Privacy Policy

Effective November 13, 2026 · Version 1.9

The short version. Operation Blast has no accounts. The game gives your install a random anonymous id and keeps, on our servers: the username you pick and a short player id, your Daily Run and Hold the Line scores for the public leaderboards, which version of the terms you accepted, a copy of your save file so a new phone can pick up your game, and a small set of gameplay statistics (sessions and how long you played each mode, levels and runs played, purchases, app version and device model) that we use to balance the game and run the business. Before anything else is collected, the game asks for your birth year, once. Until you answer, and whenever the year makes you under 13, the game uploads no gameplay statistics about you, makes no cloud copy of your save and gives you no public username. No name, email, password, location, contacts or ads, and no tracking across other apps. Your progress and coins live in the save file on your device and in that cloud copy. To see or delete your data, email play@operationblast.com.

This policy explains what the Operation Blast app for iPhone and Android and the website at operationblast.com ("the game") do with information about you, and the choices you have. It is written for players and for the parents of players. The game is made by Badger Social Inc., 131 Continental Drive, Newark, DE 19713, United States ("we", "us"), which is responsible (the "data controller") for the information described here. Our Terms of Service set the rules for playing.

1. What the game collects, and why

An anonymous player id

On first launch the game asks Firebase Authentication (a Google service) for an anonymous sign-in. The result is a random identifier that stands for your install. It is not linked to your name, email address, phone number, Apple ID or Google account, because the game never asks for those. Its job is to keep your username, your leaderboard rows and your gameplay statistics together, and to stop other players from writing under your name. Deleting the game does not by itself remove the id: on iPhone it is kept in the device Keychain and your iCloud key-value storage, on Android in Android Backup, so a reinstall or a new phone signed in to the same Apple ID or Google account gets the same id. Without those, a reinstall starts a new id; we cannot join the two, and we cannot recover an old one for you.

Your username and player id

When you first play online, the game asks you to pick a username: 3 to 16 letters and digits, unique across all players. We store it as you typed it and in lower case, together with your anonymous id and the version of the terms you accepted, and the game gives you a short player id (letters in two groups, shown in Settings). Both are public: they appear on the leaderboards next to your score. You can change your username in Settings at any time; the old name stays reserved so nobody else can take it, and the boards show the new name the next time you submit a score.

Scores on the leaderboards

When you finish a Daily Run, the game sends your best score of the day, your username, your player id and the time to the daily, weekly and all-time leaderboards. Each board keeps your highest score. Anyone using the game can read the leaderboards, so treat your username as public. Campaign progress, stars and coins are not sent to the leaderboards.

When a Hold the Line stand ends, the game sends the waves you held (and your kills, which break ties), your username, your player id and the time to Hold the Line's own daily, weekly and all-time leaderboards, which work the same way.

Without the Unlimited Pass the Daily Run can be started once a day. To keep that count honest, when you start a Daily Run the game records on our servers, under your anonymous id, that today's run was started (the date and the time). Only your own game can read that record; it is not shown to other players.

Hold the Line's once-a-day limit is counted in the save file on your device; our servers keep no record of when you started a stand.

Purchases and what you own

The game sells coin packs, Second Chance packs and the Unlimited Pass through Apple's App Store on iPhone and Google Play on Android. The store handles payment: we never receive your card details, billing address, Apple ID or Google account. The game keeps the list of products you own in the save file on your device so it can grant them, together with a record of each purchase (described below), and reads the store's receipt (Apple's, or your Google Play purchase record) to restore the Unlimited Pass after a reinstall. Your purchases, your coin balance and whether you hold the Unlimited Pass are also part of the gameplay statistics described next, so we can see what players buy.

