✿ Chainbloom Privacy Policy
Chainbloom is built to collect as little as possible while still offering global leaderboards and letting us understand whether the game is working for players. This page says exactly what we collect, why, and how to get it removed.
What we collect
| Data | What it is | Why | Legal basis (GDPR) |
|---|---|---|---|
| Player ID | A random identifier generated on your device — not your Google/Apple account ID, not tied to your email | Lets the leaderboard and analytics recognize returning play without an account | Legitimate interest |
| Display name | Whatever you type in Settings (defaults to "Gardener####") | Shown next to your leaderboard entries | Consent (you choose it) |
| Move replays | The list of cells you tapped in a Daily/Weekly game you submit to the leaderboard | Verifying your score is genuine — the server replays your game move-by-move | Legitimate interest (fraud prevention) |
| Gameplay events | Session start, which mode you played, win/loss, moves used | Understanding retention and which modes people actually play, so we know if updates are worth making | Legitimate interest |
| Purchase events | Which cosmetic product you bought — not payment details; those go directly to Apple/Google and we never see them | Measuring whether the game can sustain itself | Legitimate interest |
| IP address | Processed transiently in memory to rate-limit abusive traffic; never stored with your data | Anti-abuse / anti-cheat | Legitimate interest |
What we never collect
- Your real name, email, or phone number (unless you type one into the display name field yourself — we'd recommend against it)
- Location — we don't geolocate you
- Contacts, photos, or any other device data
- Anything from third-party trackers or ad SDKs — the game has none, by design
- Cross-app tracking of any kind
Where it lives
Everything above is stored on our own server, hosted in the European Union (Hetzner, Germany) under EU jurisdiction — not sold, not shared with advertisers, not handed to any third party except the hosting provider running the server itself.
Your campaign progress, wallet, and settings never leave your device at all — they live in local storage, are never transmitted anywhere, and are entirely under your control (Settings → Reset all progress deletes them instantly).
Your rights
Under GDPR you can request access to, correction of, or deletion of any data tied to your player ID at any time — email support@chainbloom.app with your in-game player ID (shown on the Settings screen) and we'll act on it within 30 days. Because the player ID carries no personal information on its own, deleting it (or simply never sharing it) is equivalent to walking away with nothing about you retained.
You also have the right to lodge a complaint with your supervisory authority; in Slovakia that is the Úrad na ochranu osobných údajov SR.
Children
Chainbloom is not directed at children and collects no data that could identify a child.
Changes
We'll update this page and the in-game changelog if what we collect ever changes materially.