Privacy Policy

Last updated 12 November 2026

This policy explains what data FragBlast (“the game”) keeps about you and why. The game is run by ZeroIndex OÜ, a company registered in Estonia (“we”, “us”), which is the controller of that data under the EU General Data Protection Regulation (GDPR).

In short: you can play without an account; if you sign in, our sign-in service (Clerk) keeps your login details, and we keep your account ID, your nickname and your ranked stats. We use Google Analytics, through Google Tag Manager, to count visits to fragblast.io. We don’t show ads and don’t sell data.

Playing as a guest

Guests get a random nickname. We don’t create an account for a guest. While you play, the game server handles your nickname and what you do in the match (movement, shots, kills), as any multiplayer game must, to run the match for everyone in it.

Signing in

Signing in is handled by Clerk (Clerk, Inc., clerk.com), a sign-in service that processes it on our behalf. Clerk keeps what the sign-in method you choose needs: for example your email address, or your user ID and basic profile from an account you sign in with (such as Google). It also keeps your sessions, so you stay signed in. Clerk’s own privacy policy covers its side.

The game’s servers keep:

• your Clerk account ID (to recognise you next time);
• the nickname you choose, which is shown to other players and on the leaderboards.

We never receive your password.

Matches and leaderboards

• Ranked stats. For signed-in players, finished ranked matches add to your stats (kills, wins, duels won, deaths and matches played), kept for each weekly season and for all time. Leaderboards show nicknames and these stats to everyone.
• Game events. The server records events such as a player joining a room (nickname, room, mode and map) and a match ending (its result and the players’ scores). We use them to run, balance and improve the game and to spot cheating.
• Moderation. If an account is banned for breaking the Terms of Use, we keep a note of that.

Stored in your browser

The game keeps a few things in your browser’s local storage, on your device: your settings (sound, controls, graphics, the server region you picked) and your nickname. If you sign in, Clerk keeps your session in your browser (in cookies and local storage) so you stay signed in. On fragblast.io, the game remembers your answer to the cookie card, and Google Analytics sets its own cookies if you allow it (below). There are no advertising cookies. You can clear all of this by clearing the site’s data in your browser.

Visit statistics (Google Analytics)

On fragblast.io (not in the itch.io or desktop versions) the page loads Google Tag Manager, which runs Google Analytics (Google Ireland Ltd.). It tells us how many people visit, which pages they open, roughly where they’re from (country and city, from their IP address), what device and browser they use and how they found the site. Google Analytics sets cookies (named _ga and _ga_…) to tell returning visitors from new ones, kept for up to two years. Google processes this data on our behalf and may process it outside the European Union, under the safeguards the GDPR requires. On your first visit a card asks whether we may use these cookies, with Accept and Decline. In the European Economic Area, the UK and Switzerland, Google Analytics sets no cookies until you accept; until then Google gets only cookieless signals (that a page was visited, without anything that recognises you). Elsewhere it’s on unless you decline. You can change your answer at any time with Cookies at the bottom of the game’s menu or of this page; declining also deletes the cookies. You can also block it with your browser’s privacy settings or a content blocker, or with Google’s opt-out add-on (tools.google.com/dlpage/gaoptout); the game plays the same without it.

Server logs

Like any website, our servers and hosting provider process your IP address and basic connection details to deliver the game and keep it secure. Chat messages you send in a match go to the players they’re for (everyone in the room, or your team) and are written to the game server’s logs, so we can deal with abuse. These logs are kept only as long as needed for that.

Why we use your data

• To run the game and your account, as you ask us to when you play or sign in (GDPR article 6(1)(b)).
• To keep the game fair and secure, and to improve it, which is our legitimate interest (article 6(1)(f)).
• To count and understand visits to the site (Google Analytics): with your consent, which you give or refuse on the cookie card (article 6(1)(a)).

Where it’s kept and who sees it

The game’s servers run in the European Union. Our hosting providers, Clerk and Google (for Google Analytics) process the data on our behalf, under contract. Clerk and Google may process data outside the European Union, under the safeguards the GDPR requires. Nicknames and leaderboard stats are public by design. We don’t sell or share your data with anyone else, unless the law requires us to.

How long we keep it

We keep your account, nickname and stats while your account exists. Ask us to delete your account and we’ll delete it, with your sign-in details at Clerk, your stats and leaderboard entries. Game events are kept for as long as they’re useful for running and improving the game.

Your rights

Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. To do so, contact us (see below). You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or the data protection authority where you live.

Children

The game is not meant for children under 13 without a parent or guardian’s permission. If you believe a child has signed in without it, contact us and we’ll delete the account.

Changes to this policy

We’ll update this page when what we do with data changes, and change the date at the top.

Contact

ZeroIndex OÜ, Estonia.