Blastbound privacy policy

Effective date: 15 September 2026

PHT Company operates Blastbound: Online Bomber PvP (com.phtcompany.blastbound). Contact us at phtcompanysupport@gmail.com about your information or this policy.

Information used by the game

• Account and progress: player ID, chosen nickname, recovery email if you choose to add one, authentication credentials, progress, inventory, currencies, achievements, ranking and friends. Your nickname, equipped appearance and ranking may be visible to other players.
• Online play and security: match participation and results, network connection information including IP addresses, device/app identifiers and integrity verdicts, abuse reports and moderation actions. These support multiplayer, account protection and prevention of cheating or duplicate rewards.
• Purchases and rewards: Google Play product identifiers, order/transaction identifiers, purchase tokens, entitlement and verification status, ad reward verification identifiers and claim history. Google Play handles your payment; we do not receive your full payment card details.
• Advertising: Google Mobile Ads and its consent service may process device and advertising identifiers, IP-derived approximate location, ad interactions, diagnostics and consent choices according to your settings and applicable requirements. We do not request precise GPS location, contacts, microphone or camera access for gameplay.
• Local settings: language, sound, controls, notification choices and an age eligibility choice. Local reminders are scheduled on your device if you permit notifications. A recovery email is optional and used for account security, not marketing.

Why and with whom information is processed

We use the information to run and save the game, provide multiplayer and rankings, recover accounts, validate purchases and rewards, resolve support requests and protect players from abuse. Cloudflare hosts account and game services; Photon provides multiplayer connections; Brevo delivers requested verification messages; Google provides Play Billing, Play Integrity, advertising and consent services. These providers may process information in countries other than yours, subject to their terms and applicable safeguards. This is not a claim that all data they process is anonymous.

Advertising and age

The current game is intended for players aged 13 and over. The game uses an age eligibility screen and treats players who are not adults as under the age of consent for its advertising configuration. Where required, Google’s consent form lets you manage advertising choices, and privacy options remain accessible in settings. Optional rewarded ads grant only the stated reward after validation. We do not knowingly offer this version to children under 13. Contact us if you believe an underage player has provided personal information.

Retention and account deletion

Account and progress records remain while the account exists. You can delete your account in settings or request deletion without the app. Live account deletion removes the linked profile, recovery email, progress, inventory, balances, friends, rankings and active credentials. Expired verification codes, authentication records and technical rate-limit records are cleaned up periodically.

Unlinked purchase-token hashes are retained to prevent a previously used purchase being granted again. Retired credential hashes expire after ten years and let an old installation recognize deletion without restoring an account. Restricted security/moderation records may be retained to prevent abuse or meet legal obligations; account identity fields are removed from archived records when the account is deleted. Temporary backups and records held independently by Google or other providers may follow separate deletion and legally required retention cycles. We do not use retained records to recreate your deleted game profile.

Your choices and rights

You may play without adding a recovery email, manage notification permissions on your device, change available privacy settings, and request access, correction or deletion of your personal information. Depending on your location, you may have additional rights to restrict or object to processing, withdraw consent or complain to your data protection authority. Contact us using the address above; we may need to verify that the account belongs to you.

Security and external services

Connections to our account services use HTTPS. Recovery email contents are encrypted in the account database, verification codes expire and sensitive account actions require authentication. No service can guarantee absolute security. External links, including Discord, open third-party services governed by their own policies. You do not need to join Discord to play.

Changes

We may update this policy when the game or its services change. The effective date above identifies this version. Material changes will be communicated as required.