Privacy Policy
FLOWBLAST: Pixel Picture Blast
This Privacy Policy explains what information FLOWBLAST: Pixel Picture Blast (operated by Erebos Lab) collects, how it is used, who it is shared with, and the choices you have. By using FLOWBLAST: Pixel Picture Blast you agree to the practices described here.
Data-safety summary
At a glance, here is the data the app collects, whether it is linked to your identity, and whether it is used to track you across other companies’ apps and websites.
| Data category | Linked to you | Used for tracking | Purpose |
|---|---|---|---|
| Identifiers (Device ID) | No | Yes | Serve and measure ads through Google AdMob, only after the Google UMP consent flow is resolved and, on iOS, the App Tracking Transparency prompt is answered. Used for third-party advertising and analytics. |
| Usage Data (Advertising Data) | No | Yes | Third-party advertising and analytics by Google AdMob. |
| Usage Data (Product Interaction) | Yes | Yes | App functionality and product analytics for the first-party telemetry; third-party advertising and analytics for the AdMob part. |
| Location (Coarse) | No | Yes | Third-party advertising. No precise location is collected. |
| Diagnostics | No | No | Analytics for ad delivery stability. The game ships no separate crash reporter. |
| Identifiers (User ID) | Yes | No | App functionality: sync your save, restore in-app purchases and run online features. There is no email, password or login. |
| Contact Info (Name, Optional) | Yes | No | Show your name to friends and on the daily-challenge/relay leaderboard; let other players add you by code. |
| User Content (Gameplay) | Yes | No | App functionality: online daily challenge, relay, raid, friends and cloud save on the FLOWBLAST backend (api.flowblast.game). |
| Purchases | Yes | No | Manage in-app purchases and entitlements through Apple/Google via RevenueCat. |
What we collect
Identifiers (Device ID)
- Advertising identifier (IDFA only after you allow App Tracking Transparency; IDFV / Android Advertising ID)
Serve and measure ads through Google AdMob, only after the Google UMP consent flow is resolved and, on iOS, the App Tracking Transparency prompt is answered. Used for third-party advertising and analytics.
Usage Data (Advertising Data)
- Ad impressions, clicks and ad interaction data
Third-party advertising and analytics by Google AdMob.
Usage Data (Product Interaction)
- Gameplay analytics events (level completed, session length, feature usage) sent to the game’s own backend — on by default, can be turned off in Settings → Privacy
- Ad interactions (Google AdMob)
App functionality and product analytics for the first-party telemetry; third-party advertising and analytics for the AdMob part.
Location (Coarse)
- Approximate location inferred from IP address by Google AdMob
Third-party advertising. No precise location is collected.
Diagnostics
- Crash data and performance data collected by the Google AdMob SDK
Analytics for ad delivery stability. The game ships no separate crash reporter.
Identifiers (User ID)
- Anonymous player id (used for the daily challenge, relay, raid, friends and cloud save)
- RevenueCat anonymous app user id (the same anonymous player id)
App functionality: sync your save, restore in-app purchases and run online features. There is no email, password or login.
Contact Info (Name, Optional)
- Display name you type (optional) and the friend code used to add friends
Show your name to friends and on the daily-challenge/relay leaderboard; let other players add you by code.
User Content (Gameplay)
- Daily challenge, relay and raid progress
- Cloud save backup
- Friend list and pending friend requests
App functionality: online daily challenge, relay, raid, friends and cloud save on the FLOWBLAST backend (api.flowblast.game).
Purchases
- Purchase history for coin/gem packs, Remove Ads, the optional Season Pass and cosmetic items
Manage in-app purchases and entitlements through Apple/Google via RevenueCat.
What we do NOT do
- No email, phone number, password or login: the game is playable offline without any account.
- Progress is stored on your device; it is only sent to the FLOWBLAST backend if you turn on cloud save or an online mode (daily challenge, relay, raid, friends).
- You can turn off first-party gameplay analytics in Settings → Privacy at any time.
- We do not sell your personal information.
Third parties who process your data
We share data only with the processors below, each bound to use it only to provide their service to us. Items marked "unverified" are placeholders we must confirm and name before this policy is treated as final.
- Google AdMob — Rewarded and interstitial ads in the free version, after consent
- Google User Messaging Platform (UMP) — Ad consent (GDPR/US state privacy) before any ad loads
- Apple App Tracking Transparency — iOS permission prompt before the advertising identifier is used
- RevenueCat — In-app purchases, the Season Pass and entitlements via Apple/Google
- FLOWBLAST backend (api.flowblast.game, Erebos Lab’s own Cloudflare-hosted servers) — Daily challenge, relay, raid, friends, cloud save and first-party gameplay analytics
How we use your information
- Operate and personalize the app and its core features.
- Maintain your account, authenticate sessions, and provide support.
- Process payments and manage subscriptions/entitlements.
- Keep the service secure and prevent fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
- Improve the product through aggregated, de-identified analytics.
Data retention
We keep personal information only as long as needed to provide the service. Account data is retained while your account is active and for a short recovery window after deletion, then deleted or anonymized. Billing records are retained as required by tax and accounting law. Backups are purged on a rolling basis.
Your rights and choices
Depending on your jurisdiction you may access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account and its server-side data from within the app, or by emailing us. We respond within 30 days.
Children’s privacy
The app is not directed to children under 13 (under 16 in the EEA/UK) and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, least-privilege access, and audit logging. No system is 100% secure; please use a strong, unique password.
Changes to this policy
We may update this policy. Material changes will be reflected by a new "Last updated" date and, where required, announced in the app.
Contact
Privacy questions? Email [email protected].