BLOCK HEROES · PRIVACY

Last updated: 30 October 2026

Block Heroes is a browser game. This page says what we keep about you when you play, why, for how long, and how to have it deleted. We do not sell data, show ads, or use analytics or tracking.

Who we are: Giulio Bavaresco, the controller of the data below. Contact: info@bitvial.com.

What we keep

Your account. Every visitor gets one from the first visit (a guest), so the matches you play count even if you never sign in: a random id, the name you play under with its number (Name#1234, how friends find you), a personal invite link, and when it was created and last used.
Your friends: the players you added or who added you, and your friend requests. While you are online your friends see where you are: in the menu, or in which match (mode, map, score, time left), and your party. This is not kept once you go offline.
Your clan (signed-in accounts only): the clan's tag, its members and their roles, when you joined and who invited you, the invites sent and received, and a log of what was done in the clan (joins, leaves, roles, tag changes), kept 180 days for moderation. The coins spent on a clan are kept in its record. A tag that was taken away for breaking the rules stays blocked.
If you sign in: your email address (sign-in by emailed link), or your Google account's id and, when used to link your account, verified email (Sign in with Google; we never see your Google password).
Your matches on our servers: mode, map, team, the champions you played, kills, deaths, assists, headshots, shots fired and landed, damage, score, MVP, time played, whether your team won, and your lifetime totals. They make your profile (overall, per mode and per champion) and your match history; other players can see your profile's stats and level (not your coins or gems). Rooms hosted by a player ("host a room") and matches against bots offline are not recorded: those stay in your browser only.
Your progress: online XP, level, coins, gems, challenge progress and claimed free-pass rewards, stored with your account so they persist across devices.
The internet address (IP) your account last used, and bans: only to keep banned cheaters and abusers out.
Invite links: to stop one person from making fake friends to win the invite rewards, we count at most one friend per internet address per week. For this we keep a fingerprint of the address you sign up from, not the address itself: a one-way code made with a secret key of our server, from which the address cannot be read back. We keep it 7 days at most. Your account also gets a group mark, a random code that only says that it and other accounts were signed up from the same address in the same week; it is deleted 30 days after the first of those accounts was signed up, always. Only whether each friend already counted for the invite rewards stays.
Chat: the chat works only on our servers, and every message passes through a filter there (rude words are starred out; slurs, threats, links, contact details and requests for personal information are not sent). We do not keep normal messages: the last ones of a match or party stay in the servers' memory for 10 minutes only, so that a report can include them. We keep the messages the filter starred out or stopped, with who wrote them and where, for 30 days, to protect players (especially younger ones) and to apply sanctions. Repeated or serious offences give strikes: the chat is muted (10 minutes, 1 hour, 24 hours), then the account is suspended (1, 3, 7, 30 days, then for good); you come down a step for every 30 days without a strike (90 after a suspension). We keep each strike, its sanction and the messages that caused it as you wrote them, for 180 days at most, so that a sanction can be checked and reviewed (write to the contact above if you think one is a mistake). We also keep your current chat points and mute, and the players you muted for yourself (until you unmute them or delete your account).
Reports: when a player reports another (cheating, the chat, an abusive name, griefing), the report goes to our admins with the room it came from and, for 90 days, what the reported player wrote there in the last minutes.
Sign-in: a random session token kept in your browser signs you in; our servers store only a hash of it. Emailed sign-in links work once, for 15 minutes; the tickets that seat you in a match, for a minute.
Error reports: when the game's page hits a script error, it sends our servers the error's text, the file and line, the game's version and whether you were in a match, at most five a visit, so we can fix it. They carry no account, name or address, and stay in the servers' log, which rotates within weeks.
Usage statistics: so we can see how the game is doing, our servers note when your account's page was connected (the start and end of each visit, as your account's random id, never your name, email or address), when a guest account first signs in and how (an email link, Google or Discord: the way, not the address), and the region and game version of each QUICK PLAY and how long it waited for a seat (without the account). To know roughly where players are (and where a new server would help), the country (and its continent) is read from the internet address your page calls our servers from, using a copy of DB-IP's free country table kept on our own server (no address is sent to anyone for this); only the two-letter country is kept with these statistics, never the address. Your page also measures its ping to each of our server regions (to pick the closest one) and our servers keep the lowest of the day with the same statistics. With each visit they also keep the game version, the kind of device (computer, phone or tablet: read from the browser's name, which is not kept), whether the page was hidden or closed, its lowest frame rate, the steps it went through (menu, waiting line, match and result, how a match was left, the tutorial's steps) and how its matches went, whether the page runs as the installed app or in an automated browser (those are left out of every number), the account's level, whether it came through an invite link or a party, when it left the waiting line, and how many filtered chat lines, mutes and reports it got (counts only), never a name or any text. Our admins see totals per day and per hour, and per-player numbers under a pseudonym or on the player's admin card. We analyze aggregated or pseudonymized gameplay statistics, including with AI tools; no names, emails, IP addresses or chat are included.

