Privacy Policy

01Who is the controller

The controller of your personal data in the game Blitzia Ball (the Android app published on Google Play), its servers and this website is:

Owner: Ruben Alvarez Moreno
Tax ID (NIF): 08899509G
Address: Calle Madres Agustinas, 36, 06340 Fregenal de la Sierra (Badajoz), España
Contact email (also for privacy): soporte@blitziaball.com

We have not appointed a data protection officer because, given the type and volume of processing, the law does not require one; any privacy question is handled directly by the owner at the email above.

In this policy, “we” means the owner above and “you” means anyone who plays Blitzia Ball or visits this website.

02Summary

The essentials

You play as a guest: your account is created automatically the first time you open the game, with a randomly generated installation identifier and device key. We do not ask for your email, a password, your phone number or your real name.
Your player name and your avatar (one of your cards) are public to other players. You can change your name; after the first change, at most once every 7 days.
We ask for your date of birth to adapt the game to your age, but we only store the year and month (never the day) and the age band derived from them. Blitzia Ball is for players aged 13 and over: if the date shows you are younger, you cannot play and we do not store the date.
If you link Google Play Games (it is optional), we only store the identifier Google gives us to recognise your account, never your password or email (more detail).
Your game is saved on our servers so you don't lose it and can recover it on another phone.
Real-money purchases (crystal packs and the premium Tide Pass (Pase de Mareas)) are optional, only for players aged 18 or over, and are charged by Google Play: we never see your card. We keep a record of each purchase to deliver it, handle refunds and comply with the law (more detail).
Usage statistics are our own (no third-party services) and are only collected if you say yes: we ask you after your first match if you are 16 or over (and, if you say no, at most once more after six months), and you can change it at any time in SETTINGS (AJUSTES)›SHARE USAGE STATISTICS (COMPARTIR ESTADÍSTICAS DE USO). If you are under 16, never.
In club chat you can report a message (a person reviews it) and mute any player (only on your phone).
We do not sell your data. The game has rewarded videos from Google AdMob that only play if you tap to watch one; there are never ads that interrupt play. In Europe, Google first asks whether you accept personalised ads, and you can change your choice in SETTINGS (AJUSTES)›PRIVACY & LEGAL (PRIVACIDAD Y LEGAL)›AD PRIVACY (PRIVACIDAD DE ANUNCIOS). If you are under 16, they are never personalised (more detail).
If you join the beta at blitziaball.com/en/beta, we store the email of your Google Play account, that you are 16 or older and whether you have Android, only for the beta and to let you know when the game launches. You can unsubscribe (and we delete it) from the link in any of our emails.
The image you create with SHARE (COMPARTIR) is made on your phone and opened with Android’s share menu: we do not upload it to our servers.
You can delete your account at any time in the game (SETTINGS (AJUSTES)›ACCOUNT (CUENTA)›DELETE ACCOUNT (BORRAR CUENTA)) or from blitziaball.com/en/delete-account, and ask us to delete only part of your data without deleting the account.

