Privacy Policy

Last updated: 15 October 2026

CompaktGames (Portugal) is the controller of the personal data processed through Blastoria. This page explains what we collect, why, and your rights (including under the GDPR).

1. What we collect

• Account data: email address and password (stored hashed by our auth provider), or your Google account id and email if you use Google login. Guests have no email.
• Profile and game data: display name, character look, level, XP, coins, diamonds, inventory, achievements, statistics, friends, mail, settings choices, maps you create, and match results.
• Chat and social content: global and room chat messages, emotes, GIFs you send, and friend requests. Chat is visible to other players.
• Technical data: IP address, browser and device type, and logs needed to run and protect the service (anti-abuse, errors).

2. Why we use it (legal basis)

• To run the game, your account and your progress (contract).
• To keep the game safe and fair, and prevent spam and cheating (legitimate interest).
• To send account emails such as confirmation and password reset (contract).
• To comply with legal duties (legal obligation).
• We currently do not use advertising or analytics cookies. If we add them, we will ask for your consent first.

3. Who we share it with

We do not sell your data. We use service providers that process it for us: our database and authentication provider (Supabase), our hosting provider, Google (only if you choose Google login), Cloudflare (spam protection on login, if enabled) and a GIF provider when you search for GIFs. Providers may process data outside your country; where this happens we rely on safeguards such as standard contractual clauses.

4. How long we keep it

We keep your data while your account exists. Guest accounts are deleted when you log out. When you delete your account, your profile and game data are deleted. Backups and logs are removed on a short cycle, and some data may be kept longer only where the law requires.

5. Your rights

You can ask to access, correct, export or delete your data, to restrict or object to its use, and to withdraw consent at any time. You can delete your account yourself in Settings → Account. For anything else write to [email protected]. You may also complain to your data protection authority.

6. Children

The game is not for children under 13. If you believe a child under that age has an account, contact us and we will delete it.

7. Security

We use encrypted connections and access controls, but no system is perfectly secure. Choose a strong password and do not share it.

8. Changes

We may update this policy; the date above shows the latest version.

Questions? Contact us at [email protected].