Privacy policy

Last updated: 8 October 2026 · BlockFlow: Brick Puzzle for iOS

This policy explains how Flow Group AB (“we”, “us”) handles personal data when you play BlockFlow: Brick Puzzle (“BlockFlow”), use its FlowGames online services or contact us. Flow Group AB, Sweden, is the data controller.

Data the game collects

BlockFlow needs no account or login. The data below is linked to your player profile in the game, not to your real name.

• Identifiers. We create a player ID and an installation ID, and use authentication credentials and sessions to recognise your game installation and protect your save. The game may also use Apple’s identifier for vendor (IDFV) for analytics. If you allow tracking, the game also sends Apple’s advertising identifier (IDFA) for install attribution (see Advertising and tracking). If you connect an account with a link code, we store the link between your player and that account (see Optional account link).
• Profile and progress. The display name you choose, your built-in avatar, your device’s country or region setting, your cloud save (levels, coins, bricks, hearts, boosters, Brick Town, events and rewards) and your level results keep your progress safe and in sync and power the Ranking. Your display name, avatar, level and country are shown to other players on the Ranking, and your country or region decides which country ranking you appear in. You do not need to use your real name.
• Gameplay and usage. We receive game events such as sessions, level starts, wins and losses, durations, booster use and reward claims, a summary of each play session (such as time played, levels, ads watched and purchases) and, from a sample of players, more detailed play data about each level (such as the time left, the boosters used and what was on the board). We use these to run and improve the game, tune level difficulty and verify progress.
• Purchases. Product IDs, transaction identifiers, signed transaction data or purchase receipts, price, currency, purchase status and delivery records. Our server verifies every purchase with Apple before it delivers the items, and uses these records to restore eligible purchases and prevent duplicate or fraudulent claims. Apple processes your payment; we never receive your payment-card number.
• Diagnostics. Performance data such as frame and loading times, Apple’s daily performance summary (which includes how often the app closed unexpectedly), and network and launch information help us find and fix problems.
• Approximate location. Our server derives your country or region from your IP address. We use it for fraud and cheat checks and for the country ranking. BlockFlow never asks for or uses your precise (GPS) location.
• Device and context. Your device class (such as the kind of device and its operating-system version), your language and time zone and broad play-context groupings help us understand performance and adapt parts of the game, such as which in-game offers are shown.
• Security. Online requests expose your IP address to our service providers. Installation and session records, timestamps, gameplay evidence, app-integrity checks from Apple (App Attest) and risk signals help secure the service and investigate cheating and abuse.
• Support. If you email us, we receive your email address, message and any information or attachments you choose to provide. Please do not send passwords, payment-card details or identity documents.

We do not collect your contacts, photos, precise location, health data, browsing or search history, or payment-card details.

Advertising and tracking

Tracking permission and the advertising identifier. When you first open BlockFlow, while the game loads, it shows Apple’s App Tracking Transparency prompt (after Google’s consent message, where one is required). If you allow tracking, the game reads your device’s advertising identifier (IDFA) and sends it to our FlowGames servers (api.flojostudio.com), linked to your player profile and installation ID. We use it only for install attribution: to measure which of our ads or partner apps brought you to the game, and how well that advertising works. Because this matches data about you from the ad or partner app that sent you with data from BlockFlow, Apple calls it tracking. If you allow tracking, Google AdMob, the ad network in the game, may also use the IDFA to show you personalised ads (see Ads). If you do not allow tracking, the advertising identifier is never read or sent, and the game plays exactly the same. You can change your answer at any time in your device’s Settings → Privacy & Security → Tracking; once tracking is off, no new advertising identifier is sent. We do not sell your data.

Ads (Google AdMob). BlockFlow shows ads from Google AdMob: rewarded videos that you choose to watch (to double the coins or bricks from a level, for a free booster or to keep playing a level). Full-screen ads between levels are built into the game but switched off; if we switch them on, buying Remove Ads removes them. To show and measure ads, limit how often you see them and prevent fraud, Google receives your IP address, your device’s advertising identifier (only if you allow tracking), information about your device and the app, and how you interact with the ads. Google processes this data under its own privacy policy: How Google uses information from sites or apps that use its services. We also record which ads were shown, whether a rewarded video was watched to the end and the revenue an ad earned, to deliver rewards and understand how the game performs.