03What data we process

Category	What it includes	Source
Account identifiers	Your player ID (a random code), a random installation identifier created by the game (not your IMEI or your device's advertising ID) and a secret key for that device, of which we only store a cryptographic fingerprint (hash). Session tokens (also stored only as a fingerprint on the server).	Created by the game the first time you open it.
Google Play Games (optional)	If you choose to link it, the stable identifier of your Google account or Play Games profile that Google provides, stored with your player ID, so you can recover your progress on another phone. Google may also send us your public Play Games name, but we do not store it. We never receive your password, email or contacts (see how it works).	Google, when you tap LINK WITH GOOGLE PLAY GAMES (VINCULAR CON GOOGLE PLAY GAMES) or sign in with I HAVE AN ACCOUNT (YA TENGO CUENTA).
Player profile	Player name (visible to other players); your avatar, that is, which card from your collection you choose as your profile picture (we only store that card’s identifier; it is also visible to other players); the date of your last name change and how many times you have changed it, to apply the limit of one change every 7 days; chosen nation, friend code and club details.	You.
Age	Year and month of birth and the resulting age band (13-15, 16-17, 18+). We do not store the day: the game only uses it at that moment to work out your age. If the date shows you are under 13, it is neither stored nor sent: the phone only remembers, for 24 hours, that this step is locked. For ages 13 to 15, the game remembers that you have seen the notice for your family. For real-money purchases, the phone stores the month you turn 18 (or, if it does not know it, your answer to “Are you 18 or over?”).	You, when you start playing.
Progress and matches	Cards, levels, in-game currency and items, trophies and division, match results and duration and the mode each match was played in (A · Classic or B · Duels), missions, rewards, friends and clubs, and the snapshot of your squad used in duels against other players.	Your activity in the game.
Cloud save	A copy of your game (progress, pass, events, tutorials and game settings such as volume or language) and up to 5 previous versions, with the game version and a short fingerprint of the device that uploaded it, to resolve conflicts between phones and restore it if something goes wrong. It never includes passwords or keys.	The game, automatically.
Content you share (optional)	Club chat messages, the name and description of any club you create, and card requests or donations. Club names and descriptions go through a word filter.	You, only if you use these features.
Purchases	In-game purchase history (with in-game currency) and, for real-money purchases (crystal packs and the premium Tide Pass (Pase de Mareas)), the product and quantity, the crystals delivered or the Pass season unlocked, the Google order ID (GPA.…), the Google Play purchase token and its fingerprint (SHA-256), the purchase type (normal, test or promo code), the date of purchase, delivery and acknowledgement to Google, your player ID and, if Google refunds or voids it, when, the reason and source given by Google and what was removed from your account. With each purchase we send Google an encrypted fingerprint of your player ID to prevent fraud. Payments are handled by Google: we never see your card or Google account details (see how it works).	The game and Google Play.
Reward codes	The codes you redeem, when, and what you received. If an attempt fails: the text entered, the result and, to stop attacks, an encrypted fingerprint (HMAC) of your IP address.	You, when you redeem a code.
Technical data and error logs	IP address and technical data about each connection (date and time, what is requested from the server, the response and the client identifier sent by the app), in the technical logs of the server and of our hosting provider’s delivery network, and the errors that occur on the server while serving the game. Game crashes on your phone (the type of error or freeze and where in the game it happened, never the error text) only reach us as part of the usage statistics, if you agree to them. Your phone model, OS version and language only reach us if you attach them to a support request or with the usage statistics; the game version also comes with the cloud save and chat reports. To limit abuse (for example, too many submissions in a row) we use encrypted fingerprints of the IP address, never the IP itself.	Your device, automatically.
Usage statistics (only if you agree)	Game events (for example, screen opened, match started or finished and its result, pack opened, card upgraded, coins earned or spent, purchase made or game error) and, for each match, how it was played (the mode, A · Classic or B · Duels, division and opponent difficulty, score and goals with their second and type, possession, shots and other statistics for both teams, controls you use, pauses and substitutions) and how the game ran on your phone (frames per second, loading time, graphics quality and your phone's memory and number of processor cores, rounded) and, if the game fails, freezes for more than 5 seconds or closed abruptly the previous time, the type of failure, which part of the game's code and which screen or mode it happened in (without the error text), how many times and how long the freeze lasted, together with rounded memory, system version and the phone's graphics processor family (never the model), with the date and time, a random installation ID used only for statistics (different from your account's, and replaced if you turn statistics off), your player ID if you are signed in, the game version, platform, language and the country from your phone's regional settings (never from your IP address or location). They do not include your name, email or anything you type. We collect them with our own tools, without third-party analytics services. Until you answer, what happens in the game stays only in your phone's memory and is discarded if you say no or close the game. Your answer, when you gave it and at which moment you were asked are stored on your phone and, if you play with an account, also in your account.	The game, only if you say YES to the question after your first match or in SETTINGS (AJUSTES)›SHARE USAGE STATISTICS (COMPARTIR ESTADÍSTICAS DE USO). Never for players under 16.
Chat reports	If you report a message: the reason you choose, anything you add, your player ID and the author's, a copy of the message and of the 3 previous messages in that club chat (with their names and times), the club name, the game version and the date. If someone reports one of your messages, the same data about you. We never tell anyone who reported them.	You, when you tap REPORT (DENUNCIAR) in chat.
Muted players	The list of players you mute in chat. It is stored only on your phone: it never reaches us and nobody else sees it.	You.
Closed beta (only if you sign up on the website)	The email of your Google account (the one you use on Google Play), that you have stated you are 16 or older, whether you have an Android phone, the page language, when you signed up, when you confirmed and, if you are picked, when we invited you, the version of the text you accepted and which link you came from (for example, our Instagram). Of the confirmation link we only keep an encrypted fingerprint and, to stop abuse, an encrypted fingerprint (HMAC) of your IP address that is deleted after 30 days (never the IP itself). If you are not 16 or do not agree, nothing is stored. Beta invites: each sign-up has a random invite code (not derived from your email) for your personal link `blitziaball.com/beta/?ref=…`. If someone signs up with your link, we store which sign-up invited them and whether they confirmed their email; we use this only to count your confirmed invites (up to 20) and give you both the launch reward. We don't share it, your friend can't see your email and you can't see theirs. The counter on your confirmation page can only be read with the private key from your confirmation link. The code and the relationship are deleted together with your sign-up.	You, in the form at blitziaball.com/en/beta.
Ads: rewarded videos (processed by Google)	Collected directly on your phone by the Google AdMob ads SDK (not by our server): your phone's advertising ID, IP address (from which Google infers an approximate location), device and app data (for example, model, operating system, language and game version), your interactions with ads (loaded, viewed, completed or tapped), the SDK's own diagnostic data and your consent choice (the IAB TCF consent string). We receive none of this: the game only knows whether you finished the video, to give you the reward, and counts the videos watched as part of your progress to apply the reward limits. From AdMob we only see aggregate ad and revenue reports, with no player data. See section 10.	Google's SDK on your phone, when the game prepares or shows a video.
Support and feedback	Whatever you tell us (the type of message and its text) and your email if you give it to us. If you write from the game with the “Attach technical data” box ticked: game version, phone model and system, language, the screen you were on and your player ID. If you use the web form: your player ID if you enter it and, to stop spam, an encrypted fingerprint (hash) of your IP address, deleted after 30 days (we never store the IP itself). If you email us, your email address and whatever you send.	You and your device.

