Voidbloom Privacy Policy

The short version

Voidbloom is free and playable without an account. If you never sign in, your progress stays on your own device. Creating an account is optional and adds cloud saves, global rankings and multiplayer. You can delete your account yourself at any time.

Data stored on your device

Voidbloom relies on your browser's local storage rather than advertising or cross-site tracking cookies. On your device it keeps:

• your game save — progression, coins, unlocks, settings, records and similar gameplay state;
• an anonymous device identifier used to keep your save consistent and to group analytics events from this device;
• short-lived state such as a pending referral or multiplayer-lobby link;
• if you sign in, your authentication session so you stay logged in.

Clearing your browser storage removes this local data.

Accounts and cloud saves

Accounts are handled by Supabase (our backend and authentication provider). When you create an account we store:

• a callsign (your public display name);
• a password, managed securely by Supabase Auth;
• an optional recovery email — only if you choose to add one, and used only for password recovery.

You can also choose Continue with Google, in which case Google handles sign-in and returns a basic identity so we can create or link your account. Once signed in, your gameplay progression is replicated to the backend as a cloud save so it syncs across your devices.

Public profiles and rankings

If you play signed in, your callsign and run results (such as score, survival time and level reached) can appear publicly on the global and daily leaderboards and on your pilot profile. Live presence (a count of pilots currently playing) and a realtime score feed reflect ongoing activity. Practice runs and coin-revived runs are intentionally kept off the global leaderboard.

Friends, referrals and multiplayer

Friends are added by callsign through a request-and-accept flow. Each account has a server-generated invite code so referrals can be credited. Multiplayer (Void Clash and Team Raid) shares in-match information — such as your callsign, hull, level and score — with the other pilots in your lobby while a match is live.

Analytics

Voidbloom uses two lightweight, gameplay-focused analytics layers:

• Built-in telemetry: the time spent on each screen is batched into a private, insert-only table in our Supabase backend.
• PostHog: gameplay events (for example session start, run start and end, screen time, streaks, upgrade and item purchases, and sign-in) are sent to PostHog's capture API. These events are associated with your anonymous device identifier and, once you sign in, with your account id and callsign. Basic context such as screen size and whether the device supports touch is included. This is done through direct API calls — no third-party analytics script is loaded into the page.

Payments

Optional real-money purchases (Bloom Gem packs, cosmetic crates, cosmetics and the VIP Void Pass) are processed by Stripe. Card details are entered in Stripe's checkout and are handled by Stripe — Voidbloom never receives or stores your card number. After a successful payment, a server-side webhook credits the purchase to the account that checked out. Nothing about the game is pay-to-win; paid items are cosmetic or convenience.

Third-party services

• Supabase — accounts, authentication, database, cloud saves, rankings and realtime features.
• PostHog — product analytics (gameplay events).
• Stripe — payment processing for optional purchases.
• Google — optional sign-in (OAuth), only if you choose it.

Each of these providers processes the data described above under their own privacy terms.

Data retention

Your account data — your callsign, cloud save, scores, friends, purchases and cosmetics — is kept for as long as your account exists, so the game can provide cloud saves, leaderboards and the other online features. Voidbloom does not set a fixed expiry on this data; it is retained to operate and improve the game. Deleting your account permanently removes that account data (see below).

Anonymous gameplay-analytics events (which screens are used and similar) may be retained to help us understand and improve the game. In our own analytics store these events are disassociated from your account when you delete it; events already sent to PostHog are retained under PostHog's own terms.

Deleting your data

You can delete your account yourself from Settings → Account Management → Delete Account inside the game. This permanently removes your account, cloud save, scores, friends, purchases and cosmetics. Progress stored locally on your device remains until you clear your browser storage. If you played entirely signed-out, no account data ever left your device.

Contact

Questions about privacy or a data request? Email support@playvoidbloom.com.

This policy describes Voidbloom's current systems and may be updated as the game changes. Material changes will be reflected on this page.

More: About Voidbloom · Contact · Play