Privacy Policy

Effective September 29, 2026 · Version 1.2

This policy explains what the Operation Blast iPhone app and the website at operationblast.com ("the game") do with information about you, and the choices you have. It is written for players and for the parents of players. The game is made by Badger Social Inc., 131 Continental Drive, Newark, DE 19713, United States ("we", "us"), which is responsible (the "data controller") for the information described here. Our Terms of Service set the rules for playing.

1. What the game collects, and why

An anonymous player id

On first launch the game asks Firebase Authentication (a Google service) for an anonymous sign-in. The result is a random identifier that stands for your install. It is not linked to your name, email address, phone number or Apple ID, because the game never asks for those. Its job is to keep your username, your leaderboard rows and your gameplay statistics together, and to stop other players from writing under your name. A reinstall or a new device gets a new id; we cannot join the two, and we cannot recover an old one for you.

Your username and player id

When you first play online, the game asks you to pick a username: 3 to 16 letters and digits, unique across all players. We store it as you typed it and in lower case, together with your anonymous id and the version of the terms you accepted, and the game gives you a short player id (letters in two groups, shown in Settings). Both are public: they appear on the leaderboards next to your score. You can change your username in Settings at any time; the old name stays reserved so nobody else can take it, and the boards show the new name the next time you submit a score.

Daily Run scores

When you finish a Daily Run, the game sends your best score of the day, your username, your player id and the time to the daily, weekly and all-time leaderboards. Each board keeps your highest score. Anyone using the game can read the leaderboards, so treat your username as public. Campaign progress, stars and coins are not sent to the leaderboards.

Purchases and what you own

The game sells coin packs, Second Chance packs and the Unlimited Pass through Apple's App Store. Apple handles payment: we never receive your card details, billing address or Apple ID. The game keeps the list of products you own in the save file on your device so it can grant them, and reads Apple's receipt to restore the Unlimited Pass after a reinstall. Your purchases, your coin balance and whether you hold the Unlimited Pass are also part of the gameplay statistics described next, so we can see what players buy.

Gameplay statistics (analytics)

We are adding a small set of gameplay statistics to understand how the game is played and to make business decisions: which levels are too hard, how long people play, what sells. They are stored under your anonymous id in Firestore (a Google database), in two records:

• Per session: when the session started, how many seconds it lasted, how many times each kind of event happened (levels started, completed and failed, daily runs, gates, continues and so on), purchases made, the app version, the device model (for example "iPhone 16 Pro"), the iOS version and the device's language and region setting.
• Per player: install date, when you last played, your birth year if you gave it, how many sessions you have played and for how long in total, the highest level you have reached, your coin balance and whether you own the Unlimited Pass.

We do not record your IP address, your location, an advertising identifier, or anything you type other than your username. The statistics are used for balancing and business decisions only; we do not use them for advertising and we do not sell them.

Your birth year (optional)

On the username screen the game asks for your birth year, once. You can skip it. We use it to know roughly how old our players are, and for one rule: if the year you give means you turn 13 or younger this calendar year, the game treats you as under 13 and uploads no gameplay statistics about you. What the game then keeps on our servers is limited to what it needs to run: your anonymous id, and, if you use the leaderboards, your username, player id and scores. Only the year is asked, never the full date. The same rule keeps a child off the public boards: a player the game treats as under 13 gets no public username and their scores are not posted to the leaderboards; the game plays the same otherwise, and the name row in Settings has no edit button for them. Our Terms of Service ask players under 13 who skipped the year not to create a username; a parent or guardian can have a child's username and scores removed at any time (section 8).

The save file on your device

Your progress, stars, coins, Second Chances, upgrades, hero choice, streaks, settings, terms acceptance and a copy of the last leaderboards you saw are stored in a save file on your device. We cannot read it. It is part of your device's normal iCloud or computer backup if you use one, and deleting the game deletes it.

The daily reminder

The game can show one reminder a day, at the hour you choose in Settings, telling you that the Daily Run is ready. The reminder is scheduled on your device; nothing is sent to us or through a push service. It is switched on in Settings by default and only appears if you allow notifications when iOS asks. Turn it off in the game's Settings or in iOS Settings under Notifications.

What our providers see

The game talks to Google's servers (Firebase Authentication, Firestore, and a time check that keeps the daily limits honest) over encrypted connections. Like any internet service, those servers see the IP address and standard technical details of each request, which Google handles under its own terms as our service provider; we do not collect or store IP addresses in our own data. The website is a set of static pages served by Firebase Hosting, which keeps standard server logs; the site sets no cookies and runs no analytics scripts. Apple gives us aggregated, anonymous download and sales figures from the App Store; what Apple itself collects is covered by Apple's privacy policy.

2. What the game does not collect

• No name, email address, phone number, password or Apple ID.
• No location. No access to your contacts, photos, camera or microphone.
• No advertising identifier and no tracking across apps or websites. The game shows no ads and contains no advertising network's code.
• No chat or messages between players.

3. How we use the information

• To run the game: sign you in anonymously, keep your username unique, show the leaderboards, grant and restore purchases, and remember that you accepted the terms.
• To keep it fair: the anonymous id and Firestore security rules stop players from writing under someone else's name or lowering another player's score, and let us remove scores that were cheated.
• To make the game better and run the business: the gameplay statistics tell us which levels are too hard or too easy, how long sessions last and what players buy.
• To answer you: if you email support, we use your message and email address to reply.
• To meet legal duties and to protect players, the game and us.