We do not collect your real name, phone number, contacts, precise location, photos or recordings. Your device's advertising ID never reaches our servers: it is only used by Google's ads SDK (see section 10). We do not process special categories of data (health, beliefs, etc.).

Sharing a result. If you tap SHARE (COMPARTIR) at the end of a match, the game creates the image on your own phone and opens Android’s share menu so you can choose which app to send it with. We do not upload it to our servers or keep it ourselves. It stays on your phone (on recent Android versions, in your gallery, in the Pictures/BlitziaBall folder), where you can delete it. Whatever you do with it in the app you choose is governed by that app’s terms.

Signing in with Google Play Games

Linking your account with Google Play Games is optional and lets you recover your progress on another phone or after reinstalling the game. If you do not link it, you keep playing as a guest.

When you tap LINK WITH GOOGLE PLAY GAMES (VINCULAR CON GOOGLE PLAY GAMES) (in SETTINGS (AJUSTES)›ACCOUNT (CUENTA)) or I HAVE AN ACCOUNT (YA TENGO CUENTA), the game asks Google for a one-time code and sends it to our server, which exchanges it directly with Google (OAuth sign-in, with only the basic “openid” identity permission). Google returns a stable identifier of your Google account or Play Games profile, which we store linked to your player account. If Google also sends us your public Play Games name, we do not store it.
We never receive your password, email, contacts or Google friends list.
When you open the game, Google Play Games may sign you in to Play Games automatically (Google requires this for games that use Play Games). That sign-in is a Google service, handled under the Google Privacy Policy; nothing reaches us until you decide to link your account.
Legal basis: performance of the contract, at your request. The link is deleted when you delete your account.

Real-money purchases (Google Play)

Blitzia Ball is free. Real-money purchases are optional and only for players aged 18 or over: the game does not let younger players buy and, if our server knows from your date of birth that you are a minor, it does not deliver the purchase and Google refunds you. You can buy: crystal packs (100, 500, 1,200 and 6,500 crystals, at €0.99, €4.99, €9.99 and €49.99 in Spain) and the premium Tide Pass (Pase de Mareas) (€2.99 per season). Google Play always shows you the final price, including taxes, before you pay.

Payment is processed by Google Play (Google Play Billing), as an independent controller and under its terms. We never see your card or Google account details.
After payment, the game sends the purchase token to our server, which checks with Google (using the Google Play Developer API and a restricted-access service account) that the purchase is genuine and paid before delivering your crystals or unlocking the Pass, and then acknowledges it to Google. We store the purchase data listed in section 03; each token can only be redeemed once.
Refunds and chargebacks: our server regularly checks Google's list of refunded or voided purchases and removes what was bought: it takes back the crystals from that purchase (at most down to a zero balance) or locks the premium Tide Pass for that season again (rewards you already claimed are not taken back).
Retention: while your account exists and, if you delete it, the record of each purchase is kept unlinked from your profile (without your player ID) for the period required by accounting and tax law (see section 05).
Legal basis: performance of the contract (delivering what you buy and handling refunds), legal obligation (accounting and tax records) and legitimate interest in preventing fraud (so a purchase cannot be redeemed twice).

Summary by category (as in the Google Play listing)

In the “Data safety” section of Google Play we declare these categories. Those collected by the Google AdMob ads SDK (advertising ID, approximate location, ad interactions and the SDK's diagnostics) are declared as shared with Google for advertising, analytics and fraud prevention. No other category is shared with third parties for their own purposes (our hosting provider processes data on our behalf, and Google Play processes payments and sign-in when you ask it to). All of it is encrypted in transit (HTTPS) and none is processed ephemerally. Each purpose and its legal basis is detailed in section 04, and retention periods in section 05.

