not sell personal information. To exercise your rights, email support@blockasaurus.com. We will not discriminate against you for exercising your rights.

Other jurisdictions

Where applicable law gives you additional rights — for example, under Canada's PIPEDA, Brazil's LGPD, or other privacy regimes — we will honor those rights. Email support@blockasaurus.com to make a request.

9. Children's privacy

Blockasaurus games are not directed to children under 13. We do not knowingly collect personal information from children under 13. Snow Raiders is rated 4+ on the App Store for mild cartoon action; the rating reflects the absence of adult content, not a target audience. Children's apps under Apple's "Made for Kids" or Google Play's "Designed for Families" categories are not part of our current catalog.

If you are a parent or guardian and you believe a child under 13 has provided us with information, please contact us at support@blockasaurus.com and we will delete it. We also encourage parents to use device-level controls ( Apple Screen Time, Google Family Link ) to manage in-app purchases and ads.

10. Data retention

We retain analytics and crash diagnostic data for up to 14 months under Firebase's default retention setting, after which it is automatically deleted by Google. Aggregated, non-identifiable data (such as a count of how many players reached a level) may be retained longer because it cannot be traced back to any individual.

Purchase receipts and Game Center data are retained by Apple or Google according to their own policies, not ours.

11. Security

We rely on the platform-level security of Apple, Google, and Firebase for data we transmit and store. No method of transmission or storage is perfectly secure, but we choose providers with strong security practices and limit the amount of data we collect to what we actually need.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page reflects the most recent change. If we make a material change, we will highlight it in-game on the next launch and, where required, ask for renewed consent.

13. Contact us

Blockasaurus
British Columbia, Canada
support@blockasaurus.com

For privacy-specific requests, please put "Privacy" in the subject line so we can prioritize.