Privacy Policy

Who is responsible?

Vimoora Games operates Block Challenge and its game service. This policy explains how we handle information when you play the Android game, use connected features, or visit the Block Challenge privacy and account-deletion pages. For privacy questions or requests, contact support@vimoora.io and identify Block Challenge.

Google and other services you choose to use also have their own privacy terms. This policy covers Vimoora’s handling of information; it does not replace those services’ policies.

Information we handle

On-device game data

Settings, saved boards, Classic scores, Pet-level progress, your Pet selection and collection, power balances, and pending game or reward operations can be stored in the app’s local storage. Sign-in credentials and account-related recovery state may also be stored locally so your session can continue.

Connected account and Google sign-in

When you choose Google sign-in, we process a Google authentication token and account identifier to create or restore your game account. Basic profile information supplied by Google, such as a display name and profile-photo URL, can be used for your player profile. We store an internal player identifier, selected player name, account-linking and session/recovery information. We do not receive your Google password or access your Gmail messages or contacts.

Profile photos

If you upload a photo, we receive the image you select and store resized versions for your profile. The app does not need access to your entire photo library. We may also display the photo supplied through Google sign-in until you choose another photo or remove it.

Gameplay, progress and rewards

Connected play sends game actions and results for server verification. Records can include scores, completed levels, Pet goals and collection, power grants and spending, reward claims, ranking positions, rival challenges, timestamps and account activity. These records help us save progress, keep rankings fair, and prevent duplicate or invalid rewards.

Purchases

Google Play processes payment. Our service receives and verifies purchase tokens, product and order identifiers, purchase status, quantities, timestamps and account-linked transaction information. We use this to grant powers, recover interrupted purchases, and handle cancellations, refunds and duplicate claims. We do not receive your full payment-card number or card security code.

Advertising and consent

Optional rewarded videos use Google AdMob and Google’s consent tools. Their data handling is described in the advertising section below. Our service also records reward attempts, transaction identifiers, verification results and the account or game receiving the reward.

Technical information and support

Connecting to our service involves network information such as an IP address, request time and requested resource. Service activity, errors, security records and reports help us operate and protect the game. If you contact support, we receive your email address, message and any information or attachments you choose to send.

Why we use information

• Run the game, save and restore progress, maintain one shared power inventory, and apply your settings.
• Authenticate accounts and keep account data separate when you sign out or change players.
• Provide rankings, Pet Trail positions, recorded rival challenges and public player profiles.
• Verify purchases and optional video rewards, grant items once, and resolve interrupted transactions.
• Prevent cheating, duplicate rewards, misuse and unauthorised account access; investigate reports and technical problems.
• Respond to support and privacy requests and meet applicable legal obligations.

Where a law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and securing it, consent where required (including applicable advertising choices), or legal obligations. You can contact us about the basis relevant to your information.

What other players can see

Your chosen player name, displayed profile photo, scores, ranking position, Pet Trail progress and relevant challenge results may appear to other players. Select a name and image you are comfortable sharing. Removing a profile photo stops its use in your current profile; another person’s screenshot or copy is outside our direct control.

Your Google authentication token, recovery credentials and purchase receipts are not part of your public player profile.

Rewarded ads and your choices

Watching a rewarded video is optional. Google’s Mobile Ads SDK can process device and account identifiers (including advertising ID or app-set ID), IP address and approximate location inferred from it, app/ad interactions, and diagnostic information. Google uses this for advertising, measurement and fraud prevention. Processing and personalised-ad availability depend on your region, consent, device settings and Google’s requirements.

Where Google presents a consent message, review the available choices. You can decline optional videos and use Android’s advertising controls to reset or delete your advertising ID where supported. Contact us if you need help exercising privacy rights relating to our use of advertising services.

Read Google’s Privacy Policy and how Google uses information from partner apps. Restricting personalised advertising does not necessarily prevent all advertising-related processing.

Service providers and other disclosures

We use infrastructure and service providers to host the game, process support requests, authenticate Google sign-in, process Google Play purchases, and deliver or verify AdMob rewards. They receive information needed for those functions. Google’s handling of sign-in, billing and advertising information is also governed by its own policies.

We may disclose relevant information when required by law or a valid legal process, to protect users and the service from fraud or abuse, or to resolve a transaction or rights request. Public player information is shared as described above. Account passwords, recovery codes and full payment-card details are not supplied to other players.

Your controls

• Player name and photo: open the game’s Settings → Account & privacy to edit your name, choose a photo or remove your custom photo.
• Notifications: manage game reminders in Settings → Notifications or turn off notification permission in Android settings. Reminders use Android notification features; permitting them is optional.
• Local storage: use Delete device progress when playing without a connected account, or clear the app’s storage in Android settings. Device progress and a Google-connected save are separate.
• Google connection: signing out stops use of that connected session. Removing an app connection from Google or uninstalling the game does not by itself submit a Vimoora account-deletion request.
• Privacy requests: contact support@vimoora.io to request access, correction, deletion or other rights available to you.