Gameplay statistics (analytics)

We keep a small set of gameplay statistics to understand how the game is played and to make business decisions: which levels are too hard, how long people play, what sells. They are stored under your anonymous id in Firestore (a Google database), in three kinds of record:

Per session: when the session started, how many seconds it lasted and how those seconds were split between the menus, the campaign, the Daily Run and Hold the Line, how many runs of each you started, how many times each kind of event happened (levels started, completed and failed, daily runs, Hold the Line stands, gates, continues, hero training, purchases started, cancelled or failed, and so on), purchases made, the app version, the device model (for example "iPhone 16 Pro" or "Pixel 8"), the operating system version and the device's language and region setting.
Per player: install date, when you last played, your birth year, how many sessions you have played and for how long in total, the highest level you have reached, your coin balance, whether you own the Unlimited Pass, and the app version, device model and language setting from your latest session.
Per purchase: when you buy something we keep a record of that purchase: the product, the price and currency, the store's transaction number, the time, and where in the game you bought it. The record also notes the store (the App Store or Google Play), the app version, and how far into the game you were at that moment: your highest level, how many sessions you had played and for how long. To confirm a purchase is genuine, the game also sends the store's signed receipt to our server, which checks the store's signature and keeps the result (the product, the store's transaction number and your anonymous id), so one purchase cannot be claimed by many players.

We do not record your IP address, your location, an advertising identifier, or anything you type other than your username and your birth year. The statistics are used for balancing and business decisions only; we do not use them for advertising and we do not sell them.

Your birth year

Before the username screen, on a screen of its own, the game asks what year you were born, once; a player who installed an earlier version without giving a year is asked the next time they open the game. The question cannot be skipped, and a player who has not answered is treated as under 13: nothing described in this section's under-13 rule is uploaded or published for them while the question is open, and the game still plays offline. We use the year to know roughly how old our players are, and for one rule: if the year you give means you turn 13 or younger this calendar year, the game treats you as under 13 and uploads no gameplay statistics about you (no session, player or purchase records) and, from version 1.2, makes no cloud copy of your save. What the game then keeps on our servers is limited to what it needs to run: your anonymous id, your short player id, which version of the terms you accepted, and, when you start a Daily Run, the record that it was started. Only the year is asked, never the full date. The same rule keeps a child off the public boards: a player the game treats as under 13 gets no public username and their scores are not posted to the leaderboards; the game plays the same otherwise, and the name row in Settings has no edit button for them. A player who picked a username in an earlier version and then gives a year that makes them under 13 loses the name on their device and no further scores are posted under it; the name and the scores already on the leaderboards stay on our servers until a parent or guardian asks us to remove them, which they can do at any time (section 8).

The save file on your device, and its cloud copy

Your progress, stars, coins, Second Chances, heroes, hats, upgrades, your Hold the Line record and hero training, streaks, settings, terms acceptance, your username and player id, your birth year, play-time totals, a record of each purchase you make, and a copy of the last leaderboards you saw are stored in the game's save files on your device. It is part of your device's normal iCloud, Android or computer backup if you use one, and deleting the game deletes it.

So that a new phone can pick up where you left off, the game also keeps a copy of that save file on our servers, stored under your anonymous id, updated after you play. It holds the same things the file on your device holds (including the birth year), plus the device model and app version that saved it, and nothing else; only your anonymous id can read or overwrite it, and we use it for nothing but restoring your game. From version 1.2 the game makes no such copy for a player it treats as under 13; a copy that an earlier version made is deleted when a parent or guardian asks (section 8), or when we find it. To let a new device find that copy, on iPhone the game stores your anonymous sign-in in your own iCloud key-value storage (Apple's service, under your Apple ID, which we cannot see): a new phone signed into the same Apple ID picks up the same anonymous id and offers to restore your game at first launch, and Settings › RESTORE PROGRESS does the same on request. If you turn iCloud off for the game, a new device starts fresh. On Android the same thing happens through Android Backup (Google's service, under your Google account, which we cannot see): when backup is on in your phone's settings, the save file and the anonymous sign-in are copied to your Google account, and a reinstall or a phone restored from that backup picks up the same anonymous id and game. Turn backup off in Android Settings and a new device starts fresh. The cloud copy is deleted with the rest of your data when you ask us to delete it (section 7).

The daily reminder

The game can show one reminder a day, when the new Daily Run opens (midnight UTC, shown in your local time in Settings), telling you that the Daily Run is ready. The reminder is scheduled on your device; nothing is sent to us or through a push service. It is switched on in Settings by default and only appears if you allow notifications when your phone asks (iOS, or Android 13 and later). Turn it off in the game's Settings or in your phone's notification settings.

