PathBlitz — Privacy Policy
Last updated 24 October 2026
What an account is for
PathBlitz offers an optional account, created with an email address and a password. On the website you may instead sign in with Google. The account does two things: it carries your progress between devices, and it attaches your leaderboard entries and your rating to a name you choose. You can play every mode, including ranked, without one.
| What we hold | Why |
|---|---|
| Your email address | It is how you sign back in and how we could reach you about your account. It is stored on your account record and is never published anywhere. |
| Your display name | Chosen by you, shown on the leaderboard. It does not have to be your real name and we would rather it were not. |
| Your progress and rating | Levels completed, best times, rating and match count — so a new phone picks up where the old one left off. |
The public leaderboard
Completing a level publishes a score. The published entry contains only your display name, your rating, your highest level and your match count. Nothing else can be written to it: the database rules reject every other field, which is what makes that sentence a guarantee rather than an intention. Your email address is never part of it.
If you have not created an account, this still happens — the game registers an anonymous identity for you, which is a random identifier with nothing attached to it, and publishes the score under that. It carries no email, no name of yours and nothing that identifies you or your device. This is how the ranked mode finds real opponents instead of a fixed list. It applies on the website and in the Android app alike.
The daily puzzle
When you solve the day’s puzzle for the first time, the game sends our server (Google Firebase) the day, your time and the path you drew, under the same account or anonymous identity as your leaderboard scores. The server replays the path to check that it solves the board, keeps the first result for each player and day, and tells you how many players you beat. The day’s top ten are shown to other players by their display name, or with no name at all if they have no account — never an email address or an identifier. Your streak is kept on your device.
In the Android app you can ask to be reminded once a day. The reminder is scheduled on your phone by the phone itself; nothing is sent to us or anyone else to make it happen, and you can turn it off in the game’s settings or in the phone’s.
The Android app
The app is the same game as the website with the parts that need a browser removed at build time, not hidden at runtime:
- Ads. The app offers optional rewarded ads — a hint in Casual, a life in Rush when the day’s have run out, or another go at the Rush level the clock just won — which play only when you press the button that says so. It also shows a short ad between boards now and then: never in your first ten boards, never after a loss, never while a clock is running, at most one every three boards and never within ninety seconds of another ad.
- Purchases through Google Play. The app sells packs of hints, packs of lives, a pack of both, a one-time option that turns off the ads between boards, and Premium — a one-time purchase that turns the ads off and makes hints and lives unlimited. Google Play takes the payment; we never see your card or your payment details. See “Purchases” below for what we keep.
- Sign-in with Google is not offered in the app — only email and password. An app window cannot complete Google’s sign-in flow.
- Updates and ratings through Google Play. When a newer version is out, the app may show Google Play’s own update card, and after a good moment — never more than once a month — Google Play’s own rating card. Both are run by the Play Store on your phone under Google’s privacy policy; the game learns only whether you chose to update, and nothing about whether or how you rated it.
What the app contacts: our accounts and scores service (Google Firebase), for signing you in, publishing a leaderboard score, ranking a daily puzzle and confirming a purchase; our analytics service (PostHog, in the United States), for the anonymous gameplay analytics described below; Unity LevelPlay, for the ads above; and Google Play, for purchases. We measured the first two rather than assuming them: a release build was booted and a level was played while every outgoing request was recorded.
Unity LevelPlay (Unity Technologies) chooses and serves these ads, from Unity Ads and the other ad networks it works with. To do that, it collects information from your device — its advertising identifier and other device identifiers, an approximate location derived from the IP address, diagnostics about the ad, and how you interact with the ad — and uses it for showing and measuring ads, analytics and fraud prevention, as described in Unity’s privacy policy for game players and app users. Where the law requires it (the European Economic Area, the UK and Switzerland) the app asks for your consent first, through Google’s consent form, and passes your answer on to LevelPlay. You can reset or delete your advertising identifier, or opt out of personalised ads, in your phone’s Google settings. Versions of the app before 1.16.0 asked Google AdMob for ads instead, under Google’s terms for apps that use its services.
Purchases (Android app)
When you buy something in the app, Google Play handles the payment under Google Payments’ privacy notice. Before the purchase, the app gives Google Play a one-way scrambled form of your game identity (your account, or the anonymous identity described above), which Google uses to help detect fraud and which cannot be turned back into the identity. After the purchase, the app sends our server (Google Firebase) the receipt Google Play gave it; the server asks Google Play whether it is genuine and only then adds the hints or lives, turns the ads off or makes the account Premium. We keep a record of each purchase — Google’s order number, what was bought, when, and which game identity it was for — so that it cannot be counted twice, so that what you bought can be restored on another install, and for refunds and our accounts. We never see your name, card or address from Google Play. If you sign in to an account after buying as a guest, what you bought moves to that account.
Anonymous gameplay analytics (website and app)
To learn which levels are too hard and where players stop, the game sends gameplay events to PostHog, our analytics provider, which processes them on our behalf in the United States. They contain:
- what happened in the game — a level started or finished, how long it took, which mode, which language, which version of the game, and error reports when something breaks;
- a random install identifier, created on your device, so we can tell that a player came back the next day;
- an approximate location (country and city), which PostHog derives from the IP address the events arrive from;
- in the Android app only, where the install came from, as Google Play reports it: the source, medium, campaign and content of the link or ad that led to it, and, when it was a Google ad, Google's click identifier for that ad. We use it to learn which of our ads bring players who enjoy the game.
- in the Android app only, which pack you bought or started to buy, whether the purchase went through, and its price;
- in the Android app only, a note each time the app opens, sent by the app itself before the game has started: the app's version, the Android version, the version of the phone's built-in web view the game runs in, when the app was installed and last updated, and a second random identifier the app keeps for this purpose. It is how we learn when the game fails to start on a phone — which no event from the game itself can tell us.
They never contain your name, your email address or your account: the analytics identifier is not linked to your account, and signing in does not change it. We do not record your screen or your taps. On the web, browser settings and tracker-blocking extensions stop the analytics and the game plays exactly the same; the app has no separate switch.
The website (pathblitz.com)
The browser version does one more thing that the app does not:
| What | Why |
|---|---|
| Google reCAPTCHA / Firebase App Check | Confirms requests come from the real site rather than a script, so the leaderboard is worth reading. |
What stays on your device
Your progress, settings and language are saved locally — in the app’s private storage on Android, and in your browser’s storage on the web. Clearing the app’s data, or your browser data, deletes that copy. On Android, the phone’s own backup may also copy it to your Google account and restore it if you reinstall — that copy belongs to your Google account and we cannot read it; turning off backup in Android’s settings and clearing the app’s data removes it. We keep no copy of your progress unless you have an account.
Children
PathBlitz is suitable for all ages, and shows ads only in the Android app. It is not directed at children under 13, and we ask that a child does not create an account without a parent’s permission — an account is the only thing that involves an email address.
Your choices
- Play without an account. Nothing then identifies you beyond an anonymous leaderboard entry and anonymous analytics.
- Ask us to delete your account, its saved progress and its leaderboard entry. Write to the address below and we will do it.
How to delete an account: pathblitz.com/delete-account.html. Questions, or a deletion request: support@angora.games.
Changes to this policy
If what the game collects changes, this page changes with it and the date at the top moves. We would rather this page be dull and correct than reassuring and wrong.