Privacy

Last updated: 13 November 2026. Blokkit is published by CAREEROCKET LIMITED, a company in Nigeria, which is the controller of the personal data described here. Contact: blokkit@mycareerocket.com.

What stays on your device

Playing never needs an account: you play anonymously, and signing in is optional (see "Signing in" below). Your progress is saved on this device, in the app's local storage: the game in progress, best scores, level progress, daily challenge results, stats and achievements, coins and items, your selected themes and your settings. Uninstalling the app deletes it unless you are signed in with cloud save (below).

In versions with online features, the app also talks to our game server: it registers this install with a random player ID (no name or email), and keeps your coin balance, verified scores and level stars there so they cannot be lost or faked. Versions without online features send none of this to us.

Device identifier (keeping your progress after a reinstall)

So that you keep your coins and level stars when you reinstall Blokkit on the same device without signing in, the app reads a device identifier and sends it to our game server, over an encrypted (HTTPS) connection, when the app is installed (and once on launch for players who installed before this feature).

• What it is. On Android, the Android ID: a value Android gives this app, which is different for each app-signing key and each user on the device and changes after a factory reset. On iPhone, a random ID the app creates and keeps in the device's Keychain. It is not the advertising identifier (IDFA or Google advertising ID), and the app does not ask for App Tracking Transparency permission for it.
• What we store. Never the identifier itself: only a keyed fingerprint of it (HMAC-SHA256 with a secret key held on our server), linked to your random player ID, with the platform (Android or iOS) and whether the install is a test install (below). Each time a reinstall restores a player, we log the player ID, platform and time, and we limit how often restores can happen.
• Why. To restore your anonymous progress (coins, level stars) after a reinstall on the same device, and to prevent fraud and abuse (limiting restores, keeping test installs out of our statistics). It never overrides a signed-in account and never moves coins between accounts. It is never used for advertising or tracking, never shared with third parties and never used to link you across other companies' apps or websites.
• Test installs. The app also tells our server whether it is a test install (a development build, an emulator or a simulator). We keep that flag with your player ID and use it only to leave test installs out of our own statistics.

Signing in (optional, for leaderboards)

You only need to sign in to appear on the leaderboards. You can sign in with an emailed link or code, Sign in with Apple (iPhone) or Google (Android). There are no passwords.

• Email. We use your address to send the sign-in email (link and 8-character code) through our email provider, Resend, and to recognise you when you sign in again. We store the address encrypted, plus a keyed fingerprint of it used for look-ups; we never store the link or code themselves, only one-way hashes that expire after 15 minutes.
• Apple or Google. We receive a signed token from Apple or Google that tells us a stable account identifier and, if you share it, your email address (Apple lets you share a private relay address instead). We store only a keyed fingerprint of the identifier and, if given, your address encrypted. We never receive your Apple or Google password.
• Your nickname. Leaderboards show the nickname you choose, never your email.
• Practice rivals. Leaderboards and league groups can also show rows tagged "Rival": these are Blokkit's computer practice rivals, not people. They never take rewards, promotion or relegation places, and they stop appearing once enough real players have joined.
• Several devices. You can be signed in on more than one device; they share one coin balance and one leaderboard entry. When you sign in on a device that has been playing anonymously, its coins and level stars move into your account.
• Signing out. "Sign out on this device" forgets the sign-in here; "Sign out everywhere" signs out every device. Your account stays until you delete it.
• To stop abuse we count sign-in attempts per network address and per email fingerprint for up to an hour; we store a one-way hash of the address, not the address itself.

Cloud save (signed-in players only)

When you are signed in, the app keeps a copy of part of your progress on our game server so another device signed in to the same account picks it up, and so a reinstall can restore it. Anonymous play never uploads it. The copy holds: your settings (sound, music, haptics, calm mode, reduce motion, colour-blind symbols, placement preview, app theme), your selected block theme, whether you have seen the introduction, your daily challenge scores and streak, Streak Shields, and your play stats (games played, totals, best combo, top scores) from which achievements are worked out. It holds no name, email or device identifier and is tied only to your account. Coins, purchases and level stars are already kept by the server as described above; a game in progress is not uploaded. The copy is at most 64 KB. Signing out leaves your progress on the device; deleting your account erases the cloud copy.