In your browser the game keeps its settings, local practice progress and your session token (local storage). It sets no cookies. Cloudflare, which serves our pages, keeps its bot checks and analytics off for us; only if it ever had to check that a visitor is not a bot could it set a strictly necessary security cookie of its own.

Why

To run the game and your account, and to keep your stats (what you asked for by playing).
To keep matches fair: cheat detection, reports and bans (our legitimate interest, and the other players').
To keep the chat safe: the filter, mutes and the 30-day record of filtered messages (our legitimate interest, and the other players' safety).

We use your email only to send the sign-in links you ask for.

Who else sees it

Other players see your name and number, your clan's tag, team and scores in a match; your friends also see where you are while you are online (above). Your clan's members see your level and whether you are online or in a match.
Leaderboards: once you sign in, your name (without the number) and your kills, wins, matches and K/D of the week and of the season on our servers can appear on the game's leaderboards, to everyone or to your friends. Guests never appear. A banned account or one waiting to be deleted leaves them at once; the weekly totals are kept 8 weeks.
Connections. In a match on our servers your browser connects directly to our server. In a room hosted by a player, it connects to that player's browser, which can see your IP address, like in any peer-to-peer game. Connections are set up through a signalling server, and when a direct connection is impossible the game traffic can pass through a relay (TURN) server.
Google, only if you use Sign in with Google (Google's privacy policy applies; Google's sign-in script loads only when you open the ACCOUNT panel).
Our providers: Cloudflare, which serves the game's pages; the hosting of our match servers (in the European Union); the service that delivers the sign-in emails. They process the data only for us.

How long

A guest account nobody has used for 180 days is deleted automatically, with its stats, in the same two steps as a deletion you ask for (below): hidden first, erased 30 days later.
A signed-in account: until you delete it.
Used sign-in links and tickets: deleted within a day. Sessions unused for a year: ended.
Invite links: the fingerprint of your sign-up address, 7 days at most; your group mark, 30 days at most.
Chat: normal messages are not stored; filtered messages are deleted after 30 days; the messages attached to a report, after 90 days; strikes and the messages behind them, after 180 days at most.
Usage statistics: the visits, the days you played (with their country and pings) and when you signed in for the first time, after 90 days, or 30 days after your account is deleted if that comes sooner; the daily totals (no account in them, by country too), after 400 days.
Bans last as long as they were given for; a ban on an address stays on that address until it ends.
Database backups expire after 14 days and are removed at the next nightly cleanup. Deleted information may remain in these copies until they expire; backups are used only to recover the service.

Your rights

See and correct: the ACCOUNT panel in the game's menu shows your name, how you signed in and your stats, and your profile (the card at the top left) your full stats and history; the name field in the menu renames you.
Delete: ACCOUNT → DELETE MY ACCOUNT signs you out everywhere and hides your account at once: nobody can find it, see your profile or have you as a friend, and nobody else can take your name and number; you leave your clan (if you led it, the lead passes to another member, and a restore does not bring you back into it). We keep its data for 30 days, so that a mistake can be undone: sign in again within those days (the same email, Google or Discord) and choose RESTORE, or write to the contact above. After the 30 days we erase your name and number, email, Google and Discord links, address, the invite fingerprint and group mark, sessions, stats, progress, friends, chat points, strikes, mutes and filtered chat messages (except those flagged as a possible danger to a child, kept until their own 30 days end) and your name on past matches. Past matches keep an anonymous entry, so the other players' history stays whole; what remains of the account is an anonymous id with no name or contact, and a ban if it had one (a ban on an address stays until it ends).
For anything else (a copy of your data, an objection, a question), write to the contact above. You can also complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Children

If you are under 14, ask a parent before signing in with an email or a Google account. The chat can be switched off in SETTINGS → GAME → CHAT (or limited to your team and party). Never share your real name, age, address, school, phone number or social accounts in a game: the chat blocks them, and a player who asks for them can be reported from the TAB board (REPORT → CHAT).

Countries from addresses: IP Geolocation by DB-IP (IP to Country Lite, licensed under CC BY 4.0).