BALLISTIKPrivacy policy
Last updated: 11 November 2026
Ballistik is an online football game for the web (ballistik.io), iOS and Android. This policy explains what we collect when you play, why, who else handles it, and how you can see or delete it. We don't sell your data, and we don't use it for advertising.
What we collect
| Data | When | Why |
|---|---|---|
| Username | Always (guests get a generated one like “Guest1234”) | Shown to other players in matches, chat, leaderboards, clubs and friend lists. |
| Email address and password | When you create an account with email | Signing in. The password is stored only as a salted scrypt hash, never in plain text. |
| Google account ID, email and name | When you sign in with Google (web only) | Signing in. We get your Google account ID and verified email; your name is used once to suggest a username. We never see your Google password. |
| Device ID | When you play as a guest | A random ID created by the game so reopening it finds the same guest profile. It is cleared when you create an account. |
| Game data: level, XP, match results and stats, ranks, coins, items and loadout, club and party membership | As you play | Running the game: matchmaking, ranked play, rewards, the shop (in-game coins only, no real money) and your profile. |
| Friends and private messages | When you add friends or message them | Delivering messages and showing who is online or in a match. |
| Chat messages | When you write in global, club, party, custom game or match chat | Showing them to other players. Each chat room keeps only its most recent 300 messages; older ones are deleted automatically. |
| Reports | When you report a player, or someone reports you | Moderation. A report stores the reason, optional details and a copy of the reported chat message, and is reviewed by our moderators. |
| Phone number and date of birth | Only if you enter them to become eligible for prizes | Checking that a prize winner is a real, unique person who is old enough. Optional. |
| IP address | Every request | Connecting you to game servers, choosing the closest region and limiting sign-in attempts. Not stored with your profile. |
Analytics
- Cloudflare Web Analytics (web only): counts visits, countries and page load speed. It uses no cookies and does not identify you.
- Google Analytics 4 (web only): counts how the game is used (for example, which modes are played). Advertising features, ad personalisation and Google signals are turned off, and we never send your username, email or other personal data to it. Google Analytics sets its cookies only if you choose "Accept all"; until then it sends only cookieless measurements.
- The iOS and Android apps contain no analytics and, for now, no advertising or tracking SDKs.
Advertising
On the web, the game shows ads from Google AdSense (H5 Games Ads): an optional video you can watch for a reward (bonus XP after a match, or a free drop a few times a day), and now and then a short ad when you leave the result screen. Ads never appear during a match. Google may use cookies and your device's identifiers to show and measure ads and, where the law allows and you agree ("Accept all"), to personalise them. In the EEA, the UK and Switzerland, Google's consent message asks for your choice first. You can learn more and change ad personalisation at policies.google.com/technologies/ads and adssettings.google.com. We record only how many ad rewards you have claimed, to apply the daily limit.
On your device
The game stores a sign-in token and your settings (language, sound, camera, server region) in your browser's or the app's local storage. Clearing it signs you out; it doesn't delete your account.
On the web we also set two cookies the game needs to work: bk_guest remembers which guest profile this browser plays as (for up to 400 days), so you get the same guest
back after local storage is cleared, and bk_consent remembers your cookie choice. The first time you open the game you choose between "Necessary only" and "Accept all"
(analytics cookies and personalised ads); you can change it any time from the "Cookies" link on the start screen or in Settings.
Who handles your data
- Cloudflare hosts the website, the game API, the database and chat.
- Our game servers in Europe and Türkiye run matches. They receive your username, your look in the game and your inputs during a match.
- Google provides Google sign-in, Google Analytics and ads (AdSense) on the web.
These providers may process data outside your country, under their own data protection terms.
What other players can see
Your username, level, stats, ranks, club, equipped items and whether you're online or in a match. Never your email, phone number, date of birth or Google account.
How long we keep it
- Your account and game data: until you delete your account.
- Chat rooms: the latest 300 messages per room.
- Finished matches: kept so other players keep their match history. When you delete your account, your name and ID in them are replaced with “Deleted player”.
- Moderation records (for example a ban or mute an admin applied): kept as long as needed to enforce our rules.
Deleting your account
In the game, open Profile → Delete account and type your username to confirm. This works for guest profiles too. It immediately deletes your account, sign-ins, progress, ranks, coins, items, friends, private messages, reports, phone number and date of birth, and removes your messages from global, club and party chat (messages in match and custom game chats are replaced by newer ones over time). It can't be undone.
No access to the game? Use the account deletion page.
Your rights
Depending on where you live (for example under the GDPR in the EU or KVKK in Türkiye), you can ask to see, correct, export or delete your data, or object to how we use it. You can change your username in the game and delete your account yourself; for anything else, email us at support@ballistik.io. You can also complain to your local data protection authority.
Children
Ballistik is not directed at children under 13, and we don't knowingly collect data from them. If you think a child has given us data, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the game.
Contact
Questions about privacy: support@ballistik.io