Park Blitz Privacy Policy
Effective date: October 28, 2026
Who we are
Park Blitz ("the app") is made by Andrew Abdallah ("we", "us"), 2147 Tallapoosa Dr, Duluth, GA 30097. Contact us about privacy at parkblitz@outlook.com or (404) 771-8650.
Our approach
We collect as little as possible, keep game data only as long as it's needed for the game, and never sell personal information. The app has no accounts, no email sign-up, no real names, no public games and no analytics. The free version shows ads on two screens, and optional Premium purchases are available. Ads are not personalized unless a player 13 or older on iPhone chooses to allow tracking (see "Optional tracking for personalized ads (iPhone, 13 and older)" below). Chat is limited to the players in one game and is deleted with it.
Information we collect
Nickname, animal avatar and a random player ID. Why: so players in your game see who you are. Where: your phone; sent to our game server only while you're in a game. How long: deleted from our server with the game. Your anonymous player ID is also shown in the Me tab under "Your player ID", so you can copy it and send it to us if you need help with Premium (players under 13 need a parent check to copy it). It's the same anonymous ID our purchase provider already uses for Premium; showing it doesn't collect anything new.
Age group (under 13, 13–17, 18+). Why: to turn on kid mode and keep chat and ads age-appropriate. Where: your phone, and the group only on our server so it can allow typing only for 13+. The birth month and year you enter are used once and never saved. How long: until you use Delete my data.
App store age range (only where a state law requires it). Why: to follow age laws. Where: read on your phone from Apple or Google; only the resulting age group is kept, and it can only make the app more protective. How long: like the age group.
Parent's email address (parent check for children under 13 only). Why: so a parent can give verified parental consent for location and Places to play. Where: typed in Parent settings → Parent consent and sent through our server straight to Kids Web Services (KWS), a parental verification service run by Epic Games, which emails the parent and confirms they're an adult. We never store it. How long: not kept by us; KWS handles it under its own privacy policy.
Parent consent record (children under 13 only). Why: to remember that a parent gave consent and which version of our Notice to Parents they agreed to. Where: our server, with the child's anonymous ID: only that a parent consented, the notice version, the date and KWS's reference number for the check. No name, email or payment details. How long: until the parent turns it off in Parent settings or uses Delete my data.
Anonymous sign-in ID. Why: so our server can check that each phone only changes its own game data. Where: Google Firebase Authentication. How long: until you use Delete my data.
Precise location (Hide & Seek location add-ons only; never for kids under 13 without verified parental consent). Why: map pings, the play zone and hot / cold, and, only if you choose, showing a grown-up watching the game where you are. Where: rounded to about 25 m on your phone before it's sent, and shared only with players in the same game (or only with the grown-up watching, if you chose that) while it's on. How long: removed when you're caught, and deleted for everyone when the game ends. Map pings only ever show seekers a rough circle; if the host's play-zone rules include "Show on map", a hider who stays outside the zone shows on the seekers' map at their shared spot until they go back in.
Game information (code, settings, team, in/out status, votes, points and perks). Why: to run the game and its leaderboard. Where: our game server. How long: kept for that game code across Play again, deleted with the game.
Secret role and tasks (Impostor, Secret spy). Why: so you know your role. Where: our server, readable only by your phone until the game ends. How long: deleted when you leave, or when the game ends or restarts.
Photos taken for Impostor tasks. Why: to complete a task. Where: they never leave your phone. How long: not stored by us.
Chat messages (ready-made phrases and stickers for everyone; typed text for 13+), with nickname and avatar. Why: game chat. Where: our game server; only players in that game can read them. How long: deleted with the game. Chat is text, phrases and stickers only: photos and videos in chat are switched off.
Hunter chat messages (optional; off unless the host turns it on). Why: in Classic Hide & Seek, Freeze tag and Capture the flag, a host aged 13 or over can turn on a private chat for the hunters. Everyone in that chat can send ready-made phrases and stickers; typing is for 13+ only, with the same filters as game chat. There are no photos, videos or voice in hunter chat. Where: our game server, with the sender's nickname and avatar; only approved players who are hunters right now can read it. Hiders, grown-ups watching, players waiting to be let in and players who left cannot read it. A small private record of the time and ID of each sender's last message keeps it to one message every two seconds. How long: deleted with the game, when a new round starts, when the sender leaves, or if a player uses Delete my data. A message that gets two reports is hidden. Messages also expire on their own after 24 hours and are removed automatically soon after. Finishing a round alone keeps the history readable by current hunters until a new round starts, the game is deleted, or it expires.