These privacy and deletion pages do not embed advertising or analytics pixels. Your browser still requests the page and its images from our servers. The game uses app storage and identifiers for settings, sessions and saved state; Google services may use their own identifiers as explained above.

Delete your account or data

You can initiate account deletion in the app or request it without reinstalling the game. Use our dedicated Block Challenge account-deletion page, or email support@vimoora.io with the subject Block Challenge account deletion.

In the app

1. Open Block Challenge and sign in to the game account you want to delete.
2. Open Settings → Account & privacy.
3. Select Delete account, then confirm using Delete progress.

The in-app action closes the connected account, removes its current player name, Google link, profile-photo records, recovery access and current notifications, and prevents you from using that account’s saved progress. Local-only players instead see Delete device progress.

If you cannot access the app

Email us from the Google sign-in email if possible. Include your player name and player ID if you know it; not knowing the ID does not stop you asking for help. We may need to verify ownership before removing data to protect accounts from unauthorised requests. We do not need your Google password, recovery code or payment-card details.

What may remain

Account deletion does not necessarily erase every historical transaction or verification record immediately. Some game-result, power/reward, purchase, security and audit records may remain associated with internal identifiers to investigate abuse, prevent replay of a purchase or reward, resolve disputes, or meet legal obligations. The retention section explains this distinction. You may ask us to review deletion of associated personal data as well as closing the account.

Deleting your Block Challenge account does not delete your Google account or Google’s records, and does not automatically refund purchases. Signing in again can create a new game account; deleted progress and spent consumable powers should not be expected to return. Clear app storage on your other devices if you also want their local copies removed.

We handle verified requests without undue delay and within applicable legal time limits. We may ask for necessary ownership information and will explain if a legal or security reason limits deletion. The deletion-request page remains available without signing in.

How long information is kept

Device data

Local game data remains until you delete device progress, clear app storage, or the operating system removes it. Deleting a cloud account does not remotely erase every device or browser copy.

Active account data

We keep account, progress and inventory information while needed to provide your saved account and related features. You can request account and associated-data deletion at any time.

Short-lived records

Expired ranking snapshots and pending sign-in attempts are cleared through service maintenance. Routine game-activity events and read notifications older than 30 days are eligible for deletion by that maintenance; processing can occur in batches. Unread notifications, game results and transaction records are separate from this short-lived event history.

Transactions, rewards, security and support

Purchase-verification records, reward and power records, relevant game results, audit information and correspondence may be kept longer when needed for recovery, duplicate-claim prevention, fraud investigation, disputes or applicable legal requirements. There is no single automatic 30-day expiry for these records. Retention depends on their purpose, unresolved claims and applicable obligations. We can explain the records relevant to a verified deletion request and remove associated personal data where it is no longer needed.

Backups and third-party records

Restricted backup or recovery copies may remain after data is removed from the active service, until those copies are overwritten or removed through backup maintenance. They are not part of normal public gameplay. Google’s own purchase, advertising and account records follow Google’s retention rules and privacy controls.

Security and international processing

The game service uses HTTPS to protect information in transit. Access to administration is restricted, and we use account authentication, protected credentials and transaction verification to reduce misuse. Keep your recovery information private and do not share account tokens or verification codes with other players.

Our hosting and the Google services used by the game may process information outside your country. Applicable privacy protections and any required safeguards continue to apply to those transfers. Contact us for information about processing relevant to your account.

Privacy rights and requests

Depending on where you live, you may have rights to access or obtain a copy of your information, correct it, request deletion, restrict or object to certain processing, withdraw consent, or receive portable data. These rights can have legal limits, including obligations to retain certain transaction or security records. Withdrawing consent does not undo processing that was lawful before withdrawal.

Send requests to support@vimoora.io, identify Block Challenge, and describe what you need. We may request proportionate information to verify ownership. You may also contact the data-protection authority responsible for your location.

Children and families

Connected accounts, profile-photo uploads and purchases must follow applicable age and parental-consent requirements, as well as Google’s account and store rules. A parent or guardian who believes a child has provided personal information without the required permission can contact support@vimoora.io to request a review and deletion where appropriate. Please identify Block Challenge and provide only the information needed to locate the account.

Changes and contact

We may update this policy when the game, its providers or relevant requirements change. The date at the top shows the current version. Material changes will be explained through an appropriate notice when required.

Privacy contact: Vimoora Games — support@vimoora.io.
Account-deletion requests: vimoora.io/games/block-challenge/delete-account/.