BLUFF is built so that most of this page is short. You can play, win the daily and take a handle without giving us anything at all. Two things change that, and only if you choose them: adding a phone number so your record survives your phone, and buying stars. This policy says exactly what each one means.
Install the app and play. No account, no email, no number. Your handle, rating, record and stars live on the device. When you finish a daily, the six decisions you made and your handle go to the board so it can be re-scored and ranked — the score is computed on our side from those decisions and is never accepted from the app. That is the whole of it, and it is the only thing that leaves an account-free install.
The cost of that is honest and worth stating: lose the phone and you lose the record, because there is nothing that could prove it was yours.
We do not store your phone number. Not encrypted, not hashed with something anyone could reverse — a ten-digit number space falls to a brute-force attack in minutes. What we write down is an HMAC-SHA256 of the number under a secret key that lives outside the database, plus the last four digits so a screen can say “sent to ••••0142”. Sending the code needs the real number and we have it at that moment because you just typed it. We do not need it afterwards, so we do not keep it. Somebody who stole a copy of our database would hold a column of hashes they cannot reverse without also stealing a key we keep somewhere else.
The six-digit code is stored the same way, because a code sitting in a table in plain text is a login credential sitting in a table.
What a signed-in account holds: the hash, the last four digits, your handle, your career record, and the account's purchase history. Nothing else.
Apple or Google handles the payment; we never see a card number, a name or a billing address. What we receive is a transaction identifier, which we send back to Apple or Google to ask what it was. We store that identifier, the product bought and the stars credited, so a purchase is credited once and a refund can be honoured. Stars cannot be cashed out, sold or transferred.
There is one advert in BLUFF: a video you can choose to watch, offered only when you have run out of stars, in exchange for a stake. There are no banners and nothing interrupts a hand. If you never tap it you will never see one, and you are never blocked either way — the free stake comes back every four hours regardless.
When you do watch one it is served by Google AdMob, and Google receives your device's advertising identifier and standard request information in order to serve and measure it. On iOS you will be asked for permission first, and declining costs you nothing but the option. Google’s handling of that data is governed by their own policy, at policies.google.com.
| What | When | Why | How long |
|---|---|---|---|
| Server logs (IP address, user agent, page requested) | When you load webluff.com | Security and abuse prevention, by our hosting provider | Retained by Cloudflare per their policy; we do not build profiles from them |
| Your email address | Only if you type it into the launch-notification box | To send you one email when we launch | Until that email is sent or you unsubscribe |
We do not sell your data, and we do not share it with anyone except the companies named above doing the specific job named above — Cloudflare to serve and store, Apple and Google to take a payment, Google to serve an advert you asked for, and your SMS carrier to deliver a code. We do not build advertising profiles. We do not track you across other apps or websites for our own purposes. We do not ask for your contacts, your location, your photos, your microphone or your camera, and the app contains no code that could.
City leaderboards use the approximate city our hosting provider derives from your connection when your run reaches us. That happens on the server. The app never asks your device where it is and has no location permission.
BLUFF contains optional in-app purchases, and asks for a phone number only if you choose to sign in. It asks nobody for other personal information — including anyone under 13, from whom we do not knowingly collect any. If you believe a child has sent us personal information, write to privacy@webluff.com and we will delete it.
Because we hold so little, most requests answer themselves: use Reset career in your profile and everything on your device is gone, along with the token that linked your runs. For what sits on the board — a handle and the decisions behind its runs — you may ask us to access, correct, delete, or send you a copy, and you may object to processing or ask us to restrict it. Write to privacy@webluff.com with your handle and we will respond within 30 days. We will not treat you differently for exercising any of these rights.
If you are in the EEA or UK, our lawful bases are: legitimate interests for running and protecting a public daily board that people can trust, and consent for the launch email if you asked for one. You have the right to withdraw consent at any time and to complain to your local supervisory authority.
The site, the board and its scoring all run on Cloudflare, and completed runs are stored in Cloudflare storage. Email addresses, if you give one, are stored the same way. We do not transfer personal information to anyone else except where required by law.
Everything is served over HTTPS. The smallest attack surface is the one that does not exist, which is why the game sends six decisions and a handle rather than an account, and keeps everything else on your own device.
If this policy changes we will update the date at the top and, where the change is significant, say so in the app. Continuing to play after a change means you accept it.
5arz Services LLC
16192 Coastal Highway
Lewes, DE 19958
United States
privacy@webluff.com
support@webluff.com