Legal
Privacy Policy
BloodRivals is a location-based game operated by Creators Journey AS (Norway), the data controller. We collect as little as the game needs, we host in the EU/EEA, and we never sell your data or share it with advertisers.
Last updated: 10 June 2026
1
What we collect
Account
Your username and email address, and a securely hashed password. This identifies you and lets you sign in.
Precise location
With your permission, your device’s GPS location while you are using the app. Location is the core of the game — it places you on the live map and lets you claim and defend the turf around you. We do not track your location in the background.
Gameplay data
The turf you claim, your coins and score, crew membership, and in-game events. This is what makes the game work and powers the leaderboards.
Technical data
Minimal logs and device information needed to operate the service and keep it secure (for example, to investigate crashes and abuse). We do not use third-party advertising or cross-app tracking SDKs.
2
Why we use it (legal basis)
- · To provide the game (GDPR Art. 6(1)(b) — performance of a contract): your account, location and gameplay data.
- · Security & integrity (Art. 6(1)(f) — legitimate interest): preventing cheating, abuse and fraud.
- · Location access (consent): you grant the OS location permission, and can revoke it at any time in your device settings.
3
Who we share it with
We do not sell your data, and we do not share it with advertisers. Never.
We use a small number of trusted processors to run the service, bound by data-processing agreements:
- · Microsoft Azure — application and database hosting, in the EU/EEA.
- · Mapbox — the map you play on. Loading map tiles shares the map area you are viewing (and your IP address) with Mapbox so it can serve those tiles. We do not send your account to Mapbox.
- · Email delivery provider — to send transactional emails (for example account and security messages), which processes your email address.
If we add a processor (for example, push notifications or crash reporting), we will update this page before relying on it.
4
How long we keep it
We keep your account and gameplay data for as long as your account is active. When you delete your account (see below), we delete your personal data, except where we must retain limited records to meet a legal obligation. Precise location is used live and is not retained as a location history.
5
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or port it. To exercise any of these, email support@bloodrivals.com from your registered address — we respond within 30 days.
You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet).
6
Deleting your account
You can delete your account and its associated personal data at any time. See Support → Delete your account for how. We complete deletion within 30 days.
7
Children
BloodRivals is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
8
Changes & contact
We may update this policy as the game evolves; we will revise the date at the top and, for material changes, notify you in the app.
Questions? Contact the data controller, Creators Journey AS, at support@bloodrivals.com.