Player information
Privacy Policy
Last updated
This policy explains how the JustBlock app and website use information for accounts, gameplay, rewards, advertising, notifications and support. It covers the current app; optional permissions are separate from agreeing to our Terms of Service.
Operator and contact
Operator and data controller: JustBlock.
Contact: support@justblockapp.com. Include your username and request, but never your password.
Accounts and sign-in
With email and password, your credentials are sent to Google Firebase Authentication, which manages sign-in sessions and password resets. Continue with Apple instead sends Apple's identity token to Firebase to authenticate your player; Apple may provide a private relay address through Hide My Email. JustBlock stores your account identifier, username, display name and account status. Linking Apple to an existing player is optional and keeps the same JustBlock account. Do not use a sensitive personal name as your public username. Application code does not store your password in a player profile or game save.
Optional Game Center
If you connect Game Center, Apple supplies a game-scoped player identifier and signed identity proof. JustBlock verifies the proof and privately links that identifier to your JustBlock account. We report eligible verified scores and achievement progress to Apple; Apple handles visibility through your Game Center settings. If you choose Find Game Center friends and allow access, the app uses their game-scoped identifiers to find friends who have also connected JustBlock. You choose whether to send a JustBlock friend request. We do not import your device address book. Disconnecting removes the JustBlock link without changing your coins or local progress, or deleting scores and achievements already held by Apple. Deleting your JustBlock account also removes this link and revokes its Sign in with Apple authorization when linked; Apple's independently held Game Center records follow Apple's controls and policies.
Progress and rewards
Your device stores boards, move history, Solo records, Daily and Journey progress, trophies, control settings, appearance and introduction preferences. Online services receive moves and results needed to verify scores, complete challenges and process rewards. We store coin balances, earned appearance unlocks, purchases made with earned coins, match entries and transaction receipts to prevent duplicate rewards and charges. Local progress is not automatically backed up to your online account.
What other players can see
Your username, display name, public ranking scores and rank are visible to other players through player search, rankings and matches. Match participants can see participant names, scores, team membership, results and preset game signals. Accepted friends can see whether you are currently online. Your email, password, coin balance and push token are not public profile fields. Removing or blocking a friend stops that friend's access to your friend presence status; it does not make public ranking entries private.
Player reports and blocking
You can report or block players from friend/request and match screens. Reports include the reporting and reported account identifiers, the reported name, a reason, optional details and the related match identifier when supplied. Only the operator's authorized moderation account can read the reports queue and review records. Do not include passwords or unrelated sensitive information in reports. Reports, block records and moderation audit records are used to investigate abuse, enforce the terms and protect players. Necessary investigation and security records can remain after account deletion; contact support for review of residual information. Blocking removes a friendship and prevents future invitations and matching together; an existing match can still finish.
Technical information
Connections to our website, game server and service providers disclose network information such as your IP address. Servers and SDKs may process request times, device/app information, errors and service logs for delivery, security, abuse prevention and troubleshooting. The app does not request access to your contacts, camera, microphone or precise GPS location for gameplay.
Optional advertising
Rewarded videos use Google AdMob and Google's User Messaging Platform. The advertising SDK may process IP addresses and approximate location inferred from them, device or app identifiers, advertising identifiers when available, ad impressions, video views, interactions, performance information and crash diagnostics. Google uses this information to deliver and measure ads, prevent fraud and improve its advertising services. Privacy choices and device permissions affect whether ads can be personalized. Watching an ad is optional; ad availability and reward verification can vary.
Ad choices and reward verification
Review the consent message when it is offered and use Shop → Help → Ad privacy choices to reopen available advertising choices. On iOS, manage any tracking permission in the device's Settings → Privacy & Security → Tracking. Tracking permission is not a condition of playing or receiving the reward offered for completing an available video. Declining a consent purpose can reduce ad availability. For server-verified coin or rescue rewards, we send Google an internal account identifier and reward-session identifier so the server can associate a completed video with the right reward; we do not send your email or password for that verification.
Notifications
If you allow notifications, we store a device push token associated with your account. Expo's push service and Apple or Google notification services process the token and notification payload to deliver friend requests, game invitations and game announcements. Notifications can contain usernames and invitation details and may appear on your lock screen. Turn notifications off in your device settings. Sign-out unregisters this device's token when the server is reachable; deleting the account removes its registered push tokens.
Service providers and sharing
Google/Firebase provides authentication and database services; our hosting and network providers deliver the website and game API; Expo and Apple/Google deliver notifications; Google AdMob provides advertising and consent tools. Information is shared only as needed for these services, reward verification, support, security, legal obligations or a lawful business transfer. Advertising has the separate uses described above. We do not give advertisers your account email or password. Service-provider access is subject to their applicable privacy and data-protection terms; the linked provider notices explain their practices.
Where processing happens
Our service providers may process information outside your country, including in the United States and other places where they operate. Applicable provider agreements and transfer safeguards govern those transfers. For people in the EEA, UK or Switzerland, processing necessary to deliver an account or game service is based on providing that service; proportionate security and fraud prevention rely on legitimate interests; legal recordkeeping relies on legal obligations; optional consent-based advertising purposes rely on your choices. You may withdraw consent without changing the lawfulness of earlier processing.
Retention and account deletion
Account, game and wallet records are kept while used to provide your account and services. Open Profile → Account → Delete account and confirm to initiate deletion in the app. For security, you may need to sign in again and leave an active match first. Deletion removes authentication, the player profile, username reservation, friend connections, presence, wallet, registered push tokens, Solo submissions and ranking entries. Shared historical match results currently keep a 'Deleted player' label and an internal participant identifier; some operational, advertising-verification and security records can also remain. These residual records are not all subject to an automatic expiry. Provider backups and independently held advertising records follow the provider's retention policies. Signing out or uninstalling does not delete your online account.
Local data and your rights
Online account deletion leaves local game progress on the device. Removing the app's local storage or deleting the app removes its local save, subject to operating-system backup and restoration behavior. Depending on where you live, you may request access, correction, deletion, restriction, portability or object to certain processing, and complain to a data-protection authority. Use account controls for immediate self-service changes; contact the operator for other requests or residual-data review. We may need to verify account ownership without asking for your password.
Children
JustBlock is a general-audience game and is not directed to children under 13. Online accounts and advertising should not be used by children below the applicable age of digital consent without legally required parental authorization. The app does not currently collect a birth date or claim to verify age or parental consent. If you believe a child has provided personal information without the required authorization, contact the operator to request investigation and deletion.
Website and changes
The public website displays product, support and legal information. It does not run third-party advertising or analytics scripts in the current release, but web servers and network providers receive connection information. Our separate online app and third-party pages have the practices described in their own notices. We update this policy when practices change and show the revision date; new consent is requested where required.