Notification token (optional; adults watching a game only). Why: an approved watcher aged 18 or over can choose Zone alerts, which send a notification when a player leaves or re-enters the play zone. Only that choice makes the app ask for notification permission. Where: the token (a code that tells Apple or Google which phone to notify) is saved in a private record on our game server and is never readable by other players. How long: deleted when alerts are turned off, when the watcher leaves, when the game ends, or if they use Delete my data. It also expires on its own with the game.
Profile pictures: switched off for now. Everyone uses an animal avatar, and the app doesn't ask for, upload or show a picture of anyone. If we turn profile pictures back on, we'll update this policy first.
Clips sent through "Send us your clips" (13+ only). Why: so we can pick clips to post on our social media. Where: never uploaded or stored by the app; it only opens Instagram, Facebook, TikTok or an email, and the clip goes to that service under its own terms. How long: we keep clips sent to us only as long as needed, delete the ones we don't post, and take a posted clip down within 48 hours if you ask.
Places to play you add (name, type, games, tip, spot rounded to about 10 m, and any game setups you attach). Why: so players can find good places. Where: our server. New places are first checked automatically by our server for bad words, personal information and other problems, and anything that fails is deleted; we then review the rest ourselves. A place is shown to players nearby only after we approve it, never with who added it. A private record links the place to your anonymous ID so Delete my data can remove it. How long: until it's removed.
Map squares searched (Places to play). Why: to find places near you. Where: sent to our server to look up places. Each square is about 11 km across, so your exact position isn't sent. How long: not saved.
Place search words (Add a place). Why: to find the park you want to add. Where: the words you type in the search box are sent to OpenStreetMap's free search service (Nominatim) to find matching places, together with a rough area of about 50 km around you so nearby results come first. If it can't be reached, your phone's own map lookup (Google on Android, Apple on iPhone) is used instead. Your nickname, ID and exact location are not sent. How long: not saved by us; OpenStreetMap's privacy policy applies (https://osmfoundation.org/wiki/Privacy_Policy).
Feedback (topic, message or chosen option, star rating, age group, app version). Why: to fix problems and improve the app. Where: our server; only we can read it. How long: up to 1 year.
Reports of messages and places. Why: to review reported content. Where: our server, never shown with who sent them. How long: deleted with the content they're about.
Ad reports (where the ad was and what was wrong). Why: to block bad ads. Where: our server, with no user ID. How long: up to 1 year.
Crash reports (since app 1.5.31). Why: to find and fix crashes. What: the error and where in the app's code it happened, which kind of screen was open (never a game code), the phone's system and version, the app version and the time. Phone-number-like and email-like text is blanked out. No name, ID, age group, game code, location or chat. Where: saved on your phone until it can be sent, then our server; only we can read it, and it isn't linked to you. How long: up to 90 days, then deleted automatically.
Blocked players, saved game setups, your rules agreement and filter setting. Why: your choices. Where: your phone only. How long: until you delete them or use Delete my data.
Server time check (online games). Why: so game timers are right even if your phone's clock is off. Where: a tiny request to Google's server; nothing about you is sent. How long: not saved.
Ad requests (free version, Home and Results screens only). Why: to show ads. Where: Google AdMob receives the technical information any ad request includes (device and system type, app version, IP address for approximate area). We send an age setting and content rating and ask for non-personalized ads, unless a player 13 or older on iPhone has allowed tracking (see below). We never send your nickname, ID, location or chats. For adults in the European Economic Area, the UK and Switzerland, Google's consent message is shown before the first ad, and no ad is requested until Google allows it; you can change your choice any time with Ad privacy choices on the app's Privacy screen. Players under 18 are never shown that message. How long: we keep nothing; Google's policies apply.
Purchases (product, date, store transaction ID, and your anonymous sign-in ID so Premium can be restored). Why: to unlock and restore Premium. Where: Apple or Google take payment (we never see card details); RevenueCat keeps the purchase history; your phone keeps a list of used game passes. How long: as needed for Premium and as the stores and tax law require.
