App: Offline Games: Infinite Levels (com.blastblast.easy)
Developer: Blast Blast
Contact: fromzerotothefuture@gmail.com
Effective date: 26 July 2026
Last updated: 27 July 2026
This policy explains what the app collects, why, who it is shared with, and how you can control or delete it. It applies to the Android app published on Google Play under the package name com.blastblast.easy and to nothing else.
The app is free, supported by advertising, and offers optional in-app purchases.
Blast Blast is the data controller for the data described in this policy. For questions, requests or complaints, write to fromzerotothefuture@gmail.com. We aim to reply within 30 days.
We do not collect your real-world identity. Everything below is tied to a device, not to a person we can name.
| Collected | Example |
|---|---|
| A random app-instance identifier generated by Firebase | ā |
| A pseudonymous device identifier (see 3.5) used as the analytics user ID | 9f2cā¦ |
| Gameplay events | level started, level finished, puzzle type, difficulty, hints used |
| Monetisation events | ad requested / shown / clicked, purchase started / completed |
| App and device attributes | app version, OS version, device model, language, coarse country |
| Session data | session start, time spent in the app |
Why: to see which puzzles people finish, where they get stuck, and whether changes to the game help or hurt. Legal basis (GDPR): consent where required, otherwise our legitimate interest in understanding and improving the app.
Stack traces, the app state at the moment of the crash, device model, OS version and a crash-instance identifier.
Why: to find and fix crashes. Legal basis: legitimate interest in a working app.
The app shows banner, interstitial, rewarded, native and app-open ads through Google AdMob. Google receives, as an independent controller for its own advertising purposes:
Why: the app is free and ads pay for it. Legal basis: consent for personalised ads where required; legitimate interest for non-personalised ads and fraud prevention.
If you decline personalised ads, you still see ads ā they are simply non-personalised and generally less relevant.
Google's own handling of this data is governed by the Google Privacy Policy and How Google uses information from sites or apps that use our services.
When the app first runs it reads the Play Store referrer string (which campaign or link led to the install) plus the install and referrer-click timestamps.
Why: to know which marketing sources bring players. Legal basis: legitimate interest in measuring our own marketing.
The leaderboard is optional in practice: you can play every game without ever opening it, but the app does register a pseudonymous profile on first launch so scores can be submitted later. Our server (backend.easy.sssb.uk) stores:
Player- followed by part of that identifier);Why: to run the leaderboard. Legal basis: legitimate interest in providing a competitive feature that is core to the app; you can erase it at any time (section 7).
Note that the hashed identifier is derived from Android ID, which survives an app reinstall and resets only on a factory reset. Use Delete My Data if you want the record gone.
The app receives the product purchased and a purchase token so it can grant your coins. We never see your card number, billing address or any payment detail ā Google Play processes payment entirely and shares none of it with us.
The app downloads a configuration file from Google Cloud Storage to adjust things like coin amounts and ad frequency. This is a plain download; the only data the hosting server sees is what any web request reveals, including your IP address.
We do not collect, and the app does not request permission for, any of the following: your name, email address, phone number, contacts, precise or GPS location, camera, microphone, photos, files, SMS, call logs, calendar, health data, or the list of other apps installed on your device.
One entry in section 4 has a misleading name: READ_BASIC_PHONE_STATE, added by the AdMob library, reveals only what kind of network connection is in use. It does not grant access to your phone number, your SIM, your call log or your carrier account.
| Permission | What it is for |
|---|---|
INTERNET | Ads, analytics, leaderboard, remote configuration |
SYSTEM_ALERT_WINDOW | The optional floating bubble ("Quick Access") that lets you play over other apps. Off until you enable it |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE | Keeps the floating bubble alive while it is enabled |
POST_NOTIFICATIONS | Daily-reward reminders. You can deny or revoke this and the game still works |
VIBRATE | Haptic feedback, which you can switch off in Settings |
None of the above is a "dangerous" permission that opens an Android consent dialog, except POST_NOTIFICATIONS, which you can deny.
