What we collect
When you play: your game account (player name, game progress, the device id the app sends to keep you signed in) and basic request logs used to keep the servers running and to stop cheating.
When you sign in with Discord or use our Discord server: your Discord user id, username / display name and your role list in our server, and the bug reports you post (text, your Discord name, screenshot links).
We do not collect emails, passwords, payment details or your Discord messages outside our bug channels.
Why
To run the game and your account, to give you your Discord roles and in-game name colours, to stop one person from making several accounts, and to fix the bugs you report.
How long
Bug report text is deleted 90 days after the report is closed. Role records of members who are not linked are deleted after 30 days. Request logs are deleted after 60 days, server logs after 14 days. Your game account and its link are kept while your account exists.
Security
Discord ids, names, role lists and bug report text are encrypted on our servers and in our backups. Only our server administrators can access the servers.
Sharing
We never sell or share your data, and we don't use it for advertising.
This website
The website (blazingonline.wiki) has no ads, no analytics and no tracking cookies.
- Sign in with Discord. We ask Discord only for the
identifyandguilds.members.readscopes. That gives us your Discord user id, username / display name, avatar, and your membership and roles in our Discord server (to show beta builds, the staff pages and your game account). Discord's access token is used once during sign-in and never stored. Your sign-in is kept in a signed cookie on your own device for 30 days; logging out removes it. While you stay signed in, your roles are checked with Discord again about once an hour. - My account page. It uses your Discord id to ask our game server for the game account linked to it and shows it to you. The website does not keep a copy.
- Tier list votes. For each tier list we keep your ballot, your Discord id and name, when you first and last voted, a short history of your changes, a copy of your ballot at the end of each month, if you are in our Discord server, the creation date of your Discord account (read from the id) and a keyed hash of your IP address (never the address itself). The last three are only used to spot vote manipulation. Your ballot is kept until you clear it; the monthly copies and history are kept until you ask us to delete them. If you are not signed in, your list is kept only on your device. Each vote is also written to a vote log with the same keyed IP hash (newest 5,000 entries kept).
- Sign-in and download records. Each sign-in, role check, log out, beta download and visit to the My account page is recorded with the time, your Discord id and name, the build (for downloads) and a keyed hash of your IP address. We keep the newest 5,000 records; older ones are removed automatically.
- Error reports. When a page breaks, your browser sends the error to us: the page path, the error message, your browser's user agent, the time and the app build. No IP address, cookies or query strings are kept with it. These are kept until we delete them, to fix the site.
- Rate limits. Your IP address is used for short-lived counters that stop sign-in and vote spam. They expire within about an hour.
- Staff pages. The admin panel records every action by our team (who, what, when, a keyed IP hash; newest 5,000 kept). The staff pages record every signed-in visit, allowed or refused, with the Discord id and name, the page, the approximate location (country, region, city) and the browser's user agent, to trace leaks. These visit records are kept until we delete them.
- Cookies and storage on your device. Cookies: your sign-in (30 days), a sign-in check that lasts 10 minutes and a security token against forged requests (12 hours); team members also get an activity cookie for the admin panel. Your browser storage keeps your site settings (filters, the moving strips switch, the chosen game world, the Obtainable now switch), your name and avatar for the header while the tab is open, and your tier list draft.
- Services that run the website for us. Vercel hosts the site, its request logs and its file storage; Upstash (Redis) holds votes and logs when it is connected; Cloudflare R2 serves the pictures and app downloads from dl.blazingonline.wiki; Discord handles sign-in; the fonts load from Google Fonts. These services see the requests your browser makes to them, under their own privacy policies.
Your choices
Ask any staff member in our Discord server to unlink your Discord account or delete your data, or to delete your game account. The same goes for your tier list votes and website records.
Contact
Our Discord server: https://www.blazingonline.wiki/discord. See also our Terms of Service.