What our providers see

The game talks to Google's servers (Firebase Authentication, Firestore, and a time check that keeps the daily limits honest) over encrypted connections. Like any internet service, those servers see the IP address and standard technical details of each request, which Google handles under its own terms as our service provider; we do not collect or store IP addresses in our own data. The website is a set of static pages served by Firebase Hosting, which keeps standard server logs; the site sets no cookies and runs no analytics scripts. At launch the game also reads one small file from the website to learn which version of the terms is current. Apple and Google give us aggregated, anonymous download and sales figures from the App Store and Google Play; what Apple and Google themselves collect is covered by their own privacy policies. The purchase software inside the game is Unity's In-App Purchasing package (Unity Technologies). During a purchase it briefly sees the email address and approximate location of your store account and keeps neither; for its own purchase records and diagnostics it keeps purchase history, crash and diagnostic reports, performance data and a device identifier, under Unity's privacy policy (unity.com/legal/privacy-policy). Unity does not share that data, and we receive none of it beyond the purchase confirmation.

2. What the game does not collect

No name, email address, phone number, password, Apple ID or Google account kept by us (the purchase software sees an email address during a purchase and keeps none; section 1).
No location kept by anyone (the purchase software sees an approximate location during a purchase and keeps none). No access to your contacts, photos, camera or microphone.
No advertising identifier and no tracking across apps or websites. The game shows no ads and contains no advertising network's code. The purchase software keeps a device identifier of its own for its purchase records (section 1).
No chat or messages between players.

3. How we use the information

To run the game: sign you in anonymously, keep your username unique, show the leaderboards, grant and restore purchases, and remember that you accepted the terms.
To keep it fair: the anonymous id and Firestore security rules stop players from writing under someone else's name or lowering another player's score, and let us remove scores that were cheated.
To make the game better and run the business: the gameplay statistics tell us which levels are too hard or too easy, how long sessions last, which modes are played and what players buy.
To answer you: if you email support, we use your message and email address to reply.
To meet legal duties and to protect players, the game and us.

If you are in the European Economic Area, the United Kingdom, Switzerland or another place whose law asks for a legal basis: running the game and the leaderboards is necessary for our contract with you (the Terms of Service); the gameplay statistics and fair-play measures rest on our legitimate interest in improving and protecting the game, balanced against your interests by keeping the data anonymous and minimal; the birth year and the reminder rest on your consent, which you give by entering the year or allowing notifications and can withdraw at any time.

4. Who can see it

Other players see your username, your player id and your scores on the public leaderboards. Nothing else about you is visible to other players.
Service providers process data for us under their terms: Google (Firebase Authentication for the anonymous id, Firestore for usernames, leaderboards, gameplay statistics and the cloud copy of your save, Firebase Hosting for the website, and Google Play for purchases on Android) Apple (the App Store, in-app purchases and receipts on iPhone) and Unity Technologies (the in-app purchasing software inside the game, for purchases on both stores; what it keeps is in section 1). They may use the data only to provide their services to us.
When the law requires it, for example a valid legal request, or to enforce our terms, prevent cheating or abuse, or protect the rights and safety of players, the public or us.
If the game changes hands, for example in a merger or sale, the data may be transferred with it, under this policy.

We do not sell personal information, and we do not share it for advertising. In particular, we do not sell it or share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA) or comparable laws.

5. Where the data lives

Our servers are Google Cloud services located in the United States. If you play from outside the United States, your username, scores, gameplay statistics and the cloud copy of your save are transferred to and stored there. Google provides the contractual protections that data protection law requires for such transfers, including the standard contractual clauses in its data processing terms. Questions about these transfers go to our data protection contact (section 11).