Category	What it is in Blitzia Ball	Purpose and legal basis	How long	Required?
Name	Your player name (public).	Game features and account management. Contract.	As long as your account exists.	Yes
User IDs	Player ID and friend code (and, if you link it, the identifier of your Google account or Play Games profile).	Game features, account management, fraud prevention and security, and statistics. Contract and legitimate interest; usage statistics, with your consent.	As long as your account exists.	Yes (Google Play Games: no)
Other personal info	Year and month of birth and age band.	Adapting the game to your age, security and compliance (protecting minors). Legal obligation and legitimate interest.	As long as your account exists.	Yes
Purchase history	Purchases with in-game currency and with real money (product, quantity, what was delivered, dates, order, Google Play purchase token and whether it was refunded or voided).	Delivering what you bought, verifying it with Google, handling refunds, preventing fraud and aggregate Shop statistics. Contract, legal obligation and legitimate interest.	As long as your account exists; afterwards, unlinked from your profile, the period required by accounting and tax law (up to 6 years).	Yes, if you buy
Other in-app messages	Your club chat messages (and, if you report one, the report).	Chat and its safety (filter, moderation and reports). Contract, legitimate interest and legal obligation.	180 days; reports, 12 months after they are resolved.	No
Other user-generated content	Club name and description, card requests and donations.	Club features and safety (word filter). Contract and legitimate interest.	As long as your account (or the club) exists.	No
App interactions	Your game: matches played (result, duration and mode, A · Classic or B · Duels), progress, missions and rewards; with your permission, also the usage statistics events. Separately, the Google AdMob SDK collects your interactions with ads (shared with Google).	Game features and statistics: aggregate match figures to balance the game and compare the modes (legitimate interest); detailed events, only with your consent. Ad interactions: showing and measuring ads and preventing fraud (see section 10).	As long as your account exists; statistics events, 13 months. Ad interactions are kept by Google.	Yes (statistics events: no)
Crash logs	Server errors while serving the game and, with your permission, game crashes on your phone (type and place of the error, without its text). Google's ads SDK sends its own crash logs to Google.	Fixing bugs and statistics. Legitimate interest (server) and consent (phone).	Up to 30 days (server); 13 months (statistics).	Phone crashes: no
Diagnostics	Frames per second, loading time, graphics quality (and whether the game adjusted it automatically), phone memory and cores (rounded), game errors and freezes, system version and graphics processor family. Google's ads SDK sends its own diagnostic data to Google (shared with Google).	Performance statistics. Consent. The ads SDK's: running the ads and preventing fraud.	13 months. The ads SDK's are kept by Google.	No: only with usage statistics (the ads SDK's: yes)
Device or other IDs	A random installation identifier the game creates for your account (not your IMEI or advertising ID) and a different one used only for statistics. Also your phone's advertising ID, used only by the Google AdMob SDK (shared with Google; it never reaches our servers).	Game features, account management, security and statistics. Contract and legitimate interest; the statistics one, consent. The advertising ID: ads (personalised only with your consent), their measurement and fraud prevention.	As long as your account exists; the statistics one, 13 months (and it changes if you turn them off). You control the advertising ID in your Android settings.	Yes (statistics one: no)
Approximate location	Only what Google infers from your IP address when the AdMob SDK requests an ad (shared with Google). We do not work out your location.	Showing ads suited to your country or region, applying each region's consent rules and preventing fraud. See section 10.	Kept by Google, under its policy.	Yes (used by the ads SDK when preparing a video)
Email address	Only if you type it when sending us a question or suggestion.	Replying to you. Contract and legitimate interest.	Up to 24 months after the request is closed.	No

