What we collect when you play, why we hold it, how long we keep it, and how to make us delete it.
Blitz Bunker is a multiplayer game. To let you keep an account, play against other people and buy in-game points, we store your sign-in identity, your game progress, a record of your purchases, and a limited security log of when and from where you signed in.
We do not sell your data. We do not run advertising, and we do not use third-party advertising or analytics trackers in the game. We share data only with the services that make the game work — sign-in providers, the payment processor, and our hosting and network provider — and only what each of them needs.
You can delete your account from inside the app, or by writing to us. It stops working immediately, you have 30 days to change your mind, and after that it is erased. See Deleting your account for exactly what goes, what stays, and why.
Blitz Bunker is published by ADDIE OÜ, a company registered in Estonia (registry code 16927673, VAT EE102750067) at Tööstuse tn 75-71, Põhja-Tallinna linnaosa, 10416 Tallinn, Estonia. ADDIE OÜ is the data controller for everything described here. For anything in this policy — including a request to see, correct or delete your data — write to privacy@blitzbunker.com.
The game is available on the web at blitzbunker.com and as an app on iOS and Android. This policy covers all three.
Everything below is listed because the system genuinely stores it. Nothing here is collected "just in case". Where a row says until you delete, that means until the 30-day deletion window closes — see Deleting your account.
| What | Why we have it | Kept for |
|---|---|---|
| Account name and password | Your identity in the game. Passwords are never stored — only a salted hash, which cannot be turned back into your password. | Until you delete |
| Sign-in identity | If you sign in with Apple, Google, Microsoft, Yahoo or Discord we store the provider's permanent identifier for you and the email address it returns, so the same account finds you next time. If you use Sign in with Apple and choose to hide your address, what Apple gives us is a relay address rather than your real one, and that relay address is all we ever hold. | Until you delete |
| Game progress | Your character and wardrobe, weapon and vehicle skins, achievements, missions, career statistics, season progress and points balance. | Until you delete |
| Friends | Who you have invited, who has invited you, and which invitations were accepted. | Until you delete |
| Sign-in records | A security log: the time you signed in, your IP address, the country it resolves to, and your browser or device identification string. It is how we detect account sharing, ban evasion and attacks on other players' accounts. | 90 days |
| Sessions | A hashed token that keeps you signed in, and whether it was issued to the web or the app. | 30 days |
| Purchases | What you bought, the amount and currency, the points granted, and the payment processor's transaction reference. We never see or store your card number. | See below |
| Moderation records | If an account or an IP address is restricted, we record what was applied, why, by whom and for how long. | See below |
| Match results | Scores, kills, deaths and assists from matches you played, which feed the leaderboards and your career page. | Until you delete |
| Moderation match records | Which players were seen in which match, by display name. It is what makes an abuse report reviewable after the match has ended. | Kept — see below |
We do not ask for your real name, your date of birth, your phone number, your address or your location beyond the country your IP resolves to. The game has no access to your camera, microphone, photos or contacts, and the app requests no such permission — on Android it asks for network access and nothing else.
For players in the EU and UK, the legal bases are:
We share the minimum each service needs, and none of them are permitted to use your data for their own purposes.
Our servers are in Germany. We do not sell data, and we do not share it with advertisers or data brokers. We would disclose data to authorities only where the law actually requires it.
You can delete your account from the game's options screen in the iOS and Android apps. It takes two confirmations, and the second one tells you plainly what is about to happen. If you play in a browser, write to privacy@blitzbunker.com from the address on the account and we will do it for you. Either way, the deletion page spells out the whole process.
Your account stops working the moment you confirm. You are signed out everywhere, you cannot sign in again except to cancel, and you disappear from other players' friend searches.
Your points balance becomes unusable at once. Any credit you bought or earned is erased with the account. It cannot be refunded, cannot be moved to another account, and cannot be recovered once the 30 days are up.
Sign in again within 30 days and the deletion is cancelled — your account and everything in it come back exactly as they were. You do not need to contact us and there is nothing to ask for. If you do nothing, the erasure happens on day 30.
Being honest about the consequence: a 30-day undo means your data still exists for those 30 days. We cannot offer both an immediate erasure and a month to reconsider. If you would rather it went right away, write to privacy@blitzbunker.com and we will do it.
We are required to hold on to some records, and we would rather say so than keep them quietly. None of them are used to build a profile of you, and none are shared for marketing.
Your scores stop appearing on the leaderboards, because those are built from the progress that is erased.
You can ask us for a copy of your data, ask us to correct it, ask us to restrict or object to how we use it, and — if you are in the EU or UK — complain to your national data protection authority. Write to privacy@blitzbunker.com and we will answer within 30 days.
Blitz Bunker is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, write to privacy@blitzbunker.com and we will delete it.
Traffic between you and the game is encrypted in transit. Passwords are stored only as salted hashes. Session tokens are stored hashed, so a copy of our database does not let anyone sign in as you. Administrative access to the game's data is restricted and every administrative action is recorded in an audit log.
No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority as the law requires.
If we change this policy we will update the effective date at the top, and we will tell you in the game before any change that materially affects you takes effect.
ADDIE OÜ · registry code 16927673 · VAT EE102750067
Tööstuse tn 75-71, Põhja-Tallinna linnaosa, 10416 Tallinn, Estonia ·
privacy@blitzbunker.com