Privacy

Last updated: August 2026

The short version: you play anonymously. We store a hashed device token, the name you pick, and your match history. No email unless you choose to link one later. No third-party trackers, no ad networks. This page lists everything.

What we store

Anonymous device token (hashed). On first connect your browser mints a device token. Our database stores only a SHA-256 hash of it — this is your login. We never see your name, email, or anything about you unless you provide it.
Display name. If you claim a username, we store it (and when you last changed it). Until then it's simply empty.
Match results and stats. Which matches you played, and per-match kills, deaths, headshots, damage, gun level, placement, and wins — plus a lifetime totals rollup. This powers your profile and the leaderboards.
Points and cosmetics. Your points balance and which shop items you own and have equipped.
Friends and invites. Friend requests, your friends list, blocks, and — if you joined through a friend's room link — who invited you.
Play sessions. When you played, on what kind of device (mobile / desktop / installed app), and a coarse region (like "eu-west") used to connect you to a nearby server. Not your precise location and not your IP address at rest.
Coarse product events. Milestones like "match started," "ad board seen," or "share link clicked," used to understand how the game is doing. This is deliberately coarse — we do not record per-shot or per-movement telemetry.
Email — only if you link an account. Playing never requires an email. If you later link one (or a sign-in provider) to keep your account across devices, we store that so you can log back in.

On your device

The game uses your browser's localStorage for your settings and your device token. That's it — no tracking cookies, no fingerprinting.

No third-party trackers

BLOCKSHOT contains no third-party analytics scripts, tracking pixels, or ad networks. The billboards you see in-game are first-party: we render them ourselves and count views as a daily total per ad — nothing is profiled about you, and no advertiser ever receives data about individual players.

Where the data lives

Our database is hosted on Neon (managed Postgres, cloud), which processes data on our behalf under its own security and privacy commitments. Live gameplay — positions, shots, health — exists only in the game server's memory during a match and is never written to the database.

Deleting your data

Email privacy@blockshot.gg from the account (or with the device token) you want removed and we'll delete your player record. Deleting your player cascades: stats, friendships, sessions, and match participation records tied to you go with it.

Changes

If what we collect ever changes, this page changes first — we keep it in sync with what the game actually stores, and we'll update the date at the top.

Contact

Questions? privacy@blockshot.gg reaches the BLOCKSHOT team directly.