Privacy Policy
Block Blast — A product by Wolf Technologies Ltd
Effective date: 4 May 2026
1. Introduction
Block Blast is a block puzzle game developed and operated by Wolf Technologies Ltd ("we", "us", "our"). We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable data protection laws including the UK GDPR and the Data Protection Act 2018.
This policy applies to the Block Blast app (available on iOS and the web) and any associated services.
2. Data We Collect
We collect only the minimum data necessary to provide and improve the Block Blast experience.
Account Information
- Email address — used for authentication and account recovery, collected during sign-up via AWS Cognito or Sign In with Apple.
- Display name — an optional name shown alongside your scores on the leaderboard.
Game Data
When you play Block Blast, we store the following data associated with your account:
- Game stats — high score, total games played, lines cleared, longest combo, and daily challenge completions.
- Leaderboard entries — submitted scores and the display name attached to them.
- Preferences — theme selection, sound/haptics settings, and other in-app options.
- Subscription & purchase records — tier, billing period, purchase tokens, and entitlement state, used to deliver the features you have paid for.
- Power-up balances — counts of any power-ups (undo, bomb, refresh) you have purchased or earned.
3. Data We Do NOT Collect
- Location data — we do not access or store your geographic location.
- Contacts — we do not access your address book or contacts list.
- Photos or camera data — we do not access your camera or photo library.
- Health data — we do not access Apple Health or any health-related information.
- Browsing history — we do not track your activity outside of Block Blast.
- Advertising identifiers — we do not currently collect device advertising IDs (IDFA) or use any ad-tracking technology. If we add advertising in a future release, we will update this policy and request your consent first via the iOS App Tracking Transparency prompt where required.
- Third-party analytics — we do not use third-party analytics SDKs.
4. How We Use Your Data
We use your data solely to provide the Block Blast service:
- Account management — to create and maintain your account, authenticate you, and enable password recovery.
- Game progress sync — to synchronise your high scores, stats, and preferences across your devices.
- Leaderboards — to display ranked scores for daily and all-time leaderboards.
- Subscription delivery — to grant access to subscriber-only features and to honour purchased power-ups.
- Service improvement — to understand aggregate usage patterns in order to improve the game. This is done using anonymised, aggregated data only.
We do not use your data for advertising, profiling, or automated decision-making.
5. Data Storage and Security
- Region — all data is stored in the AWS EU (London) region (eu-west-2), located in the United Kingdom.
- Encryption at rest — all data stored in DynamoDB is encrypted using AWS-managed encryption keys (AES-256).
- Encryption in transit — all communication between your device and our servers uses HTTPS (TLS 1.2+).
- Authentication — user authentication is handled by AWS Cognito, which provides secure token-based access.
- Access control — API access is restricted to authenticated users. Each user can only access their own data.
6. Third-Party Services
| Service | Purpose | Data shared |
|---|
| AWS Cognito | User authentication | Email address, hashed password |
| AWS DynamoDB | Data storage | All game data (associated with your user ID) |
| Stripe | Web subscription & one-off payments | Email address, payment method (handled by Stripe directly — we never see your card details), Stripe customer ID |
| Apple App Store / StoreKit | iOS in-app purchases & subscriptions | Apple-managed transaction IDs and product IDs (no payment details ever reach our servers) |
| Google AdMob (optional, future) | Rewarded video ads (only if enabled) | None until you opt in via the iOS App Tracking Transparency prompt |
Each third-party service operates under its own privacy policy:
7. Data Sharing
We do not sell your personal data. We never have and never will.
We may disclose data if required to do so by law, regulation, or court order. We do not share your data with advertisers, data brokers, or any other third parties beyond the processors listed above.
8. Data Retention and Account Deletion
- Active accounts — your data is retained for as long as your account remains active.
- Account deletion — you may delete your account at any time via the Profile screen within the App. Deletion cascades through our systems: all rows associated with your user ID in DynamoDB (game stats, leaderboard entries, preferences, subscription records, power-up balances) are removed, and your AWS Cognito user record is permanently deleted. The process completes within 30 days.
- Active subscriptions — if you have an active paid subscription, you must cancel it separately through Apple (App Store → Settings → Subscriptions) or Stripe (Customer Portal) before deleting the account, or you will continue to be billed.
If you cannot delete via the App for any reason, email privacy@wolftechnologies.co.uk and we will action the deletion manually.
9. Your Rights (UK GDPR / DPA 2018)
Under the UK GDPR and the Data Protection Act 2018, you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data rectified.
- Have your data erased ("right to be forgotten").
- Restrict or object to certain processing.
- Receive a copy of your data in a portable format.
- Withdraw consent (where processing is based on consent) at any time.
To exercise any of these rights, contact us at privacy@wolftechnologies.co.uk. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
10. Children
Block Blast is rated 4+ and is suitable for all ages. We do not knowingly collect personal data from children beyond the minimum needed to operate an account (email address and optional display name), and we do not engage in targeted data collection, behavioural advertising, or profiling of any user, including children. If you are a parent or guardian and believe a child under 13 has created an account without your consent, contact privacy@wolftechnologies.co.uk and we will delete the account.
11. International Transfers
Your data is stored in the United Kingdom (AWS eu-west-2). Where third-party processors (Stripe, Apple) operate from outside the UK, they do so under standard contractual clauses or equivalent transfer mechanisms compliant with UK GDPR.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notice, and the effective date above will be updated.
13. Contact Us
Wolf Technologies Ltd
Privacy enquiries: privacy@wolftechnologies.co.uk
General support: support@wolftechnologies.co.uk