Privacy policy

Last updated: 5 November 2026

Babelcrash (called SkyBellum until November 2026) is a tower-building game. This policy explains what data the game uses, why, for how long and how to delete it.

Data controller: Federico Ferrari — [email protected]

Without an account

Playing against the bot or locally (two players on one phone) needs no account. In that case no personal data leaves your phone.

Testing phase: while the game is open to testers only, an account (and so an invite code) is needed to play against the bot and locally too. Matches against the bot and local matches stay on your phone: the server only learns that the app was opened, for the last-access date.

With an account (to play online)

Playing online requires a light account. We do not ask for an email, phone number, real name or any other personal data. Our server stores:

• the nickname you choose, visible to other players in matches and on the leaderboard;
• an account number;
• for every phone linked to the account (at most 5) a key, with the date you linked it and the date it was last used, to the nearest hour; and the recovery code. Keys and code only as one-way hashes: we cannot read or rebuild them. The temporary code for linking another phone lasts 10 minutes and is deleted as soon as it is used;
• the account's role (player or administrator) and, if we created the account ourselves from the admin panel, that fact;
• the results of random-opponent matches: Elo rating, matches played, won and lost;
• for every online match, random or with a code: both players' accounts, the kind of match, the winner, whether it ended normally or by abandonment, the rating change (random matches only), and the start and end time. We do not keep the code chosen to play with a friend;
• the date of your last access: when you joined an online match or opened the game with your account, to the nearest hour;
• your personal codes to give to friends (usually one; if we add more ourselves, with a label we choose), how many times each has been used, which code you signed up with, and the screws (the in-game currency) you earned by inviting them (a balance on our server, with no use yet).
• your medals and their counters, for random-opponent online matches and matches against the bot (not local ones): matches and wins, your win streak, your tallest tower, joints broken with dynamite, Golden Bolts placed, bubbles caught, wins per bot level, the day (date only) of your last match and how many days in a row you have played; for each medal, the date you earned it;
• leaderboard seasons: at the end of every season we keep the final standings (position, account, Elo rating, matches, wins and losses) and the season badges won. Before closing a season we make a backup, which is deleted after 14 days.

Inviting friends

If you create your account with another player's personal code, we keep the link between your account and theirs, and how many valid random matches you have played until you reach the screw reward. The player who invited you sees your nickname in the game and whether you are already "active" (you have played the reward matches). Likewise, you see the nickname of the friends you invite. If either of you deletes the account, the link is removed; the other keeps the screws already received.

Your phone keeps the account key and your game settings. The QR code and the recovery code image are created on the phone: if you save the image, it stays in your gallery and never goes through our server.

Getting your account back

We do not ask for an email: to get your account back on another phone you need the recovery code or a temporary code from a phone that is already linked. If you have lost both you can write to [email protected]: if we can recognise you, we generate a new recovery code, which unlinks every phone. To recognise you we only use what you tell us and the data we already hold about the account.

Technical data

• IP address: used only to limit repeated attempts (for example too many accounts created in a short time). It stays in the server's memory for at most two hours and is never saved.
• Technical match logs: moves, timings and game version, used to fix bugs. They contain neither your nickname nor your account.
• Server log: technical events (including invite rewards), with the account number and never the nickname. Deleted after at most 30 days.

Why

We use this data only to run online play: recognising you when you join a match, showing your nickname to your opponent, computing the leaderboard fixing bugs and understanding how much and how the game is played (for example how many players are active and how long a match lasts), only as counts that we look at. The legal basis is providing the service you asked for by creating the account.

What we don't do

• No advertising.
• No analytics or tracking tools.
• No selling or sharing of data with third parties.

Who processes data on our behalf

The server is in Italy. Traffic goes through Cloudflare, which provides the encrypted connection (HTTPS) and protects the site; Cloudflare sees the data to deliver it and handles it under its own policy (cloudflare.com/privacypolicy).

Testing phase: while the game is open to testers only, creating an account needs an invite code: we keep the code and the name we assigned it to, linked to your account. If you delete the account the link is removed and the code stays marked as used. This phase ends when the game opens to the public.

How long

Account data is kept for as long as the account exists. Database backups delete themselves after 14 days.

Inactive accounts: after 90 days without access the account is archived (it leaves the leaderboard, its data is kept); after 12 months without access it is permanently deleted, without notice, because we have no way to contact you. Administrator accounts are excluded. Before every automatic deletion we make a backup, which is also deleted after 14 days. The full rules are in the testing phase terms.

If we change a nickname ourselves (for example because it is offensive), the removed one stays in a list of blocked names that nobody can choose again. The list holds only the name and the date, with no link to the account, and the name stays there even after the account is deleted.

Deleting your account

You can delete your account at any time:

• in the game: Home → account → Delete account;
• on the website: babelcrash.com/en/delete-account, with your nickname and recovery code.

Deletion is immediate and permanent: we remove the account, the rating, the badges and every recorded match. In the final standings of past seasons only the position and its numbers remain, with no nickname and no link to the account. Backups that still contain it are gone within 14 days.

Your rights

You can ask us at any time to access, correct or delete your data by writing to [email protected]. On request we send you a copy of your account data as a file (JSON). You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali, garanteprivacy.it).

Age

Babelcrash is meant for players aged 13 and over and is not part of Google Play's Families programme. The game asks for no personal data other than a nickname; we still suggest choosing one that does not contain your real name.

Changes

If we change this policy we update the date above and, if the change is about the data we collect, we say so in the game.