6. How long we keep it

Anonymous id, username, player id, terms acceptance: for as long as your player identity exists, that is until you ask us to delete it. A username you change away from stays reserved. We may delete a player identity that has not been used for a long time, together with its username reservation, but we do not promise to do so on any schedule.
Leaderboards: the daily and weekly boards are shown for their day or week and then replaced by the next; the all-time board keeps your best score for as long as the game runs. The rows behind past daily and weekly boards are kept as history for as long as the game runs, unless you ask us to delete yours (section 7); we may also remove them as part of housekeeping.
Gameplay statistics: 26 months from the session, then deleted or reduced to totals that no longer identify a player.
Cloud copy of your save: for as long as your player identity exists, that is until you ask us to delete it.
Daily Run start records: for as long as the game runs; we may remove old ones as part of housekeeping.
Purchase records: Apple or Google keeps the transaction record under its own rules. We keep the list of products you own on your device, and the purchase records and purchase events among the gameplay statistics (26 months).
Support emails: 24 months after the conversation ends.
On request: we delete everything above that is tied to your anonymous id within 30 days of your request (section 7).

7. Your choices and your rights

Choices in the game: change your username in Settings; turn the daily reminder off in Settings; delete the game to remove the save file from your device.

Your rights. Wherever you live, you can ask us to:

tell you what information we hold about your player identity and give you a copy;
correct it (for example your username or birth year);
delete it: your username reservation, player record, leaderboard rows, gameplay statistics and the cloud copy of your save;
restrict or object to how we use it, including to the gameplay statistics;
withdraw consent you gave (the birth year, the reminder) without affecting what happened before;
receive a copy of it in a portable form;
appeal a decision we make on your request, by replying to our answer.

We do not sell or share personal information for targeted advertising, so there is nothing to opt out of on that front, and we do not discriminate against you for exercising your rights. California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas and other U.S. state residents: you have the rights described above to the extent your state law provides them, and you may use an authorised agent where the law permits. European Economic Area, United Kingdom and Switzerland: where the GDPR or UK GDPR applies, the legal bases we rely on are in section 3, you may lodge a complaint with your local data protection authority, and where we transfer data internationally we use appropriate safeguards such as the Standard Contractual Clauses (section 5).

How to ask. Email play@operationblast.com. Because we do not hold your name or email, the only way we can find your data is by your username or the player id shown in Settings, so include one of them. We may ask you to confirm the request from inside the game (for example by changing your username to a value we give you) so that nobody else can delete your scores. We answer within 30 days, or sooner where the law requires.

What Unity's purchase software keeps about your device is held by Unity under its own policy, and the software offers no deletion request of its own; ask us and we will pass the request to Unity, or use the rights Unity's privacy policy gives you.

8. Children

Operation Blast is made for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13 beyond what the game needs to run.

The birth-year question is the age gate. It is asked on its own, before the username screen and before the game uploads or publishes anything about the player, with no answer filled in and no hint of what the answer changes, and it cannot be skipped. A player who turns 13 or younger this calendar year, or who has not answered, is treated as under 13. The game uploads no gameplay statistics about them (section 1), makes no cloud copy of their save (from version 1.2), creates no public username for them and posts none of their scores to the leaderboards. Earlier versions let the year be skipped: a player who skipped it is asked again, and if their answer makes them under 13, a username they chose before stops appearing on new scores; that username and the scores already posted under it are removed when a parent or guardian asks.
If you are a parent or guardian and believe your child has given us information we should not have, or you want to see or delete what the game holds about your child, email play@operationblast.com with the child's username or player id and we will help within 30 days.
If we learn that we hold gameplay statistics about a child under 13, or a cloud copy of such a child's save, we delete them.

The game is rated for a general audience in the App Store and on Google Play and is not marketed to children. If that ever changes, this section will be rewritten and you will be asked to accept the terms again.

9. Security

All traffic between the game and our servers is encrypted. Firestore security rules allow each install to write only its own username, scores and statistics and never to lower another player's score. There are no passwords to leak and no payment data on our side. Access to the Firebase project is limited to Badger Social Inc. staff who need it to run the game. No system is perfectly secure; if a breach affects your information, we will tell you and the authorities as the law requires.

10. Changes to this policy

The version and effective date at the top of this page tell you which policy applies. When we change what the game collects or how we use it, we update this page and the date; for a material change we also show the change in the game and ask you to accept the terms again. Earlier versions are available on request.

11. Contact

Badger Social Inc., 131 Continental Drive, Newark, DE 19713, United States. Email: play@operationblast.com, which is also our data protection contact for players everywhere, including the EU, the UK and Switzerland.