Last updated: November 10, 2026
This Privacy Policy explains how GARJ APLICATIVOS LTDA ("Blu Apps", "we", "us" or "our"), Av. Carlos Gomes, 1000, Sala 502, 4º andar, Auxiliadora, Porto Alegre - RS, 90480-001, Brazil, collects, uses, shares and protects personal data when you play our mobile game Magic Sort (the "Game" or "Services").
We are the controller of your personal data. If you have any question, contact us at support@blury.studio.
If you do not agree with this Privacy Policy, please do not use the Game.
1. Summary
- You can play as a guest without creating an account. We identify your device with an ID generated on the device.
- If you choose to sign in with Facebook or Apple, we use your name, profile picture and account ID to save your progress and show your profile on leaderboards.
- Your player name, profile picture, country and scores are public on our leaderboards.
- We show ads from advertising partners. Where the law requires it, we ask for your consent before showing personalized ads, and you can change your choice at any time in Settings → Privacy.
- You can delete your account and your data at any time in Settings → Delete account, or by emailing us (see Section 9).
2. Data we collect
2.1 Data you give us
- Player profile: the player name you choose and the avatar you pick in the game.
- Support messages: your email address and the content of messages you send to support.
2.2 Data from sign-in providers (optional)
You can link your progress to an account. We only receive what the provider shares with your permission:
- Facebook Login: we request the
public_profileandemailpermissions. We receive your app-scoped Facebook user ID, your name, your profile picture and, if you allow it, your email address. You can deny the email permission in the Facebook dialog and still sign in. We do not access your friends list, posts, photos or any other Facebook data, and we never post on Facebook on your behalf. - Sign in with Apple: we receive an Apple user identifier and, if you choose to share them, your name and email address (which may be an Apple private relay address).
We use this data to create and secure your account, restore your progress on other devices, show your name and picture on your profile and leaderboards, and, if the email of your Facebook account matches an existing account you created with Apple, link both sign-in methods to the same account.
2.3 Data collected automatically
- Device and app data: device model, operating system and version, app version, language, time zone, and a device identifier generated on the device (on iOS, the identifier for vendor).
- Approximate country: taken from your device's mobile network (SIM) or region settings and from our ad partner. We do not collect your precise location.
- Gameplay data: levels, scores, progress, items, in-game balance, sessions and how you interact with the game.
- Purchase data: the product you bought, the transaction ID, the date and the purchase receipt provided by Apple or Google. We never receive your card or bank details; payments are processed by Apple or Google.
- Diagnostic data: crash reports, error logs and performance data.
- Advertising identifiers: the Google Advertising ID (Android) and, only if you allow tracking in the Apple App Tracking Transparency prompt, the IDFA (iOS); plus data about ads shown to you and your interactions with them.
- IP address: received by us and our service providers when your device connects to the internet.
3. How and why we use your data (legal bases)
| Purpose | Data | Legal basis |
|---|---|---|
| Provide the game, save and restore progress, and keep your account | Profile, sign-in data, gameplay data, device ID | Performance of a contract (our Terms of Service) |
| Leaderboards, events and other features in which your profile is visible to other players | Player name, picture, country, scores, badges | Performance of a contract |
| Process and verify in-app purchases, prevent fraud | Purchase data, account and device ID | Performance of a contract; legitimate interest (fraud prevention); legal obligation |
| Show ads that keep the game free | Advertising identifiers, device data, IP, ad interactions | Consent for personalized ads where required by law (EEA, UK, Switzerland, Brazil and other jurisdictions); legitimate interest for non-personalized ads |
| Analytics, crash reports and improving the game | Gameplay, device and diagnostic data | Legitimate interest |
| Remote settings and tests of game features | Device data, gameplay data | Legitimate interest |
| Answer support requests | Email and message content | Performance of a contract; legitimate interest |
| Comply with the law and defend our rights | Any of the above, as needed | Legal obligation; regular exercise of rights |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
4. Who we share data with
We do not sell your name, email or Facebook data. We share data only with:
Service providers that run the game for us:
- Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics, Remote Config), which hosts accounts, saves, leaderboards and purchase verification: https://firebase.google.com/support/privacy
- GameAnalytics (gameplay analytics): https://gameanalytics.com/privacy
- Apple and Google Play (app distribution, payments, Sign in with Apple): https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy
- Meta Platforms (Facebook Login and Facebook App Events for measurement): https://www.facebook.com/privacy/policy
Advertising partners (who may use advertising identifiers, device data and IP to show and measure ads and, with your consent where required, to personalize them):
- AppLovin (MAX ad mediation): https://www.applovin.com/privacy/
- Google AdMob and Google User Messaging Platform: https://policies.google.com/technologies/ads
- Unity Ads and ironSource (Unity): https://unity.com/legal/game-player-and-app-user-privacy-policy
- Liftoff / Vungle: https://liftoff.io/privacy-policy/
- Meta Audience Network: https://www.facebook.com/privacy/policy
Other players: your player name, picture, country, scores, badges and statistics are visible to everyone on leaderboards.