04Purposes and legal bases

Purpose	Legal basis (Art. 6 GDPR)
Create and maintain your guest account, manage your profile (name, avatar and the name-change limit), save and sync your progress in the cloud and let you recover it with Google Play Games.	Performance of the contract (the Terms of Service).
Online and social features: matches in the mode you choose (A · Classic or B · Duels), leagues, duels against other players, friends, clubs, chat, card requests and donations, and leaderboards.	Performance of the contract.
Link your account with Google Play Games, if you ask us to, and let you sign in with it on another phone.	Performance of the contract (at your request).
Process purchases, verify with Google that they are genuine before delivering them, acknowledge them to Google, deliver what you bought and handle pending payments, refunds, chargebacks and cancellations.	Performance of the contract.
Redeem reward codes and apply their conditions (dates, number of uses, one redemption per account).	Performance of the contract.
Keep the purchase records required by tax and commercial law and, unlinked from your profile if you delete your account, prevent the same purchase from being redeemed twice and handle claims and refunds.	Legal obligation (accounting and tax law) and legitimate interest in preventing fraud and defending claims.
Adapt the game to your age and protect minors: not letting children under 13 play, showing a notice for families of players aged 13 to 15 and, under 16, no personalised ads or statistics.	Legal obligation (Art. 8 GDPR and Art. 7 of Spanish Organic Law 3/2018) and legitimate interest in protecting minors.
Security: prevent cheating, fraud (including in purchases and codes) and abuse, moderate chat and names, review chat reports and notices of illegal content and enforce the Terms.	Legitimate interest in a safe and fair game, and legal obligation as regards content moderation.
Aggregate figures from the data the game already needs in order to work (matches played in each mode and their results, Shop purchases, server errors) to balance the game, compare the two modes and detect bugs. We only look at totals and averages, not at what a specific person does, and we do not use them for advertising or to decide anything about you.	Legitimate interest in keeping the game balanced, fair and bug-free. You can object (see Your rights).
Technical and usage statistics to fix bugs and improve game balance (for example, finding the tutorial step where players get stuck, whether a reward is too high, whether too many goals are scored in a division, how each mode is played or whether the game runs slowly on some phones). We only look at aggregate figures, never at what a specific person does, and we do not use them for advertising or to decide anything about you.	Your consent (Art. 6(1)(a) GDPR and Art. 22.2 of Spanish Law 34/2002, LSSI-CE, because an identifier is stored on your phone). We ask with two equal options and neither pre-selected; saying no changes nothing in the game. You can withdraw it at any time in SETTINGS (AJUSTES)›SHARE USAGE STATISTICS (COMPARTIR ESTADÍSTICAS DE USO) (see Your rights). They are off, and cannot be turned on, for players under 16.
Store in your account your answer to the usage statistics question (yes or no, when, and at which moment you were asked) so it is respected on all your devices and your decision can be demonstrated, and count in aggregate how many people accept. Kept while your account exists.	Legal obligation (Art. 7(1) GDPR: being able to demonstrate consent).
Run the closed beta: confirm your email, pick the testers among those with Android, add their email to the Google Play tester list (so Google can send them the invite and let them install the test version) and write to you about the beta; and email you when the game launches. We do not use it for advertising or anything else.	Your consent (Art. 6(1)(a) GDPR and, for the launch notice, Art. 21 of Spanish Law 34/2002, LSSI-CE), which you give by ticking the box in the form, which is not pre-ticked, and confirming from the email we send you. You can withdraw it at any time with the “Unsubscribe” link in any of our emails: we delete your sign-up right away.
Answer your questions, suggestions and bug reports, and your privacy requests.	Performance of the contract, legal obligation and legitimate interest in improving the game with what you tell us.
Show you Google AdMob rewarded videos when you tap to watch one, measure them and prevent ad fraud (see Advertising).	Personalised ads and use of the advertising ID for them: your consent (Art. 6(1)(a) GDPR and Art. 22.2 of Spanish Law 34/2002, LSSI-CE), which Google asks for with its message and which you can withdraw at any time in SETTINGS (AJUSTES)›PRIVACY & LEGAL (PRIVACIDAD Y LEGAL)›AD PRIVACY (PRIVACIDAD DE ANUNCIOS). Non-personalised ads, their measurement and fraud prevention: legitimate interest in offering the game for free with optional ads. Never personalised for players under 16.

Where the basis is legitimate interest (security, moderation, reports and aggregate game figures), we have checked that your rights do not override it: the data is minimal, uses random identifiers, is not shared with third parties and you can object. With non-personalised ads, Google does not use your data to build advertising profiles, and the purchase records we keep after an account is deleted no longer contain your player ID. We do not send you marketing emails or text messages (except, if you join the beta, the beta emails and the launch notice); news and offers only appear inside the game.

The server automatically checks match results and in-game economy operations to prevent cheating and may reject an impossible result. We do not make automated decisions with legal effects on you: account sanctions are decided by a person. If you think a decision is wrong, write to us and a person will review it.

