Privacy Policy
Last updated June 2026
Overview
This policy explains what BLOCKFLIP (blockflip.io) collects and why. We aim to collect only what we need to run accounts, leaderboards, and basic anti-abuse.
What we collect
- Account info — display name, email, date of birth, and country you provide at signup.
- Credentials — your password is stored only as a salted scrypt hash, never in plain text.
- OAuth — if you sign in with Google or Discord, we receive your verified email, name, and avatar to create your account.
- Gameplay — scores, game stats, and playtime tied to your account.
- Technical — IP address and timestamps, used for rate-limiting, security, and abuse prevention.
How we use it
To create and secure your account, show leaderboards and stats, verify scores, prevent cheating and abuse, and operate the service. We do not sell your personal data.
What's public
Your username, country, and scores may appear on public leaderboards. Your email, birthday, and IP are never shown publicly.
We send a verification code during signup and otherwise only essential account emails. We don't send marketing email without consent.
Retention & deletion
We keep account data while your account is active. You can request deletion of your account and associated data by contacting us; some minimal records may be retained where required for security.
Children
BLOCKFLIP is not directed to children under 13, and accounts require you to be 13 or older.
Contact
Privacy questions? Email privacy@blockflip.io.