The short version. You can play Block Cascade without an account. The game gives you a random ID so leaderboards, purchases and crash reports work. We use Google Firebase to run the leaderboards and to see how the game is played and where it crashes. There are no ads. We never sell your data and never track you across other companies’ apps or websites. If you choose to sign in with Apple and share your name, that name is shown publicly on the leaderboards. Your game progress stays on your device.
1. Who we are
Block Cascade (“Block Cascade: Color Puzzle” on the App Store, shown as “Blockfall” on your home screen) is made by Cihat Karaboğa, an independent developer based in Istanbul, Türkiye (“we”, “us”). We are the data controller for the personal data described here. You can reach us about anything in this policy at cihat@karaboga.dev.
This policy covers the Block Cascade app for iPhone and iPad and this website.
2. What we collect
| Data | What it includes | Why |
|---|---|---|
| Game account | A random account ID, created automatically the first time you open the game. It isn’t linked to your name or email unless you sign in with Apple. | To save your leaderboard scores and purchases under one ID. |
| Sign in with Apple (optional) | Apple’s user identifier for you, your email address (or an Apple private relay address, if you choose Hide My Email) and your name, if you choose to share it. | To keep your account and leaderboard place when you switch or reinstall devices. Your name is shown on leaderboards (see section 4). |
| Leaderboard scores | Your account ID, the name shown (your Apple name, or “Anonymous”), your best endless-mode score and highest combo for the day, week, month and all time, and when you played. | To rank you against other players. Daily challenge results are not uploaded. |
| Gameplay analytics | Screens you open; when a game starts and ends, with the score, best score and highest combo; when you place a piece or use an undo; purchases (which product, not payment details); whether you are signed in and whether you have Pro. Firebase also records your account ID, an app-instance ID, device model, iOS version, app version, language and approximate country (from your IP address, which isn’t stored). | To understand how the game is played, balance difficulty and decide what to improve. |
| Crash reports | When the game crashes or hits an error: technical details of the error, device model, iOS version, app version, your account ID and whether you have Pro. | To find and fix bugs. |
| Notifications (optional) | Only if you allow notifications: a push token for your device, held by Apple and Firebase Cloud Messaging. We don’t store it on any server of our own. | To send a reminder when there is something new, such as a daily puzzle. |
| Purchases | Your account ID, which products you bought, and when a subscription or trial started, renews or ends. Apple handles payment; we never see your card details. | To unlock Pro and restore it on your other devices. |
| Update checks | When the game starts it asks our update service whether a fix is available, sending the app version, platform and device type. The request includes your IP address. | To deliver bug fixes quickly. |
| Fonts | The game downloads its fonts from Google Fonts the first time it needs them. Google receives your IP address with that request. | To show the game’s typefaces. |
| Messages to us | Your email address and whatever you write to us. | To answer you. |
The game doesn’t collect your advertising identifier (IDFA), location, contacts, photos or microphone, and contains no advertising SDKs.
3. What stays on your device
These are saved only on your iPhone or iPad and are never sent to us: your game in progress, your personal best, daily challenge streak and medals, unlocked and selected themes, sound, haptics, dark mode and language settings, and how many free games you have used today. The game also keeps a copy of the latest leaderboard so it loads quickly. Deleting the app removes all of this.
4. Leaderboards and your name
After every endless game, your score is added to the daily, weekly, monthly and all-time leaderboards if it beats your previous best there. Leaderboards are public to all players: they show the name attached to your account, your score and your highest combo.
- If you don’t sign in, you appear as “Anonymous”. Your scores are linked only to your random account ID.
- If you sign in with Apple and share your name, Apple gives us the first and last name you choose on the sign-in screen, and it appears on the leaderboards next to your scores. You can change the name before you confirm, or choose not to share it, in which case you appear as “Anonymous”.
- Your email address is never shown to other players.
To remove your name and scores, delete your account in the game (see section 11) or email us.
5. How we use your data
We use your data only to:
- run the game, the leaderboards and your account;
- unlock and restore the purchases you’ve made;
- find and fix crashes and bugs, and deliver updates;
- understand how the game is played so we can improve it;
- send the notifications you’ve allowed;
- answer your messages.
