Privacy Policy
BLCKSITE is run by REPLACE ME — your full legal name, an individual. This is the honest, complete list of what is collected and who else sees it. There is no advertising network, no analytics product, and no tracking of you across other websites.
1. What is collected
Your email address, because it is how you sign in and how an account is recovered.
What you choose to show — squad name, country, clan, equipped title and card, profile comments, chat messages. All of this is visible to other players by design; that is what a profile is.
Gameplay data — levels, currencies, items, battles, missions, clan activity. It is the game state; without it there is no game.
Technical logs — IP address, browser type, and timestamps of requests, kept briefly by the hosting provider for security and debugging.
Purchase records — what you bought and when. Card details are never seen or stored here; they go directly to the payment processor.
2. Who else processes it
These are the only third parties involved:
| Who | What they hold | Why |
|---|---|---|
| Supabase | Account, email, all game data | Database and sign-in |
| Vercel | Request logs, IP addresses | Hosting the site |
| Google Cloud Translation | Chat messages sent for translation | Translating chat between languages |
| REPLACE ME — Paddle or Lemon Squeezy | Name, email, billing country, card details | Taking payment as merchant of record |
Nothing is sold, rented, or shared with anyone else. There is no advertising and no data broker.
3. Chat translation, specifically
When a chat message is translated, its text is sent to Google Cloud Translation. Do not put anything private in chat — treat it as public, because it is visible to other players regardless.
4. Cookies and local storage
A cookie keeps you signed in. Local storage remembers small conveniences like which tab you last had open. There are no advertising or tracking cookies, and nothing follows you to other sites.
5. How long it is kept
Game data lives as long as your account does. Chat messages, notifications and activity feed entries are pruned automatically after 30 days. Direct messages are not pruned — a conversation that deleted itself would be worse than none — so they are kept as long as both accounts exist. They are never translated or sent anywhere else, and an admin sees one only when a participant reports it, and then only the last 20 messages. Purchase records are kept as long as tax and accounting rules require, which is longer than the rest.
6. Your rights
Email REPLACE ME — support@yourdomain and you can ask for: a copy of your data, a correction, or deletion of your account and everything attached to it.
Deletion is permanent and cannot be undone — progress, items and purchases go with it. Requests are handled within 30 days.
Some records must be kept after deletion where the law requires it, notably purchase records for tax purposes. Those are kept in isolation and are not used for anything else.
Depending on where you live, you may also have the right to object to processing, to portability, or to complain to a data protection authority.
7. Children
The game is not for anyone under 13. No account is knowingly created for a child below that age, and any that comes to light is deleted. If you believe a child has an account, email the address above.
8. Where data is held
Servers are operated by Supabase and Vercel and may be located outside your country, including in the United States. Using the game means accepting that transfer.
9. Security, honestly
Passwords are handled by the authentication provider and never stored here. Access to player data is restricted at the database level.
This is a small game run by one person, not a bank. Reasonable care is taken and no system is guaranteed secure. Use a password you do not use anywhere else.
10. Changes and contact
Material changes will be announced in the game through the dev updates panel. Anything at all: REPLACE ME — support@yourdomain.