Privacy Policy

Last updated October 27, 2026

This policy explains what information Blockyard collects, why, who it is shared with and the choices you have. We try to collect as little as possible: Blockyard does not ask for your real name, email address, phone number, address or payment details, and it has no advertising or analytics trackers.

What we collect

Information	Why
Username, previous usernames, public user ID and join date	To run your account and show your profile.
Password (stored only as a one-way argon2id hash) and passkeys, if you add them	To let you sign in securely. We can’t read your password.
A sign-in session cookie (we store only a hash of it)	To keep you signed in. See Cookies.
Your avatar, profile description, friends, followers, groups, badges and settings	To show your profile and run the social features.
Things you upload or post: clothing images, emblems, sounds, games, group wall posts, shouts and inbox messages	To host and show them.
Game activity: which games you played, knockouts and wipeouts, and your in-game position while you play	To run multiplayer games, leaderboards, badges and “recently played”.
In-game chat	Chat is sent live to players in the same game. It is only saved when someone in that game submits a Report Abuse, which attaches the recent chat for moderators.
Tix balance and transactions (purchases, sales, rewards)	To run the virtual economy and show My Transactions.
Reports you make or that are made about you, support tickets, and moderation history	To keep Blockyard safe and answer your questions.
IP address	Used briefly to stop spam and abuse (rate limiting). We store only a keyed, scrambled form of it for a short time, not the address itself.

How we use it

To provide and secure the Service, show your content to other players the way the site is designed (for example your profile and avatar are public), prevent cheating, spam and abuse, enforce the Terms of Use, answer support requests and fix bugs. We do not sell or rent personal information, and we don’t use it for advertising.

Support and AI. If you contact support, an automated assistant may write a first reply or a draft for our staff. The text of your ticket and conversation is sent to our AI provider, Anthropic, to write that reply. Pictures you attach are not sent, and a person can always take over. We also use the same service to write made-up names and short descriptions for Blockyard’s market bots; no player information is sent for that.

Who can see it

Other players can see your public profile (username, previous usernames, avatar, description, friends count when you make your friends list visible, badges, groups and join date), what you post publicly and your in-game chat in the same game.
Administrators and Platform Moderators can see what they need to moderate: reports (including attached chat), uploads, profiles, support tickets and moderation history.
Service providers that host Blockyard for us: Render (servers and the PostgreSQL database, in the United States) and GitHub (source code, which contains no player data). They process data only to run the Service.
Legal reasons: we may share information if the law requires it or to protect players from harm.

Cookies and browser storage

Blockyard uses one essential cookie, which keeps you signed in. It is marked Secure and HttpOnly, and expires after about a week. We also save some settings in your browser (like the theme, graphics quality, recently viewed items and whether you closed the cookie notice). This is local storage, and it is never sent to other companies. We don’t use advertising, analytics or tracking cookies, so choosing “Essential only” or “Accept” in the cookie notice works the same. If you block cookies, you won’t be able to stay signed in.

How long we keep it

We keep account information while your account exists. Sessions expire after about a week. Rate-limit data expires within hours. Reports, moderation history and transaction records are kept while they are needed for safety, to settle disputes, or because the law requires it. Deleted content may stay in backups for a limited time.

Your rights and choices

You can change your description, avatar, username and password in Settings, and delete things you posted. Depending on where you live (for example under the GDPR in the EU/UK or the CCPA/CPRA in California) you may have the right to access, correct, delete or get a copy of your personal information, and to object to or restrict some processing. We don’t sell or “share” personal information for cross-context advertising. To make a request, contact us through Support from your account. We will not treat you differently for using these rights.

Children

Blockyard is for people aged 13 and older. We don’t knowingly collect personal information from children under 13. If you believe a child under 13 has an account, contact us through Support and we will delete it.

Security

We use HTTPS, hashed passwords and session tokens, passkey support, rate limiting and access controls. No system is perfect, so keep your password private.

Changes

If this policy changes in an important way, we will tell you on the site. The date at the top shows when it last changed.

Contact

Privacy questions or requests: contact us through Support.