Blef

Privacy Policy

Effective date: 26 June 2026

This policy explains what information the Blef app and its game service collect, why, how long it is kept, and your choices. Blef is published by Adrian Golian (“we”, “us”). Questions: adriangolian@yahoo.com.

The short version

No account, no sign-up, no login. You don’t give us your name, email, or phone number.
We don’t collect your advertising identifier (IDFA), location, contacts, photos, or IP address in the app, and we don’t track you across other apps or websites.
To run a multiplayer game we send the nickname you choose, a random per-game ID, your avatar choice, and your in-game moves to our game server.
We use privacy-respecting crash reporting and anonymous product analytics to keep the app stable — never linked to advertising identities, never sold.
Game data is automatically deleted about 365 days after a game is created.

What we collect and why

1. Game data you provide / generate (sent to our game server).

Nickname — free text you choose. Shown to other players in the same game/room. Filtered for offensive content by our server.
Per-game player ID — a random identifier (UUID) generated freshly for each game. Not tied to your device, Apple ID, or any account, and not reused across games.
Avatar choice — the mask/material tokens you pick (not a photo).
Gameplay — your bets, cards, and the match history for the games you play, so the multiplayer game can run and other players see the shared game state.

Purpose: to operate the multiplayer card game. Legal basis (GDPR): performance of the service you request, and our legitimate interest in running a functioning game.

2. App settings (stored only on your device).

Your saved nickname, avatar, sound/haptics/animation preferences, tutorial-seen flags, and single-player progress are stored locally on your device (iOS UserDefaults). They are not sent to us.

3. Diagnostics & crash reports.

Apple MetricKit — aggregated, on-device performance/crash diagnostics provided by iOS.
Sentry — crash reports so we can find and fix bugs. Configured not to send personal data (no IP address, no nickname, no game ID; sendDefaultPii is off).

Purpose: app stability and bug-fixing.

4. Anonymous product analytics.

PostHog — anonymous usage events (e.g. app opened, tutorial step reached, a match started/finished) to understand retention and where new players get stuck. Configured to be anonymous: no IP address is stored, we do not send your nickname or game ID, and outcomes are reduced to simple flags/counts on your device before sending.

Purpose: improving the product. Legal basis (GDPR): legitimate interest in improving the app, using anonymous data.

We do NOT collect: advertising identifiers (IDFA), device location, contacts, photos, microphone/camera, health data, or your IP address within the app. We do not use third-party advertising and do not sell or rent your data.

Who processes data for us

Amazon Web Services (AWS) — hosts the game server and database (region: London, eu-west-2).
Sentry — crash reporting.
PostHog — anonymous analytics, EU hosting.

These providers process data on our behalf under their data-processing terms. We do not sell data and there is no advertising network involved.

How long we keep it

Game records (including nicknames and match history) are automatically deleted about 365 days after the game is created.
Server diagnostic logs that may contain a nickname or per-game ID are retained for 365 days and then deleted.
On-device settings remain until you delete the app or clear them in Settings.
Crash/analytics data is retained per the processors’ standard retention windows.

Your choices and rights

Because there are no accounts, the strongest control is local: deleting the app removes all on-device data, and game records expire automatically as above.

Depending on where you live (e.g. EU/UK GDPR, California CCPA/CPRA), you may have rights to access, correct, or delete your data, or object to certain processing. Since game records are keyed only by a random per-game ID and a chosen nickname, we may need details (such as the relevant nickname and approximate date/room) to locate any data. To make a request or ask a question, contact adriangolian@yahoo.com. You also have the right to complain to your local data-protection authority.

Children

Blef is intended for users 13 and older. We do not knowingly collect personal data from children under that age. If you believe a child has provided data, contact us and we will delete it.

User-generated content & safety

Nicknames and in-game reactions are user-generated. We filter nicknames for offensive content, and the app lets you report an offensive nickname and block/mute other players. See our Terms of Use for the rules and how to report.

Security

Traffic between the app and our server uses encryption in transit (HTTPS/TLS). No method of transmission or storage is 100% secure, but we take reasonable measures to protect the limited data we handle.

International transfers

Our providers may process data in regions outside your own. Where required, transfers rely on the providers’ standard contractual safeguards.

Changes to this policy

We may update this policy; we will change the “Effective date” above and, for material changes, surface a notice in the app or on our site.

Contact

Adrian Golian — adriangolian@yahoo.com