Optional tracking for personalized ads (iPhone, 13 and older)
On iPhone, players who are 13 or older are asked once, after the first-time intro, whether Park Blitz may track them. Before Apple's question appears, the app explains what it means. Tracking is off unless you tap Allow. If you tap Allow, Google AdMob may use your iPhone's advertising identifier (IDFA) and information about the ads you see and tap to show ads that match your interests, and may combine it with information from other apps and websites. If you tap Ask App Not to Track, you still see ads, just not personalized ones. Nothing in the game depends on your answer. Players under 13, and players whose age we don't know, are never asked, and their ads are never personalized. To turn tracking off at any time, go to iPhone Settings > Park Blitz and turn off Allow Tracking (the Personalized ads row in the app's Me tab opens this screen), or turn off Settings > Privacy & Security > Tracking > Allow Apps to Request to Track. The Android app does not use the advertising identifier and shows only non-personalized ads.
We do not collect real names, email addresses (except a parent's email for the parent check, which goes straight to KWS and isn't kept by us), phone numbers, contacts, location outside a game or analytics. Crash reports are limited to what's described above and aren't linked to you. On iPhone, the app asks players 13 and older once whether they allow tracking for personalized ads; it is off unless they tap Allow, and children under 13 are never asked. On Android the app blocks the advertising-ID permission. Photos and videos can't be sent in game chat, and there are no profile pictures.
Sharing while your phone is locked (optional). In a Hide & Seek game, a hider who is sharing their location can turn on "Keep sharing when my phone is locked" for that one game. Only then does the app ask for "Always" location. While it's on, Park Blitz collects location data to keep sending the same rounded location to the players in that game even when the app is closed or not in use (for example, while your phone is locked), and your phone shows that location is in use. It is off unless you turn it on, it is never remembered for the next game, and it stops by itself when the game ends, when you're found or out, or when you leave. You can switch Park Blitz back to "While using the app" in your phone's settings at any time.
A grown-up watching the game (optional). An adult (18 or older) can join a Hide & Seek game as a watcher instead of a player, only if the host lets them in. Every phone in the game shows who is watching. A watcher can't play, chat or change the game. Each player chooses whether to share their location with the watcher; it is off unless they say yes, and only for that game. If they do, the same rounded location (about 25 m) is sent while the game is on, and only the watcher can see it. It is deleted when the player stops sharing or leaves, when the game ends, and with the game. Kids under 13 can't share it without verified parental consent.
How we use information
To run the games you play: nicknames, teams, scores, timers, roles, votes and location add-ons.
To deliver chat messages to the players in a game, and to show approved places to play.
To keep everyone safe: bad-word and personal-info filters, and handling reports.
To pick clips to post on our social media, only from clips players 13+ chose to send us, and only with written permission.
To read feedback so we can fix problems and add requested features.
To keep the service secure, so players can only change their own game data.
To show ads in the free version and provide Premium purchases.
To deliver hunter chat messages to the hunters in a game when the host turns it on, and to send Zone alert notifications to adults who chose them.
We do not use information for profiling or marketing, and we never sell or rent it. Personalized advertising happens only if a player 13 or older on iPhone taps Allow on Apple's tracking question, and never for children under 13.
Who we share information with
Other players in your game see your nickname, avatar, team, in/out status, chat messages (Hunter chat only for the hunters) and, if a location add-on is on and you're allowed to share, your rounded location during the game. Hunter chat messages are seen only by the hunters in that game. Hiders, grown-ups watching and the other players never see them. They never see your secret role until the game ends.
A grown-up watching the game (an adult the host let in) sees the same nicknames, teams and in/out status, and the rounded location of players who chose to share it with them, only while the game is on.
All players can see approved places to play (name, type, games, tip and map spot), never who added them.
Our social media followers see clips we choose to post, only with written permission from everyone shown (and a parent for anyone under 18), never with names, schools or locations.
Service providers that run the app for us: Google Firebase and Google Cloud (game server, anonymous sign-in and automatic clean-up of old data), Expo (the push notification service that delivers Zone alerts, together with Apple and Google's own notification services). When a Zone alert is sent, Expo receives the watcher's notification token and the short alert text, which includes the nickname of the player who left or came back, for example "Sam left the play zone". Alerts never include a location. Only adults aged 18 or over who chose Zone alerts are involved, RevenueCat (purchase records, linked only to your anonymous sign-in ID), your phone's built-in map service (to draw maps and, as a backup, to look up places you search for), OpenStreetMap's Nominatim search (only the words you type in Add a place → search, to find the place) and Kids Web Services by Epic Games (the parent check for children under 13; it receives the parent's email, a country and the child's anonymous ID, never the child's name or location). They may only use the information to provide their service to us.
Google AdMob receives ad requests in the free version. Requests for players under 13 (or of unknown age) are tagged as child-directed and limited to G-rated ads; players 13 and up get ads rated for teens at most, never adult ads. Apple and Google handle payments.