The Google Play services libraries the app is built on (AdMob, Google Analytics for Firebase, Play Billing, Install Referrer) add further permissions of their own, which is why the Play listing shows more than the list above:
| Permission | Added by | What it is for |
|---|---|---|
com.google.android.gms.permission.AD_ID | AdMob | Reading the Android Advertising ID, as described in section 3.3 |
ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_TOPICS, ACCESS_ADSERVICES_ATTRIBUTION | AdMob | Android's Privacy Sandbox advertising APIs |
ACCESS_NETWORK_STATE | Google Play services | Checking whether the device is online before a request |
READ_BASIC_PHONE_STATE | AdMob | Detecting the network type (Wi-Fi vs mobile) |
WAKE_LOCK | Google Play services | Completing a background request already in progress |
BIND_GET_INSTALL_REFERRER_SERVICE | Install Referrer | Reading the install referrer, as described in section 3.4 |
com.android.vending.BILLING | Play Billing | In-app purchases, as described in section 3.6 |
The floating bubble draws over other apps. It cannot read, record or capture anything in those apps ā it only draws its own window.
We do not sell your data and we do not share it with data brokers. We share it only with the service providers that make the app work:
| Provider | Purpose | Their policy |
|---|---|---|
| Google AdMob | Advertising | https://policies.google.com/privacy |
| Google Analytics for Firebase | Usage analytics | https://firebase.google.com/support/privacy |
| Firebase Crashlytics | Crash reporting | https://firebase.google.com/support/privacy |
| Google Play Services / Billing / Install Referrer | Distribution, purchases, attribution | https://policies.google.com/privacy |
| Google Cloud Storage | Remote configuration hosting | https://cloud.google.com/terms/cloud-privacy-notice |
| ipapi.is | Resolving your country from your IP address for the leaderboard flag | https://ipapi.is/privacy.html |
| ipwho.is | Same, used only when ipapi.is does not answer | https://ipwho.is/privacy |
| Our own leaderboard server | Leaderboard | This policy |
The two geolocation providers receive your IP address and return a two-letter country code. We send them nothing else ā no identifier, no name, no score ā and they are contacted only when the leaderboard needs to determine your country flag.
We may also disclose data where the law requires it, or to establish, exercise or defend a legal claim.
Our providers and our leaderboard server process data on servers outside your country, including in the United States. Transfers out of the EEA/UK rely on the European Commission's Standard Contractual Clauses or an adequacy decision, as applicable.
| Data | Retention |
|---|---|
| Analytics events | Up to 14 months, then deleted by Google |
| Crash reports | Up to 90 days |
| Leaderboard profile and scores | Until you delete them, or until 24 months of inactivity |
| Advertising data | Per Google's own retention policy |
| Game progress, coins, settings | On your device only, until you delete them or uninstall the app |
Delete everything ā in the app. Settings ā Delete My Data erases your game progress, coins, settings and leaderboard profile from the device *and* from our server. This cannot be undone.
Change your ad-consent answer. Where a consent form applies to you, Settings ā Privacy options re-opens it.
Reset or remove your advertising ID. Android Settings ā Google ā Ads lets you reset the ID or delete it entirely, which stops personalised advertising across every app.
Turn off notifications. Android app settings, or deny the permission prompt.
If you are in the EEA or the UK, you also have the right to access, rectify, erase, restrict or object to processing, the right to data portability, the right to withdraw consent at any time, and the right to complain to your national data protection authority. If you are a California resident, you have the rights to know, delete, correct and opt out of "sharing" for cross-context behavioural advertising under the CCPA/CPRA ā we do not sell personal information for money.
To exercise any of these, email fromzerotothefuture@gmail.com. Because the app has no accounts, we may need the pseudonymous identifier shown in the app to find your record; if we cannot identify your data we may be unable to act on the request, and we will say so.
The app is not directed to children and is rated for a general audience. We do not knowingly collect data from children under 13 (or under the applicable age of digital consent in your country, which is up to 16 in parts of the EEA). If you believe a child has provided us with data, email us and we will delete it.
Traffic between the app and our server is encrypted with HTTPS, and leaderboard requests are signed to prevent tampering. The device identifier we store is a hash, never the raw value. No system is perfectly secure, and we cannot guarantee absolute security of data transmitted over the internet.
We may update this policy. The "last updated" date at the top always reflects the current version, and material changes will be announced in the app or on the Google Play listing before they take effect. Continuing to use the app after a change means you accept the updated policy.
Blast Blast ā fromzerotothefuture@gmail.com