Privacy Policy

Last updated: April 17, 2026

This Privacy Policy explains what information Blastar (the “Service”, reachable at playblastar.com) collects, how it is used, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

Blastar is designed to be playable without creating an account. The following is collected during normal play:

• Nickname you type in the display-name modal (optional; default is Player 1, 2, …).
• In-game records you generate during a match: peak score, boss kills, PvP kills, timestamps. These are stored server-side and may appear on public ranking boards (Best scores, Boss kills, Best killer).
• Basic technical data required to run the game: IP address (for room routing and rate-limiting), approximate region, browser user agent, and connection quality metrics. This data is kept only as long as operationally needed.
• Local browser storage (localStorage) used to remember your preferred language and nickname. This data never leaves your device unless you submit it.
• Anonymous usage logs (random per-browser identifier, session identifier, timestamps, and low-frequency in-game events such as session start/end, match start/end, death, boss kill, and PvP kill) used only for aggregated behavior analytics. No nicknames or other personal identifiers are included, and the IP address is stored only in salted, irreversibly-hashed form.

2. Cookies and local storage

The Service itself uses only local browser storage for preferences (language, nickname) and short-lived session identifiers. Third-party scripts (see §4) may set cookies to measure traffic and serve ads. You can clear cookies and local storage at any time through your browser settings.

3. Advertising

Blastar may display ads served by Google AdSense or other third-party ad networks. Those networks may use cookies, device identifiers, and similar technologies to serve personalized or non-personalized ads based on your visits to this and other sites.

For users in regions where consent is legally required (EEA, UK, Switzerland, etc.), a consent prompt is shown before personalized ads are loaded. You can always review and change your choices later from your browser or the provider (Google Ads Settings).

4. Third-party services

The Service may use third-party providers for hosting (Railway), content delivery, error monitoring, and analytics. Those providers process data only under their own privacy policies and only as needed to deliver the Service.

5. Public records and nicknames

Nicknames and scores that reach a public ranking board are visible to other players. Do not use personal data (real name, email, phone number, etc.) as your nickname. You can request removal of an entry via the Contact page.

6. Children

The Service is not directed at children under 13 (or the equivalent minimum age in your region). We do not knowingly collect personal information from children. If you believe a child provided personal data, please contact us and we will remove it.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.) you may have the right to access, correct, or delete your personal data, and to withdraw consent. Requests can be sent via the Contact page.

8. Changes

This policy may be updated when features change. The “Last updated” date above will reflect the most recent version.

9. Contact

Questions about privacy? Use the Contact page.