Authorities and legal successors: when required by law, court order or to protect rights and safety, or in a merger, acquisition or sale of assets, under this Privacy Policy.
5. Advertising and your choices
- iOS: we only access the IDFA if you allow tracking in the App Tracking Transparency prompt. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
- Android: you can reset your Advertising ID or opt out of personalized ads in your device's Google settings.
- EEA, UK and Switzerland: we ask for your consent through a consent form at first launch. You can change your choice at any time in Settings → Privacy → Manage consent.
- United States: showing personalized ads may count as "selling" or "sharing" personal information under some US state laws. You can opt out in Settings → Privacy → Do Not Sell or Share My Personal Information.
- If you refuse personalized ads, you will still see ads, but they will be less relevant.
6. International transfers
We are based in Brazil. Our service providers store and process data in the United States, the European Union and other countries (for example, Firebase stores our data in the United States). When data leaves your country, we rely on safeguards required by law, such as the Standard Contractual Clauses of the European Commission and the specific clauses of the Brazilian data protection authority (ANPD), or on the safeguards adopted by those providers.
7. How long we keep data
- Account, profile, progress and leaderboard data: while your account exists. They are deleted when you delete your account.
- Purchase records: for as long as needed for fraud prevention, accounting, tax and legal obligations, even after you delete your account.
- Analytics, crash and ad data held by our providers: according to each provider's retention settings, usually up to 14 months for analytics and 90 days for crash reports.
- Support emails: up to 2 years after the request is closed.
- Guest data on your device: until you uninstall the game or clear its data.
8. Security
We use encryption in transit (HTTPS), access rules on our database that allow each player to read and write only their own account, server-side verification of purchases and access control for our team. No method of transmission or storage is 100% secure, but we work to protect your data.
9. How to delete your data
Step-by-step instructions are also on the page Delete your account and data.
Inside the game: open Settings → Delete account and confirm. You will be asked to sign in again with Facebook or Apple. We then delete your account, your saved progress, your purchase history linked to the account and your leaderboard entry, and revoke our access to your Apple sign-in. This cannot be undone: your progress and any unused virtual items are lost.
By email: open Settings → Contact us (the email it creates already includes your player ID) or write to support@blury.studio with the subject "Delete my data" and your player name. Guests, who cannot use the in-game option, should use this method. We will reply within 15 days.
Facebook users: you can also remove Magic Sort from your Facebook account in Facebook → Settings & Privacy → Settings → Apps and Websites. This stops us from receiving new data from Facebook. To delete the data we already hold, use one of the options above.
We may keep some data after deletion when the law requires it or to prevent fraud (see Section 7).
10. Your rights
Depending on where you live, you may have the right to:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- delete your data, or anonymize, block or delete unnecessary or excessive data;
- receive your data in a portable format;
- object to processing based on legitimate interest;
- withdraw your consent at any time (this does not affect processing done before);
- learn which entities we share your data with;
- restrict processing;
- lodge a complaint with a data protection authority (in Brazil, the ANPD; in the EEA/UK, your local authority).
Brazil (LGPD): you can exercise all the rights in article 18 of Law 13,709/2018.
United States (California and other states): you have the right to know, delete and correct personal information, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not discriminate against you for exercising these rights. Categories collected in the last 12 months: identifiers (device ID, advertising ID, account ID, email), commercial information (purchases), internet or network activity (gameplay and ad interactions), approximate geolocation (country) and inferences used for ads.
To exercise any right, email support@blury.studio. We may ask for information to confirm your identity.
11. Children
0 not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or under 16 in the EEA, where the law sets a higher age for consent). If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy. We will change the "Last updated" date and, for significant changes, notify you in the game before they take effect.
13. Contact and data protection
GARJ APLICATIVOS LTDA ("Blu Apps")
Av. Carlos Gomes, 1000, Sala 502, 4º andar, Auxiliadora, Porto Alegre - RS, 90480-001
Email: support@blury.studio
Data protection contact (LGPD channel for data subjects): support@blury.studio
