Bricklash 磚爆 Privacy Policy
Last updated: 2026-08-27
bricklash ("we", "us") respects your privacy. This policy explains how we collect, use, and protect your information when you use "Bricklash 磚爆" (the "App"). It is written to satisfy the GDPR, CCPA/CPRA, Taiwan's Personal Data Protection Act, and the disclosure requirements of the Apple App Store and Google Play.
1. Data Controller
- Name: bricklash
- Contact: bricklash.timing125@passinbox.com
2. Data We Collect and Why
| Data type | Purposes | Source |
|---|---|---|
| advertising_id | advertising、analytics | google_mobile_ads、firebase_analytics |
| device_ids | advertising、analytics | google_mobile_ads、firebase_analytics |
| account_management | account_system、google_sign_in、sign_in_with_apple | |
| name | account_management | google_sign_in、sign_in_with_apple |
| photos_videos | app_functionality、account_management | image_picker、google_sign_in (profile photo) |
| purchase_history | analytics、app_functionality | purchases_flutter (RevenueCat) |
| usage_data | advertising、analytics | google_mobile_ads、firebase_analytics、play_install_referrer |
| coarse_location (country/region level) | analytics | firebase_analytics (derived from your IP; the App requests no location permission) |
| usage_data (in-game actions) | analytics | our servers (sign-up, run results, purchases, level publish/purchase, UGC takedown) |
| user_content (support tickets) | customer_support | text you write when opening an in-app support ticket |
| diagnostics (app version, OS version, platform, locale) | customer_support | attached automatically when you open a ticket |
| user_id | account_management、app_functionality、analytics、customer_support | account_system、google_sign_in、sign_in_with_apple |
| birthday (date of birth) | account_management | entered by you at sign-up (both guest and third-party sign-in) |
2.1 Date of Birth
When you create an account (guest and third-party sign-in alike) you enter your date of birth, which we keep as part of your account record.
It is kept for the record only: we do not currently use it to restrict any feature, and it is never used for advertising, analytics or cross-app tracking, nor shared with third parties. The App's age restriction is expressed through the store age rating (see Section 9), not enforced through this field.
You may exercise your correction and deletion rights under Section 7; deleting your account deletes this field with it.
Third-Party Analytics (Google Analytics for Firebase)
The App uses Google Analytics for Firebase (Google Analytics 4) to understand how the game is played. It processes:
- in-game action events (which screens you open, how far you get in the tutorial,
when a level starts and ends, whether a rewarded video was watched to the end, whether you tapped share);
- an app instance identifier generated by the service, plus device identifiers
(on Android this includes the advertising ID);
- a country/region-level location derived from your connection's IP address.
The App never asks for any location permission and does not read device GPS.
We also pass that app instance identifier to RevenueCat, our payment provider, so that store purchases can be matched to the same user in our analytics. The identifier contains neither your name nor your email address.
You can turn this off. Analytics is off by default: before you explicitly agree, the App sends no analytics events and the service's own automatic events are disabled as well. You are asked about it once, separately from the Terms of Service (declining does not affect any feature of the App), and you can turn it back on or withdraw consent at any time under Settings → Support & Legal → Analytics & diagnostics.
Google's data handling for this service: https://firebase.google.com/support/privacy
3. User-Generated Content and Public Visibility
The App includes user-generated content (UGC). You can create and publish your own levels, which may contain:
- text you write (level titles, descriptions, and end-of-level messages);
- visual content derived from photos you choose from your device (your photo is
converted on your device into a blocky, low-resolution pixel pattern that becomes the level artwork; the original photo file is not uploaded);
- a public display name (nickname) shown alongside your creations.
Published levels, together with your public display name, are posted to the in-app Marketplace, where they are publicly visible, searchable, and playable by other users of the App. Messages you send in guild chat are visible to other members of that guild.
You are solely responsible for the content you create, upload, and publish, and you must have the rights to any photo or text you submit. Do not upload content that is unlawful, infringing, or otherwise in breach of our Terms of Service.
Because user-uploaded images are not screened before publication, the App is rated for users aged 17 and over.
Safety and moderation tools. To keep the community safe, the App provides:
- Reporting — you can report any level for objectionable content;
- Blocking — you can block a creator so their content no longer appears for you;
- Filtering — chat messages pass through a profanity/abuse word filter;
- Contact — you can reach us at bricklash.timing125@passinbox.com to report
content or request its removal.
We review reported content and remove or restrict content that violates our policies.
4. Third-Party Services (SDKs)
The App uses the following third-party services, which process data under their own privacy policies:
- google_mobile_ads (ads) — https://policies.google.com/privacy
- google_sign_in (login_3p) — https://policies.google.com/privacy
- image_picker (media)
- RevenueCat (iap) — https://www.revenuecat.com/privacy/
- sign_in_with_apple (sign_in_with_apple) — https://www.apple.com/legal/privacy/
- Google Analytics for Firebase (analytics) — https://firebase.google.com/support/privacy
- Google Play Install Referrer (attribution) — https://policies.google.com/privacy
5. Advertising and Ad Identifiers
The App shows third-party ads. Ad partners may collect device advertising identifiers (IDFA / AAID) to serve and measure ads. On iOS we request your permission via App Tracking Transparency before any tracking occurs; you can change this anytime in Settings. On Android you can reset or delete your Advertising ID in system settings.
6. Retention and International Transfers
We retain data only as long as needed for the purposes above or as required by law. Data may be processed on servers located outside your country; where this occurs we ensure appropriate safeguards are in place.
7. Your Rights
Depending on your location, you may have the right to access, correct, delete, restrict or object to processing, and port your data (GDPR), or to know, delete, correct, and opt out of the "sale or sharing" of personal information without discrimination (CCPA/CPRA). Taiwan residents may exercise the rights provided by the Personal Data Protection Act. To exercise any right, contact bricklash.timing125@passinbox.com.
8. Account and Data Deletion
You can delete your account inside the App, or request deletion via: https://bricklash.app/delete-account. After deletion we remove or de-identify your personal data within a reasonable period, except where retention is legally required.
9. Children
The App is intended for users aged 17+. We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it promptly.
10. Security
We use encryption in transit (HTTPS/TLS) and access controls to protect your data.
11. Changes to This Policy
We will post any changes on this page and update the "Last updated" date. Material changes will be notified in the App.
12. Contact
Questions? Contact us at bricklash.timing125@passinbox.com.
*Drafted with ShipReady based on an actual scan of the App. Please have legal counsel review before publishing.*