Privacy Policy
Last updated 27 July 2026 · Applies to the Bloom.io website, the browser game, and the Bloom.io apps for iOS and Android.
Bloom.io has no accounts, no logins, and no analytics. Almost everything about you stays on your own device. This page sets out the few exceptions, in plain terms.
The short version. We receive the display name you type and the ordinary connection details needed to run a match. Your progress and purchases are stored on your device. The mobile apps show ads, which involve advertising identifiers — you can decline that, and the game plays exactly the same either way. We don't sell anything about you, and we never have.
What we collect, and why
Your display name
When you play online you type a name. It's sent to the game server so other players can see who captured what, and it's held only while you're connected — when you leave, the slot is handed back and the name is discarded. It isn't written to a database and it isn't linked to anything else about you. Please don't use your real name or anything else identifying; nothing in the game needs it.
Connection data
Like any website, our server sees your IP address and basic request details when you connect, and our hosting provider keeps short-lived operational logs. We use those only to deliver the game, diagnose faults, and block abuse. We don't build profiles from them.
Things kept on your device
Your petals, gems, unlocked cosmetics, equipped items, and settings live in your browser's local storage or in the app's own storage on your phone. They are never uploaded to us — we genuinely cannot see them. Clearing your browser data or uninstalling the app erases them permanently, and because there are no accounts there is no copy for us to restore.
Advertising — mobile apps only
The iOS and Android apps show ads through Google AdMob. To do that, Google may process your device's advertising identifier, coarse location, and how you interact with an ad. We never receive that data ourselves; we only see aggregate earnings.
The browser version at this site does not serve third-party ads at all. The "ad" you may see between rounds in the browser is a built-in placeholder with a countdown — no ad network, no identifier, no third-party request.
Purchases
Payments are handled entirely by Apple and Google. We never see your card details, billing address, or Apple/Google account. To confirm a purchase is genuine and to let you restore it on a new device, receipts are validated by RevenueCat, which receives the store receipt and a randomly generated app user ID. That ID isn't tied to your name or email.
| Data | Who receives it | Why | Can you avoid it? |
|---|---|---|---|
| Display name | Our game server | Show who's who in a match | Play offline vs bots |
| IP + request logs | Our hosting provider | Deliver the game, block abuse | No — inherent to connecting |
| Progress and settings | Nobody — stays on device | Remember your unlocks | Clear local data |
| Advertising identifier | Google AdMob (apps only) | Serve and measure ads | Yes — decline the prompt |
| Purchase receipt | Apple/Google, RevenueCat | Confirm and restore purchases | Don't purchase |
What we don't do
- No accounts, sign-ups, email addresses, or passwords.
- No analytics, telemetry, crash-reporting, or attribution SDK of any kind.
- No selling or sharing of personal information, in the sense used by the CCPA or any other law.
- No cookies for tracking. The website sets none at all.
- No third-party fonts, CDNs, or embeds on this website — everything is served from this domain, so opening these pages tells nobody but us that you did.
Your choices
- Ad personalisation. In the EEA, UK and Switzerland you'll see a consent prompt the first time you open the app, and on iOS an additional "Allow tracking?" prompt. Decline either and you'll get non-personalised ads instead. Nothing else changes.
- Change your mind later. iOS: Settings → Privacy & Security → Tracking. Android: Settings → Google → Ads, where you can also reset or delete your advertising ID.
- Remove ads entirely. A one-time purchase turns off the between-round ads.
- Erase everything. Clear your browser data, or uninstall the app. That's the complete set of what exists.
- Play with no server at all. Practice matches against bots run entirely offline.
Your legal rights
If you're in the UK, EEA, California, or another region with a comprehensive privacy law, you have rights to access, correct, delete, and port your personal data, and to object to certain processing. We want to be straight with you about what that means here: because we hold no account and store nothing that identifies you, we usually have nothing to hand over or delete. The data you'd want removed is on your device, and you can erase it yourself in seconds.
Where we do process personal data, our legal bases are our legitimate interest in running and securing the game (connection data), and your consent (personalised advertising), which you can withdraw at any time. Contact us at the address below and we'll respond within 30 days. You may also complain to your local data-protection authority.
Children's privacy
Bloom.io is rated for players aged 13 and over and is not directed at children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we'll delete whatever we hold.
Retention and transfers
Display names exist only for the length of a session. Operational logs are kept briefly by our hosting provider and then rotated away. Data held by Google and RevenueCat is retained under their own policies, linked above.
Our servers and our providers operate in the United States and the European Union, so your data may be processed outside your home country. Where required, transfers rely on the European Commission's standard contractual clauses.
Changes to this policy
If we change what we collect, we'll update this page and move the date at the top. Material changes affecting the apps will also be flagged in the release notes, so a change can't slip past you quietly.
Contact
Questions, requests, or anything that looks wrong: support@bloom-io.example.