Privacy policy
What Blocks & Burrows keeps, and why
Effective 27 October 2026. Applies to the Blocks & Burrows app and this website.
Blocks & Burrows is made by Techbeaver IT Systems Ltd, 22 Adeleye Street, Gbagada, Lagos, Nigeria ("we"). We are the data controller for the data described here. You can reach us at [email protected] .
The short version
- You play without an account, a name or an email address. The app creates an anonymous player id on first launch.
- We keep your runs, scores and level progress, and a generated display name, so that leagues, the Daily Burrow and progress work.
- Your pet, coins, food and settings stay on your phone.
- The free version shows ads from Google AdMob. Where the law requires it, the app asks first, and you can change your answer in Settings.
- We do not sell your data. Delete your account from inside the app at any time; what we hold about you goes with it.
What we collect
| Data | What it is | Why we keep it |
|---|---|---|
| Player id | An anonymous Firebase Authentication user id created when you first open the app. | To keep your progress and put your scores on leaderboards. |
| Display name | A name the app generates for you ("Mossy Amber Fox"), or one you choose. Names are unique. | Shown to other players in your league group and on the Daily Burrow ranking. Public. |
| Play data | Each Tumble Rush, Daily Burrow and Adventure run as a record (the seed, where you placed each block and when), your scores, your league week, group, points and tier, your Rush and Daily streaks, daily quest progress, and your best result on each level. | To check every score on the server by replaying it, rank the leagues and the Daily Burrow, pay league and quest rewards, and restore level progress. |
| Activity | When you were last seen and how many days you have played. | To understand how many players come back. Never shown to other players. |
| Notifications | Your device's push token and platform. | Only if you allow notifications, to remind you before your league week closes and to tell you how it went. Pip's own reminders are scheduled on your phone and send nothing to us. |
| Purchases | Which Burrow Pass or coin pack you bought, whether a subscription is active and when it ends. | To give you what you paid for. |
| Support | Your name (optional), email address and message when you write to us. | To reply. |
| Server logs | Our hosting provider keeps short-lived request logs (IP address, time, path). | Security and keeping the service running. |
Your pet, its name and needs, your coins, food, hearts, the burrow's furniture and your settings are stored only on your phone. We do not ask for your contacts, location, photos, camera or microphone.
Ads
The free version shows ads served by Google AdMob: videos you choose to watch for a reward, and an occasional full-screen ad between games. AdMob receives your device's advertising identifier, your IP address and information about your device and the ad it showed, and uses them to serve, limit and measure ads and to prevent fraud. We ask AdMob for ads suitable for all audiences (rating G).
If you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent through Google's consent form before personalised ads are shown; without it you see non-personalised ads. You can change your choice at any time in Settings, then Privacy choices. You can also reset or delete your advertising identifier in your phone's settings, and on iPhone the app does not track you across other companies' apps unless you allow it. Google's use of this data is described at policies.google.com/technologies/partner-sites. With the Burrow Pass, rewards come without a video.
Purchases
The Burrow Pass, monthly or yearly, and coin packs are sold through Google Play and the App Store. Google or Apple handles the payment; we never see your card. RevenueCat processes the purchase receipt so that the app knows what you own, and keeps a purchase history tied to your player id. Our server keeps only whether your pass is active and when it ends.
Where the data lives
Scores, progress and account records are stored in Google Cloud Firestore in the European multi-region (eur3, Belgium and the Netherlands). Sign-in is Firebase Authentication. Push notifications go through Firebase Cloud Messaging. Our API runs on techbeaver. Purchases go through RevenueCat, and ads through Google AdMob. Google (for Firebase), RevenueCat and techbeaver process data on our behalf under their data-processing terms. Google AdMob acts as an independent controller for the ad data it receives. Transfers outside the European Economic Area and the United Kingdom rely on standard contractual clauses.
How long
- Account, name, runs, scores, league entries, quests, level progress and notification tokens: until you delete your account.
- Support messages: twelve months after we last reply.
- Server logs: a few weeks.
Your choices and rights
- Delete everything. In the app: Settings, then Delete account. See how deletion works.
- Ads. Settings, then Privacy choices, where that applies; or reset your advertising identifier in your phone's settings.
- Notifications. Turn them off in the app's settings or in your phone's settings; the token is removed.
- Name. Change it in the app at any time.
- If you are in the European Economic Area, the United Kingdom or another place with similar rules, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to move it. Write to [email protected] . You can also complain to your data protection authority.
Our legal grounds under the GDPR and UK GDPR: performing our contract with you (running the game you asked to play), our legitimate interests (keeping scores honest, keeping the service secure, understanding how many players return) and your consent (personalised ads and notifications).
Children
Blocks & Burrows is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us data, write to us and we will delete it.
Security
Every request to our servers is encrypted and carries a signed Firebase token. The server replays each submitted run before it counts, so a tampered score is rejected rather than stored.
Changes
If this policy changes in a way that matters, the app will say so the next time you open it, and the date at the top will move.