Basics
📖What Do These Terms Mean?
- Application
- Block Blast Quest, the game software we provide.
- Company
- The entity operating Block Blast Quest and deciding how data is processed.
- Personal Data
- Any information relating to an identified or identifiable individual.
- Usage Data
- Data generated automatically when you interact with the app (e.g., session length, screen taps).
- Device
- Any smartphone, tablet, or computer used to access the service.
- Service Provider
- Third parties engaged to process data on our behalf under written agreements.
Collection
🗂What Information Do We Collect?
We collect two categories of data:
Automatically Gathered
- IP address, device model, OS version
- Ad identifiers (GAID / IDFA)
- Session timestamps, feature usage, gameplay events
- Crash reports and diagnostic telemetry
- Network type, connection status
Provided by You
- PayPal email and name (for reward withdrawals only)
- Support messages and feedback
- In-app preferences and settings
Purpose
⚙️Why Do We Need Your Data?
- Run the game — deliver gameplay, sync progress, maintain stability
- Account management — handle registration and authentication
- Process withdrawals — securely fulfill PayPal reward transactions
- Customer support — respond to your inquiries and resolve issues
- Product improvement — analyze trends, develop features, fix bugs
- Communications — send updates, changelogs, and service notices
- Legal compliance — meet applicable obligations and enforce our terms
Sharing
🤝When Is Your Information Shared?
Data sharing is limited to operational necessities:
- Service Providers — contractors who help us operate and maintain the app, bound by DPAs
- Business Transfers — in the event of a merger, acquisition, or asset sale
- Affiliates — entities under common ownership, under equivalent privacy standards
- Legal Authorities — when required by law, court order, or to protect safety
- With Your Consent — for any other purpose you explicitly authorize
PayPal Protection: Your PayPal email and account details are used solely for withdrawal processing and are never sold, rented, or shared with advertisers.
Permissions
🔑Why Does the App Need These Permissions?
Block Blast Quest requests only permissions essential for operation. No sensitive permissions (camera, microphone, contacts, or precise location) are used.
| Permission | Purpose | Data Collected |
|---|
INTERNET | Network access for gameplay, sync, and ads | Network status, transfer metrics |
ACCESS_NETWORK_STATE | Adapt behavior to network conditions | Connection type and status |
ACCESS_WIFI_STATE | Ensure stable Wi-Fi operations | Wi-Fi connectivity status |
AD_ID | Resettable advertising identifier | Device ad ID |
VIBRATE | Haptic feedback during gameplay | None |
ACCESS_ADSERVICES_TOPICS | Privacy Sandbox Topics API | Interest topic data |
ACCESS_ADSERVICES_ATTRIBUTION | Measure ad attribution | Attribution data |
BIND_GET_INSTALL_REFERRER_SERVICE | Track app install source | Install campaign data |
ACCESS_ADSERVICES_AD_ID | Latest ad API compliance | Ad service identifiers |
FOREGROUND_SERVICE | Maintain background reward checks | None |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internal component messaging | None |
BIND_APPHUB_SERVICE | Optimized ad delivery pipeline | Ad parameters |
Infrastructure
🖥Where Does Your Data Go?
Our Server Endpoint
Block Blast Quest communicates with our backend at https://irocq.bbsquest.com/. This endpoint handles:
- Core gameplay delivery and progress synchronization
- Reward validation and withdrawal processing
- Anonymized performance and stability monitoring
- In-app support request routing
Security Measures Applied to All Endpoints
In Transit
- TLS 1.2+ encryption on all connections
- Certificate pinning to prevent interception
- HTTPS-only; all plain HTTP blocked
At Rest & Access
- AES-256 encryption for stored personal data
- Role-based access for authorized staff only
- Regular audits and vulnerability assessments
- DPAs with all third-party processors
Advertising
📢Who Else Is Involved?
Block Blast Quest serves ads through AppLovin and its mediation partner network. Ad partners may receive limited, non-personal technical signals to serve relevant ads.
Data Shared with Ad Partners
- Resettable ad identifiers (GAID / IDFA)
- Device model, OS version, screen size
- Session frequency and duration
- Ad impressions and click events
- Country and language
Never Shared
- Email address or phone number
- Account credentials or PayPal details
- In-game progress or scores
- User-generated content
- Precise geolocation
Ad Partner Privacy Policies
Your Rights
⚖️What Rights Do You Have Over Your Data?