Your ad choices. In the EEA, the UK and Switzerland, the game shows Google’s consent message before any ad loads; if you do not consent, Google shows only non-personalised (limited) ads. In US states with privacy laws, Google’s message lets you opt out of the sale or sharing of your data for ads. You can change your choices at any time in the game: Settings → Ad privacy choices opens Google’s privacy options wherever they apply.

Rewards are confirmed by our server. When you finish a rewarded video, Google confirms it directly to our server (the ad unit, the reward, a one-time code and your player ID), and our server then delivers the reward to your player profile. We do not receive your ad data from Google.

Optional account link

You play as a guest. If a partner app or reward programme gives you a link code for BlockFlow, you can enter it in the game under Settings → Account. We then process the link between your player and your partner account, and share relevant progress, milestone qualification, reward records and fraud-verification outcomes with that partner so it can administer rewards. Its own privacy policy applies to its account and payouts. Ordinary gameplay does not require a link.

Why we use data and who receives it

We use data to provide the game and its online features, keep your progress, fulfil purchases, answer support requests, measure and improve the game, measure which ads and partner apps bring new players (install attribution, with the advertising identifier only if you allow tracking), show ads through Google AdMob and deliver the rewards you watched videos for, and protect players and the service. Where the GDPR applies, we rely on performance of our agreement with you for the services you request, our legitimate interests in improving the game and preventing fraud and cheating, your consent where it is required (for example for tracking with the advertising identifier and for personalised ads), and legal obligations where they apply.

Data is processed by our hosting and infrastructure providers (the FlowGames backend runs on Amazon Web Services), and by Apple for app distribution, purchases and app-integrity checks. Google receives the ad data described under Ads for Google AdMob. A partner receives what is described under Optional account link only if you connect an account. We may also disclose necessary information to comply with law, protect legal rights or complete a business transfer with appropriate protections. Some providers process data outside the EEA. Where required, transfers must use an adequacy decision or appropriate safeguards such as standard contractual clauses. Contact us for information about the safeguards relevant to your data.

Retention and security

We retain your player profile and save while needed to provide the game and recover your progress. Retention of usage, support, purchase and security records depends on their purpose, ongoing disputes, fraud investigations and applicable legal record-keeping duties. Uninstalling the app does not itself delete server-side records or necessarily remove credentials stored by your device; email us for that.

We use measures such as HTTPS, access controls and protected authentication credentials. No storage or transmission system can be guaranteed completely secure.

Your choices and rights

You can choose a display name that does not identify you, and you do not have to connect an account. You can allow or refuse tracking in the prompt and change it at any time in your device’s Settings → Privacy & Security → Tracking. Where Google’s consent message applies to you, Settings → Ad privacy choices in the game opens it again so you can change your ad choices; elsewhere that button opens this section.

Depending on where you live, you may request access, correction, deletion, a copy of your data, restriction of processing or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Send requests to hello@pollflow.io with “BlockFlow privacy request” and enough information to identify your game profile, such as your display name on the Ranking and the level you have reached. We may ask for proportionate verification to protect your data. You can complain to your local supervisory authority, including Sweden’s Integritetsskyddsmyndigheten (IMY).

Deleting your data. To have your data deleted, send the request by email as described above. We then erase your profile, progress, coins, boosters, gameplay data and identifiers on our server; this cannot be undone. Purchase and reward records that we must keep for bookkeeping are kept with the identifiers that link them to you removed.

Children and updates

BlockFlow is a general-audience game and is not directed at children under 13. If you believe a child has provided personal data without the permission required by local law, contact us so we can investigate and address it.

We may update this policy as the game or our practices change. The date above identifies the current version. Material changes will be communicated as required by applicable law.

About this page

This privacy page has no advertising, analytics scripts or cookies. Our hosting infrastructure still receives the technical information needed to deliver and secure the page.