Privacy Policy
Last updated: October 22, 2026 · Version française
This policy describes the data BlitzVolley collects, why, and how you can control it. The data controller is Martin Poiroux (sole trader, entrepreneur individuel, SIREN 106 024 011, 35 Allée d'Ancely, 31300 Toulouse, France), see the legal notices (in French). Contact: poirouxmartin@gmail.com.
Data collected
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, username | Account creation and authentication | Performance of a contract |
| Game statistics (ELO, matches, level, achievements) | Ranking, progression, balancing | Performance of a contract |
| Balance of compotes (in-game currency), purchases, unlocks | Shop and rewards | Performance of a contract / legal obligation (accounting) |
| IP address, technical headers (browser, device type, referring page) | Connection to the game server, security, anti-abuse | Legitimate interest |
| Approximate location (country and city) derived from the IP address | Server traffic monitoring (where connections come from), abuse detection | Legitimate interest |
| Lobby chat messages, reports | Display to the players in the lobby; moderation in case of a report | Performance of a contract / legitimate interest (player safety) |
| Bug reports sent from the game (message, username, browser and device, network measurements and match state); network measurements of matches (ping, freezes, disconnections) in the server logs | Diagnosis and fixing of bugs and connection problems | Legitimate interest |
| Counters of ads watched (per day) | Enforcing daily reward caps | Performance of a contract |
| Advertising identifiers and measurement cookies | Ad display and measurement | Consent |
Location is approximate: it is computed from the IP address by the service ip-api.com, at city level at best. BlitzVolley never accesses the GPS or the precise position of your device, and the Android app does not request location permission.
Chat messages are not stored: they are relayed to the players in the lobby and then forgotten. If you report a player (tap their name in the chat, then Report), their latest messages in the lobby are attached to the report and kept so that it can be handled. Blocking a player is stored only on your device.
No bank card data is collected or stored by BlitzVolley: payments are processed entirely by Stripe.
Advertising and consent
BlitzVolley offers rewarded ads: they are optional, never trigger on their own, and you launch them explicitly to earn compotes or speed up a chest. The game remains fully playable without watching any of them.
These ads are served by Google AdSense. Google may set cookies or read identifiers to select, serve and measure ads. Before any ads are shown to users located in the European Economic Area, the United Kingdom and Switzerland, a consent banner lets you accept or refuse personalised ads. Refusing does not prevent you from accessing the game or from watching rewarded ads: these simply become non-personalised.
You can change your choice at any time via the consent management link shown by the banner, and read Google's policy on partner sites.
Android app (Google Play)
The version of BlitzVolley distributed on Google Play collects the same account, game and audience measurement data as the website, with three differences:
- it contains no advertising SDK and does not read the advertising identifier of the device: Google AdSense is not loaded in it;
- it offers no purchases: the paid shop (Stripe) is not included;
- it only requests the Internet (online play) and Vibration (haptic feedback) permissions, and no location, camera, microphone, contacts or files.
All data is transmitted encrypted (HTTPS) between the app and our servers. You can delete your account from the app (see Delete your account).
Cookies and local storage
BlitzVolley uses the browser's local storage (localStorage) to keep your authentication session as well as your display settings (graphics quality, frame rate limit, volume). These settings stay on your device and are necessary for the service to work: they do not require consent.
The advertising cookies set by Google are subject to your consent (see above).
The internal audience measurement (see below) also uses the anonymous identifier bv_aid, stored in this same local storage and sent to the game server when you connect.
Audience measurement
BlitzVolley measures its audience with an internal tool (no third-party service): a random identifier stored on the device (key bv_aid), with no advertising cookie and no associated IP address, to count visits, sessions and matches and to improve the game. The data is hosted in the European Union (Supabase) and kept for 25 months at most. You can object to it at any time.
Recipients and processors
- Supabase: database and authentication (EU hosting).
- OVH SAS: hosting of the website and the game server (France).
- Stripe Payments Europe, Ltd.: payment processing (Ireland).
- Google Ireland Ltd.: ad serving and measurement.
- ip-api.com: determination of the country and city from the IP address (receives the IP address).
- Discord Inc.: internal operations notifications received by the publisher (username, country and city of connection, browser, chat reports, bug reports).
Some of these providers may transfer data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses and, for US providers, by the EU-US Data Privacy Framework.
Your data is not sold, rented or transferred to third parties for marketing purposes.
Retention periods
- Account and game data: as long as the account is active, then deleted as soon as you delete your account (see below).
- Purchase records (receipts and invoices held by our payment provider): 10 years (accounting obligation), even after account deletion.
- Technical logs (IP address, approximate location, latest usernames used from that address): 12 months at most after the last connection.
- Chat reports and attached messages: 12 months at most.
- Bug reports sent from the game: 90 days at most.
- Ad counters: reset every day.
Your rights
Under the GDPR, you have the right of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw your advertising consent at any time. Send your request to poirouxmartin@gmail.com; we will reply within one month.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL (the French data protection authority, cnil.fr).
Delete your account
You can delete your BlitzVolley account yourself, at any time, on the website as well as in the Android app: Options > Account > Delete My Account, then confirm.
Deletion is immediate and permanent: your profile, statistics, ranking, compotes, unlocked items, quests and friends list are erased. Matches already played remain in your opponents' history, without your name. Only purchase records are kept by our payment provider for the legal period (10 years).
If you can no longer log in, write to poirouxmartin@gmail.com from the email address of your account, stating your username: the account is deleted within 30 days.
Minors
BlitzVolley is not intended for children under 15 without the consent of a holder of parental authority, in accordance with Article 45 of the French Data Protection Act (Loi Informatique et Libertés). No advertising content is targeted at minors.
Changes
This policy may change. The date of the last update appears at the top of the page; substantial changes will be notified in the game.