Privacy Policy

1Who is responsible

Write to privacy@blobdom.com about anything on this page — an account to delete, a video to take down, a question about what is kept.

2The short version

• No email address, no real name, no date of birth is ever asked for.
• No advertising, no analytics, no tracking cookies, no third-party trackers.
• Nothing about you is sold or handed to anyone for their own purposes.
• Chat is relayed live to the players near you and is never logged.
• What you do in the world is public while you are in it, and may appear in a published video — see section 6.

3What is stored

Kept on the server, on disk, until deleted:

• Your account and the game state that belongs to it — how your blob looks, what it owns, and where it left off, so a restart does not start you over. Never your password itself: only a one-way hash of it, which cannot be read back.
• Your clan, and who is in it.
• Your logins, so you stay logged in between visits and across a restart of the game. Logging out ends one; they expire on their own after 30 days.
• Moderation records, where that is what makes a ban work.

No email address, no real name, no date of birth, no payment details. Nothing is gathered to profile you, and nothing here is sold or handed to anyone for their own purposes. Write to privacy@blobdom.com to ask what is held for your account, or to have it removed.

Kept in your own browser:

• A login cookie, so you stay logged in between visits. It lasts 30 days, cannot be read by scripts, and is needed for the game to work — it is used for nothing else. There are no analytics or advertising cookies on this site.
• Your clip length, under blobdom.clipSeconds, so the recorder remembers how many seconds you asked it to keep.

4What passes through, unstored

• Your IP address. Unavoidable — it is how a connection reaches you. It is also looked up in a MaxMind GeoLite2 database to get a coarse city and country. That lookup happens on our own server against a local copy of the database, so your IP is not sent to MaxMind or anyone else to do it. The city and country are held in memory only while you are connected and vanish when you disconnect; they are never written to disk. They are shown only to moderators, who use them to block abuse coming from one place: the /api/geo endpoint that serves them requires a moderator account, and the ?city labels stay blank for everybody else. Other players are never shown your location or your IP address.
• What you type. Chat is relayed live to the players near you and held only for the seconds it floats over your blob. It is not logged, searched, or kept.
• Ordinary server logs. The web server records requests, which can include IP addresses, for keeping the game running and debugging it. They are not used to build any profile of a player.

5Other companies involved

• Google Fonts. The front page and these pages load one typeface from Google's font servers, so your browser asks Google for it — which tells Google your IP address and browser. The game itself loads no fonts.
• Buy Me a Coffee. Coin purchases happen on their site, under their terms and privacy policy. They handle the payment; we never see your card, your address, or your name. Coins are then credited to your username by hand.
• TikTok and YouTube. Only ordinary links — nothing from either is embedded or loaded until you click through.

6Videos of the game

Gameplay is recorded and published as videos, on TikTok, YouTube, and elsewhere. A recording is a picture of the shared world, so it can show your username, your clan, your chat, and what your blob did. The legal basis is our legitimate interest in showing and promoting the game, and section 5 of the Terms of Use covers the licence side of it.

Videos published by us are recorded without the ?city location labels switched on, and the account they are recorded from is not a moderator account, so a player's city cannot appear in them.

Other players can record their own screens with the game's clip button or any capture tool. Those recordings are theirs, not ours, and a request to us cannot remove them.

7YouTube API Services

The videos in section 6 reach our own YouTube channel through YouTube API Services. That makes us bound by the YouTube Terms of Service, and anything obtained through those services is handled under the Google Privacy Policy.

What that connection does is narrow, so it is worth stating exactly:

• It posts to one channel we own, and reads back the list of our own uploads to check a video arrived. It cannot see any other channel, and it is never used to look anything up about you.
• No YouTube account data belonging to players or viewers is accessed, collected, or stored. You are never asked to connect a YouTube account to Blobdom, and there is nothing here to connect one to.
• What is kept from it is our own: an authorisation token for our channel, that channel's id, and the id of each video we posted. None of it is about you.
• Nothing from YouTube is embedded on this site — no player, no script, no cookie. The links here are ordinary links, as section 5 says.

8Children

Blobdom is for players aged 13 and over, and accounts are not knowingly kept for anyone younger, nor are they knowingly featured in videos. A parent or guardian who writes to privacy@blobdom.com with a username will have that account deleted and any video the child appears in removed, without needing to explain themselves.

9Your rights

Depending on where you live, you have the right to ask what is held about you, to have it corrected or deleted, to object to it being used — including in videos — and to complain to your local data protection authority. All of it goes to the same address, and is answered within 30 days.

Since accounts have no email address attached, there is no way to check that a request comes from the account it names. Expect to be asked for something only the account holder can do — logging in and typing a phrase we give you, in the world — before an account is deleted or its data handed over.

10Keeping and deleting

Account data is kept until you ask for it to be deleted, or until the game closes down. Deleting an account removes the account and everything held for it, its logins included. A username may be kept in the moderation list where that is what makes a ban work, and clan records may keep a former member's name in the clan's own history.

11Changes to this policy

This policy changes when the game does. The date at the top says when it last did. If a change ever means doing something materially different with data already collected, it will be said plainly on the front page rather than quietly edited in here.