Deleting your account

You can delete your account at any time in the app: Settings → Account → Delete account, then type DELETE. It takes effect at once. Without the app, email blokkit@mycareerocket.com from the address you sign in with and we will delete it within 30 days and confirm by email. Step-by-step instructions are also at https://blokkit.app/delete-account.

• Deleted for good: your account, your email address, your sign-in methods (the fingerprints of your address and of your Apple or Google identifier), any sign-in emails not yet used, your nickname, your leaderboard scores and verified runs, the level stars saved with your account, your cloud save, the device fingerprints linked to your player ID and the log of reinstall restores, and the coins in it (bought coins included; they are not restored).
• Kept, without anything that identifies you: purchase records (the store's receipt reference, product and date) and the coin history of the account. App stores need them to process refunds and chargebacks, and we need them to keep an accurate record of purchases. After deletion they are tied only to a random ID that no email, sign-in or nickname points to, and we keep them for as long as tax law and the app stores' rules require.
• Your devices: every device is signed out. The device you deleted from starts a fresh anonymous game with a new Coin ID; progress saved on a phone stays on that phone until you uninstall the app.
• Playing anonymously: there is no account to delete in the app, so the device fingerprint stays linked to the anonymous player on our server (uninstalling the app does not remove it; that is what lets a reinstall restore your progress). It is erased with the account if you sign in and then delete your account. To delete it, sign in (Settings → Account) and delete your account there; the fingerprint, the restore log and the player's coins and level stars are deleted together.
• Sign-in attempt counters (one-way hashes) expire within an hour and are not linked to your account. If you sign in again later with the same address, you start a new, empty account.

Feedback (optional)

You can send us feedback at any time from Settings or the Pause screen ("Send feedback"). Sending it is always your choice.

• What we collect: the category you pick, your message (up to 1,000 characters), the app version, platform (Android or iOS), operating system version and device language setting, and the random player ID this install already uses with our game server. If you fill in "Email me back", we also keep that address.
• Why: to read and act on your feedback (fix bugs, improve levels and features) and, only if you gave an address, to reply to that message. We never use the address for marketing, never add it to a mailing list, and it is not linked to a sign-in.
• How: messages go to our game server, which stores the reply address encrypted; our team reads them there. If you gave an address and we reply, we write to you from blokkit@mycareerocket.com. A message written offline waits on your device and is sent when you are back online.
• How long: we delete feedback 12 months after it is received. Deleting your account also deletes feedback sent from it.
• To stop abuse, the server counts messages per player ID for up to a day.

Ads and consent (Google AdMob)

Blokkit shows ads through Google AdMob: rewarded ads you choose to watch, and interstitial ads between games. You can remove interstitial ads with the one-time Remove ads purchase.

• Before any ad is requested, the app asks Google's User Messaging Platform (UMP) whether consent is needed where you live, and shows Google's consent form when it is. Ads are not requested until UMP says they may be.
• On iOS the app then asks for App Tracking Transparency permission. Saying no still lets you play and watch ads; they are just not personalised by tracking.
• You can change your ad choices at any time in Settings, "Privacy options · Ads" (shown when your region requires it).
• Google and its ad partners may collect device identifiers, IP address, approximate location and ad interaction data to serve, measure and (with consent) personalise ads. See Google's policy: https://policies.google.com/technologies/partner-sites

Purchases

Coin packs, item packs and Remove ads are bought through Google Play or the App Store. The store handles payment; we never see your card or account details. The app receives a purchase record from the store, uses it to credit what you bought, and keeps that credit in local storage so a purchase is never counted twice. "Restore purchases" asks the store again for purchases you already own.

Analytics

The app currently sends no analytics of its own. Feedback (above) is sent only when you choose to send it. Ad events are only written to the device log, in development and test builds.

Our website

blokkit.app sets one cookie, `lang`, only when you pick a language in its language menu (or choose to stay in English). It remembers that choice for a year and holds nothing else. The website uses no analytics, advertising or tracking cookies.

Children

Blokkit is for ages 13 and over. It is not directed at children, it is not part of Google Play's Families program, and ad requests are not marked as child-directed. We do not knowingly collect personal data from children under 13. If we learn that we have, we delete it.

Changes and contact

If this policy changes, the new version will ship with an app update. Questions: blokkit@mycareerocket.com.