05How long we keep it

Data	Period
Account (including the Google Play Games link), profile (including your avatar and the date of your last name change), progress (including the premium Tide Pass seasons you bought), match history (with its mode), card requests and donations, and cloud save	As long as your account exists. If you delete it, it is removed from our database immediately. Of the cloud save we only keep the 5 most recent previous versions. If an account is not used for 24 consecutive months, we may delete it.
Sessions	Access expires after 24 hours and the session after 180 days. Records of expired sessions are deleted after 30 days.
Club chat messages	180 days after they are written, or until you delete your account if sooner.
Usage statistics	They only exist if you agree. 13 months from each event; if you delete your account, the statistics linked to it are deleted too. Daily summaries without any identifier (for example, "matches played on day 3") are kept for up to 25 months.
Chat reports	12 months after they are resolved (or received, if they never needed resolving). If you delete your account your ID is removed from them, but the copy of the reported message is kept until then so the report can be handled and, if necessary, passed to the authorities.
Age lock (under 13)	24 hours, only on the phone (it does not include the date).
Reward codes	Redemptions, as long as your account exists (so a code cannot be used twice). Failed attempts and their IP fingerprint, 30 days.
Technical logs (including IP) and anti-abuse IP fingerprints	Up to 30 days, unless needed to investigate a specific security incident.
Support requests and feedback	Up to 24 months after the request is closed (or received, if it never needed closing); the IP fingerprint from the web form, 30 days. Those sent from the game are also deleted if you delete your account. Requests to exercise your rights are kept for up to 3 years so we can prove we handled them.
Real-money purchases	As long as your account exists. If you delete it, the record of each purchase (product and quantity, what was delivered, dates, order ID and Google purchase token, and whether it was refunded or voided) is kept unlinked from your profile (without your player ID), restricted and only to meet accounting and tax obligations, handle claims and refunds and prevent the same purchase from being redeemed twice, for the period required by accounting and tax law (in Spain, generally up to 6 years: Art. 30 of the Spanish Commercial Code). After that, it is deleted.
Ad data (Google AdMob)	We do not store it: Google keeps it under its privacy policy. Your consent choice is stored on your phone until you change it or clear the game's data (for example, by uninstalling it).
Beta sign-up	If you do not confirm it, it is deleted after 8 days. Once confirmed, until 3 months after the game launches on Google Play (so we can let you know) and at most 18 months after you signed up. If you unsubscribe, it is deleted right away. The IP fingerprint, 30 days.
Backups	Overwritten within 30 days at most.

06Who we share it with

We do not sell your data. We only share it with:

Hostinger (Hostinger International Ltd., Cyprus, and its group companies), our hosting provider, which runs the game's servers, this website and the support mailbox as a processor, under a data processing agreement (Art. 28 GDPR) that requires it to protect the data and use it only on our instructions. Our servers are in a data centre in the European Union. To provide its service, Hostinger in turn uses other providers (sub-processors), such as its content delivery network and email delivery and filtering services, which process technical data such as IP addresses.
Google (Google Ireland Limited and its affiliates), in these services:
- Google Play: distributes the game and, with Google Play Billing, processes payments as an independent controller (your payment relationship is with Google, under its terms). We send it each purchase's token and an encrypted fingerprint of your player ID, and its developer API confirms to us whether the purchase is valid and tells us about refunds and cancellations.
- Google Play Games: if you link your account, it verifies your identity (we send it the one-time code Google gives you when linking). The automatic sign-in to Play Games when you open the game is a Google service.
- Google AdMob: the provider of the rewarded videos. Its SDK collects the data listed in section 10 directly on your phone, and Google processes it under its terms as an independent controller (or, in some cases, as a processor). It is the game's only ad network: we use no mediation platforms or other networks.
- Google Play Console: if you are picked for the beta, it receives your email on the tester list to send you the invite and let you install the test version.
Its use of data is governed by the Google Privacy Policy and, for ads, by How Google uses information from sites or apps that use its services.
Other players, who see what the game shows publicly: your player name, your avatar, nation, trophies, level, club, the squad used in duels and your messages in your club chat.
Public authorities, judges and courts when the law requires it.

If we add other providers in the future (for example, other ad networks or crash reporting), we will list them here, with what each one does, before we start using them.

07International transfers

Our servers are in the European Union. Some providers may process data outside the European Economic Area (for example, in the United States or the United Kingdom):

Google (Google Play, Google Play Games and Google AdMob), with the safeguards required by the GDPR: the EU-U.S. Data Privacy Framework, under which Google is certified, and the standard contractual clauses approved by the European Commission.
Hostinger's sub-processors (delivery network, email), under the European Commission's standard contractual clauses included in its data processing agreement, or the relevant adequacy decision (for example, the one for the United Kingdom).

You can ask us for more information about these safeguards at the contact email.