If you’re in the EU, UK or a country with similar law, our legal bases are: performing our contract with you (the game, leaderboards, account and purchases); our legitimate interests in keeping the game stable and improving it (crash reports, analytics and update checks), balanced against your rights; your consent (notifications, which you can turn off at any time); and legal obligations (for example, keeping purchase records). If you’re in Türkiye, we process your data on the same grounds under the Personal Data Protection Law No. 6698 (KVKK).
6. What we never do
- Sell or rent your personal data, or share it with data brokers.
- Show ads, or use your data for advertising.
- Track you across other companies’ apps or websites.
- Share your email address with other players.
7. Who helps us run the game
These providers process data for us, under their own terms and privacy policies, only for the purposes below:
| Provider | What they do | Data involved |
|---|---|---|
| Google Firebase (Google LLC and Google Ireland Ltd.) | Account sign-in (Firebase Authentication), leaderboards (Cloud Firestore), analytics (Google Analytics for Firebase), crash reports (Crashlytics) and notifications (Cloud Messaging). | Account ID, Apple sign-in details, leaderboard entries, analytics events, crash reports, push token. |
| RevenueCat, Inc. (USA) | Checks and manages your App Store purchases. | Account ID, purchase and subscription history, device and app information. |
| Shorebird (USA) | Delivers small bug-fix updates to the game. | App version, platform, device type, IP address. |
| Google Fonts (Google LLC) | Serves the game’s fonts. | IP address. |
| Apple | App Store payments, Sign in with Apple and push notification delivery. | As described in Apple’s own privacy policy. |
| Hetzner Online GmbH (Germany) | Hosts this website. | Website server logs (see section 14). |
We may also disclose data if the law requires it, for example in response to a valid court order.
8. Where your data is processed
Google, RevenueCat and Shorebird may process data in the United States and other countries outside your own. Where that happens, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses, the EU–US Data Privacy Framework where the provider is certified, and the transfer mechanisms allowed under KVKK.
9. How long we keep it
- Account and leaderboard entries: until you delete your account. Entries for past days, weeks and months may be removed sooner.
- Analytics: event data is kept for at most 14 months, then deleted automatically.
- Crash reports: kept for 90 days.
- Purchase records: kept by RevenueCat and Apple for as long as needed to provide your purchases and meet tax and accounting rules.
- Emails to us: kept while we help you, and for up to 2 years in case you get in touch again, unless you ask us to delete them sooner.
10. Your choices and rights
- Play without signing in. You stay “Anonymous” and we never learn your name or email.
- Notifications: turn them off at any time in your device’s Settings → Notifications → Blockfall.
- Sign out in the game’s Settings at any time. Signing out doesn’t delete anything; to do that, see below.
Depending on where you live (for example under the GDPR, UK GDPR, KVKK or US state privacy laws), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict how we use it, and to withdraw consent. Email cihat@karaboga.dev and we’ll reply within 30 days. We may ask you to confirm it’s your account. You can also complain to your data protection authority; in Türkiye that is the Personal Data Protection Authority (KVKK).
11. Deleting your data
- Signed in with Apple: in the game, go to Settings → Account → Delete Account. This permanently deletes your account (your Apple sign-in details and name) and all your leaderboard entries.
- Playing as Anonymous: your scores aren’t linked to your name or email. If you want them removed, email us with roughly when you played and the scores, and we’ll find and delete them.
- On your device: deleting the app removes your saved game, progress and settings.
- Anything else, including analytics and crash data linked to your account ID: email cihat@karaboga.dev.
Deleting your account doesn’t cancel a subscription. Cancel it in your device’s Settings → [your name] → Subscriptions. Apple and RevenueCat keep records of past purchases as the law requires.
12. Security
All data the game sends is encrypted in transit (TLS). Leaderboard entries can only be written by the account they belong to, and accounts are managed by Firebase Authentication. No system is perfectly secure, but we limit what we collect and who can access it.
13. Children
Block Cascade is a general-audience game and isn’t directed at children under 13 (or the minimum age in your country). Children can play without signing in, and then we collect only the random ID and technical data described above, never their name or email. If you’re a parent or guardian and think your child has signed in with Apple, email us and we’ll delete the account.
14. This website
This website uses no cookies, no analytics and no third-party scripts. Our web server keeps standard logs (IP address, time, page requested and browser type) for a short period for security and troubleshooting, then deletes them.
15. Changes and contact
If we change how we handle your data, we’ll update this page and the date at the top before the change takes effect.
Questions or requests: cihat@karaboga.dev · Cihat Karaboğa, Istanbul, Türkiye.