Privacy policy

Last updated: 27 October 2026

Lumiblitz is an online multiplayer arena game played in the browser at lumiblitz.com. It is made by TemanixStudio, an independent developer (“we”). This policy says what the game keeps about you, why, and what you can do about it. Questions and requests: privacy@lumiblitz.com.

Playing as a guest

You can play without signing in. The game then creates a guest account for your browser: a random device id kept in your browser's storage, which is the key to that account. We do not ask for your name, email, age or location. If you clear the browser's data, the guest account can no longer be reached from that browser.

Signing in with Google

Signing in with Google is optional. It lets your progress follow you to other devices. Google sends us a signed token, which our server checks with Google. From it we keep only your Google account id, a number that tells us it is the same Google account next time. We do not keep your email address, your name or your profile photo, and other players never see your Google identity. We ask Google only for the basic sign-in permissions (openid, email, profile) and use nothing beyond that. The Google sign-in script is loaded from Google only when you choose to sign in; Google's own privacy policy applies to what happens on Google's side: policies.google.com/privacy.

You can remove the game's access at any time in your Google account under Third-party connections. Signing out in the game takes this browser off the Google account.

What the game keeps about your account

A player name with a rude or offensive word is refused; a name like that saved earlier is shown to others as the generated one instead.

Your player name, avatar, statistics, rating, achievements and leaderboard position are shown to other players, together with whether the account is a guest or signed in. Your settings and points are not shown to anyone else. Players at the same table see each other's moves and emotes during a match. There is no free-text chat.

Usage statistics

To see whether the game works and whether players like it, the game reports to our own server how it is used: when the game starts, when a room with friends is opened or joined (and which room settings were changed), when an exercise is started or finished, when a match is left before its end, and when a guest adds Google sign-in. These reports are linked to your account id. With them we keep:

Opening the game page is also counted once, before the game has loaded, together with the link's source tag only; that count is anonymous, with no account and no address.

When you leave the page (or switch to another app), the page sends one anonymous report on that visit: how far it got (still loading, could not start, signing in, starting your first match, in the game), where the loading page took you (the menu or a first match), how many seconds that took, the screen of the game you left from, how many times you pressed on it and the caption of the last button you pressed, how many times you switched away from the page, the languages your browser lists (their codes, such as "uk" or "de", to know which translations to add), the link's source tag, and the families of your system and browser (for example "Android" and "Chrome", and whether it is an app's built-in browser). If the game cannot start, the report also says which graphics your browser offers and the name of the graphics chip; it also says the longest the page stood still and whether the browser took the game's graphics away, and when. It carries a random number for that one page load, no account and no address.

All of this is first-party: no analytics or advertising company receives it, no cookies are used for it, and your IP address is not stored with it. Only the developer sees the statistics, as totals on a private page; feedback texts are read one by one. We do this in our legitimate interest of keeping the game working and making it better; you can object by writing to us, and we will delete your usage reports.

Technical data

To run the game, our server sees your IP address while you are connected. We use it to limit how many matches one address can open at a time and how often one address is counted as opening the page, which stops abuse; those counts live in memory for a few minutes only and are not stored. The server also writes short-lived technical logs (for example errors, with an account id) to find and fix problems. The game does not use advertising, third-party analytics or tracking cookies, and does not sell or share your data with anyone.

In your browser the game stores the guest device id, your sign-in session and your settings, so that a reload keeps you signed in. Google sets its own cookies only if you use Google sign-in.

When you play Lumiblitz on CrazyGames, the game also loads CrazyGames' own SDK, which CrazyGames uses for invitations to a friend's room and to know when you are playing. CrazyGames' privacy policy applies to it: crazygames.com/privacy-policy.

Where the data lives

The game server and its database run on Google Cloud in the United States. Our DNS is provided by Cloudflare. No other service receives data about you. There are no purchases with real money today; if they are added, this policy will say what payment data is involved before they go live.

How long we keep it

Account data is kept while the account exists. Usage reports, feedback and visit reports included, are deleted 180 days after they were sent; the daily counts of page opens hold no personal data and are kept. Backups, if any, are deleted after 30 days. Technical logs are rotated away automatically after a short time. If you ask us to delete your account, we delete its profile, settings, progress, usage reports and Google link; records of matches already played keep their result and the player name used then, so that the other players' statistics stay correct.

Your choices and rights

You can change your name, avatar and settings in the game at any time. To get a copy of your data, correct it, or delete your account, write to privacy@lumiblitz.com with your player name; we may ask you to show that the account is yours, for example by signing in. We answer within 30 days. Depending on where you live (for example in the EU or the UK) you may also have the right to object to processing and to complain to your data protection authority.

Children

Lumiblitz is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, write to us and we will delete it.

Changes

When this policy changes, the date at the top changes too. For important changes we will also tell players in the game.