08Your rights

You can exercise these rights at any time, free of charge:

Access: know what data about you we process and get a copy.
Rectification: correct inaccurate data (for example, a wrong date of birth: as the game does not let you change it, write to us).
Erasure: delete your account and data. You can do it yourself in the game or as explained in Delete your account.
Objection to processing based on legitimate interest (for example, security, chat moderation or aggregate game figures).
Restriction of processing while a complaint is being resolved.
Portability: receive the data you gave us and your saved game in a structured, commonly used format (JSON).
Withdraw your consent where processing is based on it, without affecting prior processing. For usage statistics, just set SETTINGS (AJUSTES)›SHARE USAGE STATISTICS (COMPARTIR ESTADÍSTICAS DE USO) to NO: any statistics waiting to be sent are deleted too. For personalised ads, SETTINGS (AJUSTES)›PRIVACY & LEGAL (PRIVACIDAD Y LEGAL)›AD PRIVACY (PRIVACIDAD DE ANUNCIOS) reopens Google's message so you can change your choice; you can also reset or delete your phone's advertising ID in the Android settings. For the beta, the “Unsubscribe” link in any of our emails: we delete your sign-up.
Not to be subject to decisions based solely on automated processing with legal or similarly significant effects (see section 04).

Email us at soporte@blitziaball.com with your player ID (in the game: SETTINGS (AJUSTES)›ACCOUNT (CUENTA)›ID›COPY (COPIAR)) and the right you want to exercise. As we do not ask for contact details when you play, we will ask for what we need to confirm the account is yours and reply within one month (extendable by two further months for complex requests, in which case we will let you know). If you are under 14, your parent or guardian can exercise these rights for you.

You can also manage the data that Google processes as controller (Google Play payments, your Google Play Games account and AdMob ad data) directly with Google, for example from your Google account.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency, Agencia Española de Protección de Datos (www.aepd.es), or to the data protection authority of your EU country of residence. We would appreciate it if you wrote to us first so we can try to solve it.

09Children

Blitzia Ball is for players aged 13 and over. When you start playing we ask for your date of birth (with no date pre-filled) to adapt the game to your age. We only store the year and month and the resulting age band. We have a guide for families with the essentials.

If the date shows you are under 13, the game does not let you play and neither stores nor sends the date. That step stays locked for 24 hours on that phone; if you made a mistake, you can correct it after that or by writing to us.
If you are under 14, you need permission from your parent or legal guardian to play and for us to process your data (in Spain, 14 is the minimum age to consent on your own). For ages 13 to 15, the game shows a notice for your family with the essentials and a link to the guide for families.
If you are under 16, the game tells Google that you are under the age of consent: you will never see personalised ads, Google does not ask for your consent to them or use your data to build advertising profiles, and videos are limited to content suitable at most with parental guidance (Google's PG rating). The game also does not collect usage statistics (and does not ask you).
The website beta is only for people aged 16 or older: if you do not tick “I am 16 or older”, nothing is stored.
We do not ask minors for any contact details. Club chat and names have automatic language filters. In chat, anyone can tap a message to report it (a person reviews it) or mute its author; you can also tell us from SETTINGS (AJUSTES)›FEEDBACK AND HELP (SUGERENCIAS Y AYUDA) or from Support. Never share your real name, where you live or other ways to contact you in chat.
Real-money purchases are optional and go through Google Play, which lets families require a password or approval for every purchase (Google Family Link and Google Play's authentication settings). Some packs have random contents: the game shows their odds before you buy or open them.

If you are a parent or guardian and believe your child gave us data without your permission, or that they are under 13 and playing, write to us and we will delete the account.

10Advertising

Blitzia Ball has optional rewarded videos from Google AdMob (Google Ireland Limited): a video only plays if you tap to watch it in exchange for an in-game reward (for example, energy, pearls or free Shop offers). There are never ads that interrupt play: no banners and no mandatory full-screen videos. AdMob is the game's only ad network; we use no mediation platforms.

What data Google processes

When you enter the game's main menu, Google's consent tool checks whether it needs to show you its message and then the ads SDK starts and prepares a video so it is ready when you ask for it, even if you never end up watching it. The SDK processes on your phone and sends to Google:

Android's advertising ID (the game declares the permission to use it) and, on phones that have them, Android's ad privacy features (Privacy Sandbox);
your IP address, from which Google infers an approximate location (country or region);
device and app data (for example, model, operating system, language and game version);
your interactions with ads (loaded, viewed, completed or tapped) and the SDK's diagnostic and crash data;
your consent choice (the IAB TCF consent string).

Google uses them to show and measure ads, prevent fraud and, only if you consent, personalise them. None of this data reaches our servers. More information: how Google uses information from apps that use its services and the Google Privacy Policy.

If you are in the European Economic Area, the United Kingdom or Switzerland, before any ad is loaded the game shows you, the first time, Google's consent message (based on the IAB TCF standard), with the options “Consent”, “Do not consent” and “Manage options”.
Personalised ads are only shown if you consent. If you do not, you will see non-personalised ads (based on context, such as the app or your country) or, if you do not accept information being stored on or read from your phone, limited ads that use no identifiers. Saying no changes nothing in the game: the rewards are the same.
You can change your choice at any time in SETTINGS (AJUSTES)›PRIVACY & LEGAL (PRIVACIDAD Y LEGAL)›AD PRIVACY (PRIVACIDAD DE ANUNCIOS), which reopens Google's message.
In any country, you can reset or delete the advertising ID in your Android settings (usually Settings › Privacy › Ads or Settings › Google › Ads). If you delete it, Google cannot use it.

