Legal

Privacy policy

What we collect, why we collect it and what you can do about it. No ads, no trackers.

Draft. This text is a draft and not legal advice. Last updated: October 2026.

What we collect

  • Account data: your username, email address and a securely hashed version of your password. We never store your password in plain text.
  • Game data: your character, skills, items, game mode and activity in the game, including chat and trades, which are logged to fight cheating and abuse.
  • Technical data: IP addresses and login times, used for security, moderation and preventing abuse.
  • Content you post: comments on news articles.

Why we use it

We use this data to run the game and your account, to keep BLST secure and fair, to moderate the community and to send you account emails such as verification and password reset links. We do not sell your data and we do not use it for advertising.

Cookies

We only use strictly necessary cookies: a session cookie that keeps you logged in and a security cookie that protects forms against cross-site request forgery. We do not use analytics or tracking cookies, so there is no cookie banner.

Third parties

  • YouTube: videos in news articles only load from YouTube (in privacy-enhanced mode) after you click play. Before that, only a thumbnail image is loaded.
  • Email: account emails are sent through an email delivery provider, which processes your email address for that purpose only.
  • Discord: if you join our Discord server, Discord's own privacy policy applies there.

How long we keep it

We keep account and game data for as long as your account exists. Logs used for security and moderation are kept for a limited time and then deleted. Verification and reset links expire after 24 hours and 1 hour.

Security

Passwords are hashed, the website uses HTTPS everywhere, and staff access is limited to what they need to moderate. No system is perfectly secure, so please use a unique password that you do not use anywhere else.

Your rights

You can ask to see, correct or delete your personal data, and you can object to how we use it. You can change your email address and password yourself on your account page. For anything else, contact us. You also have the right to file a complaint with your data protection authority.

Contact

Questions about privacy? Contact the BLST team through our Discord server.