If you are in the European Economic Area, the United Kingdom, Switzerland or another place whose law asks for a legal basis: running the game and the leaderboards is necessary for our contract with you (the Terms of Service); the gameplay statistics and fair-play measures rest on our legitimate interest in improving and protecting the game, balanced against your interests by keeping the data anonymous and minimal; the birth year and the reminder rest on your consent, which you give by entering the year or allowing notifications and can withdraw at any time.

4. Who can see it

• Other players see your username, your player id and your scores on the public leaderboards. Nothing else about you is visible to other players.
• Service providers process data for us under their terms: Google (Firebase Authentication for the anonymous id, Firestore for usernames, leaderboards and gameplay statistics, Firebase Hosting for the website) and Apple (the App Store, in-app purchases and receipts). They may use the data only to provide their services to us.
• When the law requires it, for example a valid legal request, or to enforce our terms, prevent cheating or abuse, or protect the rights and safety of players, the public or us.
• If the game changes hands, for example in a merger or sale, the data may be transferred with it, under this policy.

We do not sell personal information, and we do not share it for advertising. In particular, we do not sell it or share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA) or comparable laws.

5. Where the data lives

Our servers are Google Cloud services located in the United States. If you play from outside the United States, your username, scores and gameplay statistics are transferred to and stored there. Google provides the contractual protections that data protection law requires for such transfers, including the standard contractual clauses in its data processing terms. Questions about these transfers go to our data protection contact (section 11).

6. How long we keep it

• Anonymous id, username, player id, terms acceptance: for as long as your player identity exists, that is until you ask us to delete it. A username you change away from stays reserved. We may delete a player identity that has not been used for a long time, together with its username reservation, but we do not promise to do so on any schedule.
• Leaderboards: the daily and weekly boards are shown for their day or week and then replaced by the next; the all-time board keeps your best score for as long as the game runs. The rows behind past daily and weekly boards are kept as history for as long as the game runs, unless you ask us to delete yours (section 7); we may also remove them as part of housekeeping.
• Gameplay statistics: 26 months from the session, then deleted or reduced to totals that no longer identify a player.
• Purchase records: Apple keeps the transaction record under its own rules. We keep the list of products you own on your device and the purchase events among the gameplay statistics (26 months).
• Support emails: 24 months after the conversation ends.
• On request: we delete everything above that is tied to your anonymous id within 30 days of your request (section 7).

7. Your choices and your rights

Choices in the game: change your username in Settings; skip the birth year; turn the daily reminder off in Settings; delete the game to remove the save file from your device.

Your rights. Wherever you live, you can ask us to:

• tell you what information we hold about your player identity and give you a copy;
• correct it (for example your username or birth year);
• delete it: your username reservation, player record, leaderboard rows and gameplay statistics;
• restrict or object to how we use it, including to the gameplay statistics;
• withdraw consent you gave (the birth year, the reminder) without affecting what happened before;
• receive a copy of it in a portable form;
• appeal a decision we make on your request, by replying to our answer.

We do not sell or share personal information for targeted advertising, so there is nothing to opt out of on that front, and we do not discriminate against you for exercising your rights. California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas and other U.S. state residents: you have the rights described above to the extent your state law provides them, and you may use an authorised agent where the law permits. European Economic Area, United Kingdom and Switzerland: where the GDPR or UK GDPR applies, the legal bases we rely on are in section 3, you may lodge a complaint with your local data protection authority, and where we transfer data internationally we use appropriate safeguards such as the Standard Contractual Clauses (section 5).

How to ask. Email support@operationblast.com. Because we do not hold your name or email, the only way we can find your data is by your username or the player id shown in Settings, so include one of them. We may ask you to confirm the request from inside the game (for example by changing your username to a value we give you) so that nobody else can delete your scores. We answer within 30 days, or sooner where the law requires.

8. Children

Operation Blast is made for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13 beyond what the game needs to run.

• The birth year on the username screen is the age gate: a player who turns 13 or younger this calendar year is treated as under 13. The game uploads no gameplay statistics about them (section 1), creates no public username for them and posts none of their scores to the leaderboards. A child who skipped the year and chose a username appears on the boards like any other player until a parent or guardian asks us to remove the username and scores.
• If you are a parent or guardian and believe your child has given us information we should not have, or you want to see or delete what the game holds about your child, email support@operationblast.com with the child's username or player id and we will help within 30 days.
• If we learn that we hold gameplay statistics about a child under 13, we delete them.

The game is rated for a general audience in the App Store and is not marketed to children. If that ever changes, this section will be rewritten and you will be asked to accept the terms again.

9. Security

All traffic between the game and our servers is encrypted. Firestore security rules allow each install to write only its own username, scores and statistics and never to lower another player's score. There are no passwords to leak and no payment data on our side. Access to the Firebase project is limited to Badger Social Inc. staff who need it to run the game. No system is perfectly secure; if a breach affects your information, we will tell you and the authorities as the law requires.

10. Changes to this policy

The version and effective date at the top of this page tell you which policy applies. When we change what the game collects or how we use it, we update this page and the date; for a material change we also show the change in the game and ask you to accept the terms again. Earlier versions are available on request.

11. Contact

Badger Social Inc., 131 Continental Drive, Newark, DE 19713, United States. Email: support@operationblast.com, which is also our data protection contact for players everywhere, including the EU, the UK and Switzerland.