When the law requires it, or to protect someone's safety. For example, US law requires us to report child sexual abuse material to the National Center for Missing & Exploited Children.
Children's privacy
Park Blitz is a general-audience app that children may use. When the app first opens, it asks a neutral age question. Players under 13 use kid mode: they never share location, and only what's needed to run a game (a nickname, an anonymous ID and game data) is used. In chat they can only send ready-made phrases and stickers, so they can't type or send personal information, photos or videos. Hunter chat is never available if the host is under 13. If a child under 13 is a hunter in a game with hunter chat on, they can only send ready-made hunter phrases and stickers. Zone alerts are for adults aged 18 or over only; children under 13 never get a notification request or a notification token saved. They never see "Send us clips" or any link out of the app outside the parent-gated Parent settings, and they need a parent to pass the parent check before any purchase. Location and Places to play can be turned on for a child under 13 only after a parent gives verified parental consent with the parent check in Parent settings: the parent reads our Notice to Parents, agrees, and enters their email; Kids Web Services (KWS), run by Epic Games, emails the parent and verifies that they're an adult (for example with the last four digits of a Social Security number or a small card check that is refunded). Only then does our server mark the child's anonymous ID as having parental consent. We never store the parent's email. The parent can withdraw consent at any time with Turn off location in Parent settings, which turns location and Places to play off again. Ads shown to children are child-directed, G-rated and non-personalized. Children under 13 are never asked to allow tracking, and their ads are never personalized, whatever the phone's settings. See our Notice to Parents for details.
How long we keep information
Games, players, roles, chat and locations: deleted when the host ends the game. If a host never ends a game, it expires 24 hours after it starts and is then deleted from our server automatically, usually within another 24 hours. Hosts can end a game at any time to delete it right away. Hunter chat messages and Zone alert notification tokens follow the game: they are deleted when the host ends the game, and if a host never does, they expire with the game (at most 24 hours after it starts, then removed automatically, usually within another 24 hours).
Location: removed when you're caught and for everyone when the game ends.
Feedback and ad reports: up to 1 year, then deleted automatically.
Crash reports: up to 90 days, then deleted automatically.
Places to play: until removed (on request, after reports, when no longer suitable, or with Delete my data). Declined places are deleted.
Your age group and anonymous ID: until you use Delete my data. Your birth month and year are never kept.
Parent consent record: until the parent turns consent off in Parent settings or uses Delete my data. The parent's email is never kept by us.
Purchase records: kept by Apple, Google and RevenueCat as needed for Premium and as tax law requires.
We review this every year and whenever the app's use of data changes.
Your choices and rights
Delete my data: in the app, open Parent settings and tap Delete my data. It deletes places you added, your feedback, your age group on our server, your anonymous ID and everything stored on the phone. Purchase records stay with Apple, Google and RevenueCat (use Restore purchases), and the phone keeps a list of used game passes (store transaction IDs only). You can also email us to delete your data.
Leave or end a game at any time; your game data is deleted.
Chat and clips: delete your own messages at any time. Ask us to take down a clip we posted and we remove it within 48 hours. Parents can turn chat and sending clips off on the phone in Parent settings. Hunter chat is off unless the host turns it on, and a grown-up can turn chat off on a phone in Parent settings. Hold a message to report it; two reports hide it. Zone alerts are off unless an adult watcher chooses them, and can be turned off at any time in the game or in the phone's notification settings.
Camera and photos are only used when you choose to. The app uses your phone's photo picker, so it never gets your whole photo library.
Location and camera can be refused or turned off in your phone's settings at any time; the basic games still work.
Subscriptions: cancel any time in your App Store or Google Play account settings.
Your rights: depending on where you live (for example California or other US states), you may have the right to access, correct, delete or restrict use of your information. Email parkblitz@outlook.com and we'll respond within the time the law requires.
Security
Game data is protected by server security rules: each phone signs in anonymously and can only change its own information, only players the host let in can see a game, and secret roles can only be read by their owner until the game ends. Old game data is deleted automatically. If something goes wrong, we'll fix the cause and notify affected people as the law requires.
Where the app is available
Park Blitz is currently offered in the United States. Our service providers may process data in the United States.
Changes and contact
We'll update this policy when the app changes and update the date above. If a change affects children's information, we'll notify parents and get new consent where the law requires. Questions: parkblitz@outlook.com, (404) 771-8650, 2147 Tallapoosa Dr, Duluth, GA 30097.