Multiple data protection frameworks protect you. Contact antkcraft@gmail.com to exercise any of these rights — we respond within 48 hours.
CCPA & CPRA — California
- Know what data is collected
- Request data deletion
- Opt out of data sales
- Correct inaccurate data
- No discrimination for exercising rights
GDPR — European Economic Area
- Access your personal data
- Rectify inaccurate information
- Request erasure
- Restrict processing
- Object to specific uses
VCDPA — Virginia
- Access and confirm processing
- Correct inaccuracies
- Delete personal data
- Data portability (structured format)
- Opt out of targeted advertising
Opt-Out
🚫How Can You Opt Out?
Ad Personalization
Android: Settings → Google → Ads → "Opt out of Ads Personalization"
iOS 14+: Settings → Privacy & Security → Tracking → disable for Block Blast Quest
Do Not Sell My Data
Email antkcraft@gmail.com with subject "Do Not Sell" and we will process your request within 15 business days.
Automated Decisions
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on users.
Security
🔒Is Your Data Safe?
Security isn't an afterthought. We protect your data through:
- TLS 1.2+ encryption for all data in transit
- AES-256 encryption for stored personal information
- Strict role-based access controls
- Scheduled vulnerability assessments and audits
- Contractual security requirements for all data processors
While we apply commercially reasonable measures, no method of electronic transmission or storage is fully immune to risk. We cannot guarantee absolute security.
Retention
🗑How Long Do We Store Your Data?
Retention follows the principle of necessity:
- Active accounts: Personal data is kept while your account is in use and for the duration required by law
- Inactive accounts: Personal data is automatically deleted after 90 days of inactivity
- Usage analytics: Retained only in anonymized or aggregated form for performance analysis
- PayPal records: Transaction records retained for up to 7 years for financial compliance
Transfers
🌐Cross-Border Data Transfers
Your data may be processed on servers located outside your country. We safeguard cross-border transfers through:
- Standard Contractual Clauses (SCCs) for EEA transfers
- TLS 1.2+ encryption on all international data flows
- Compliance with applicable transfer frameworks
- Data Processing Agreements with all receiving parties
Children
🧒What About Children?
Block Blast Quest is designed for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child has shared data with us, please contact antkcraft@gmail.com immediately — we will delete that data promptly.
Parents who wish to review, correct, or delete data believed to be from their child are encouraged to reach out via the same email address.
Cookies
🍪Cookies & Tracking
Block Blast Quest does not use browser cookies. However, web view components within the app and ad networks may use equivalent tracking technologies such as:
- Mobile ad IDs — resettable via your device privacy settings
- SDK-based tracking — used by mediation partners for attribution and frequency capping
- Local storage — for saving game preferences and progress offline
You can reset or limit your ad ID at any time via your device settings (see Opting Out above).
Breach Notice
🚨Data Breach Notification
In the event of a security incident that materially affects your personal data, we commit to:
- Notifying affected users within 72 hours of becoming aware of the breach
- Reporting to the applicable supervisory authority as required by GDPR and other laws
- Providing details on the nature of the breach and recommended protective steps
- Documenting all incidents in our internal security log
External
🔗Third-Party Links
Block Blast Quest may contain links to external websites or services we do not operate. We have no control over and take no responsibility for their privacy practices or content. We recommend reviewing the privacy policy of any third-party service before sharing personal information with them.
Legal
📋Legal Disclosure Requirements
Business Transactions
If Block Blast Quest is involved in a merger, acquisition, or asset sale, your personal data may be transferred to the successor entity. You will be notified before any such transfer and given the opportunity to delete your data.
Law Enforcement
We may disclose data when legally required to:
- Comply with a subpoena, court order, or applicable law
- Protect the rights, property, or safety of our users or the public
- Investigate or prevent fraud or illegal activity
Updates
📝Will This Policy Change?
- We may revise this policy from time to time as our services evolve
- The updated version will be posted on this page with a new effective date
- For material changes, we will notify you via email or an in-app notice at least 7 days before the change takes effect
- Continued use of Block Blast Quest after the effective date constitutes acceptance of the revised policy
We recommend revisiting this page periodically to stay informed.