Players under 16

If your date of birth shows you are between 13 and 15, the game tells Google that you are under the age of consent: you will never see personalised ads and will not be asked to consent to them. For all players, videos are limited to content suitable at most with parental guidance (Google's PG rating). The legal basis for each use is in section 04.

11Security

We apply technical and organisational measures appropriate to the risk: all communication between the game and the server is encrypted (HTTPS); your device's secret key and session tokens are stored encrypted on the phone and, on the server, only as a cryptographic fingerprint; sessions expire and are renewed securely; purchases are verified directly with Google, using a restricted-access service account whose key is only on the server; server access is restricted and we make backups. No system is infallible: if a security breach occurs, we will notify the Spanish Data Protection Agency within 72 hours where the law requires it and, if it poses a high risk to you, we will tell you.

12This website

This website uses no cookies, no browser storage, no analytics tools and no third-party fonts or services. Like any web server, our hosting provider's server (and its delivery network, which serves the pages faster and blocks attacks) records technical data about each visit, such as IP address and browser, for a limited time and for security.

The Support and beta forms send what you write directly to our server, without cookies. The Delete your account form sends nothing: it only prepares an email that you send from your email app.

Our YouTube channel and the YouTube API Services

We publish the game's official videos on our YouTube channel (@BlitziaBall). To upload them from our internal publishing tool we use the YouTube API Services, only with our own channel's account.

We do not use the YouTube API to access, collect, store or share data about the people who watch or interact with our videos.
When you watch or interact with our videos on YouTube, the YouTube Terms of Service and the Google Privacy Policy apply: YouTube (Google) processes that data as controller.
From the API we only store, encrypted on our server, the access permissions (tokens) of our own account and the channel name, so that we can publish. We delete them when the channel is disconnected and, at the latest, 30 days after we stop using the API. Any Google account can revoke an app's access in the Google security settings.

13Changes to this policy

If we change this policy, we will update the date and version above. For significant changes, we will let you know in the game before they apply and, where needed, ask for your agreement again.

What’s new in version 10:

Optional Google AdMob rewarded videos, with Google's consent message in Europe and use of your phone's advertising ID by Google's SDK; personalised ads only with your consent and never for players under 16 (sections 03, 04, 06 and 10).
Real-money purchases with Google Play: what we store about each purchase, how it is verified, what happens with refunds and chargebacks and how long it is kept (section 03 and 05).
How signing in with Google Play Games works (section 03).
The “Data safety” summary by category now includes approximate location and the data shared with Google for ads.

What’s new in version 9 (4 October 2026):

With statistics accepted, the error report now also includes freezes longer than 5 seconds, whether the previous session closed abruptly and the phone's graphics processor family.
New beta invites with a personal link (section 03).

What’s new in version 8 (2 October 2026):

New section on our YouTube channel and the YouTube API Services: we only use them to publish our videos and we do not process data about the people who watch them.

What’s new in version 7 (1 October 2026):

New processing: signing up for the closed beta at blitziaball.com/en/beta (the email of your Google Play account, your statement that you are 16 or older and whether you have Android), to run the beta and let you know when the game launches, with your consent and email double opt-in (sections 03, 04 and 05).
If you are picked as a tester, your email goes to Google for the Google Play invite (section 06).
Beta emails include an unsubscribe link that deletes your sign-up right away.

What’s new in version 6 (30 September 2026):

The usage statistics question now appears after your first match (not when you open the game) and, if you say no, at most once more after six months; with two equal buttons and no reward for accepting.
Your answer is also stored in your account, so it is respected on all your devices and can be demonstrated (Art. 7(1) GDPR, legal obligation). It is kept while your account exists.

What’s new in version 5 (30 September 2026):

A summary by category, matching the “Data safety” section of Google Play (section 03).
Profile: your avatar (the card you choose as your profile picture) and the date of your last name change, for the limit of one change every 7 days.
Matches: the mode each one is played in (A · Classic or B · Duels), in your match history and, if you agree to them, in the usage statistics.
A new purpose: aggregate figures from game data to balance the game and compare the modes, based on legitimate interest.
More detail on technical data and game crashes, which only reach us with the usage statistics.
The SHARE image is created on your phone and we do not upload it.

14Contact

For any privacy question: soporte@blitziaball.com, or by post to Ruben Alvarez Moreno, Calle Madres Agustinas, 36, 06340 Fregenal de la Sierra (Badajoz), España.