Privacy Policy – Iron Blitz
Last updated: November 10, 2026
Developer: OHHAGROUP TECHNOLOGY SOLUTION CO., LTD. (15/15 Vo Duy Ninh, Ward 22, Binh Thanh District, Ho Chi Minh City, Vietnam)
Contact: tung@ohhagroup.com
Website: https://ohhagroup.com/
Applies to: the Android app "Iron Blitz" (package com.ohhacraft.ironblitz)
1. Summary
You can play Iron Blitz without an account. Creating an account is optional and only adds cross-device sync for your profile and progress. The sections below explain exactly what is collected and how you stay in control.
2. Data we collect
If you do not create an account: none. The game sends no data to any server.
If you create an account or sign in:
| Data | Used for | Stored in |
|---|---|---|
| Email address | sign-in, email verification, password reset, support | Firebase Authentication |
| Password | sign-in (we cannot read it; Firebase stores it hashed) | Firebase Authentication |
| Account identifier (UID), account creation and last sign-in time | operating and securing your account | Firebase Authentication |
| Display name, avatar, avatar position in matches, last-edit time | syncing your profile across devices | Cloud Firestore |
| Game progress: unlocked and completed levels, stars, best times, play counts, coins, owned and selected tank colors, upgrade levels, a random per-device ID used to add up coins | syncing and restoring your progress across devices | Cloud Firestore |
When you use account features, Google (the Firebase provider) also processes technical data such as IP addresses to operate and protect the service, under Google's policies.
You never need an account to play, and the app:
- does not access location, contacts, photos, camera, microphone, messages or external storage;
- does not collect advertising IDs;
- contains no ads, third-party analytics or crash-reporting tools;
- has no in-app purchases.
The Internet permission is used only to register, sign in, sync your profile, reset your password and delete your account.
3. Data stored on your device
The app stores the following locally on your device: unlocked and completed levels, star ratings, coins, tank colors and upgrade levels, the display name and avatar you choose, in-game settings (for example, language), and — if you are signed in — a sign-in session token kept in the app's private storage. If you are not signed in, game progress is not sent to our servers; if you sign in, a copy is synced as described in section 2. Local data is deleted when you uninstall the app or clear the app's data in Android Settings; signing out removes the session token.
4. How we use data
- To create and maintain your account, sign you in and reset your password.
- To sync your display name, avatar, avatar position and game progress between your devices.
- For security, abuse prevention and support when you contact us.
We do not use data for advertising, do not build behavioral profiles and do not sell data.
5. Sharing with third parties
- Google LLC (Firebase Authentication, Cloud Firestore): an infrastructure provider that processes account data on our behalf under the Firebase terms and Google's policies.
- Google Play: the app is distributed through Google Play; Google may process information related to downloads and updates under its own policies.
- We disclose data only when required by law.
6. Where data is stored, retention and security
- Account data is stored on Google Firebase servers; Cloud Firestore data location: asia-southeast1 (Singapore). Data may be processed in countries where Google operates its infrastructure.
- Data is sent over encrypted connections (HTTPS). Access rules allow each user to read and write only their own profile.
- We keep account data until you delete your account. Backups and logs managed by our provider may persist for up to 180 days after deletion (per Google Cloud's data deletion commitment).
7. Deleting your account and data
You can delete your account at any time:
- In the app: Profile → Account → Manage account → Delete account → enter your password → Delete permanently. Your email, password, UID, display name, avatar and game progress on our servers are deleted.
- On the web: see the instructions and submit a request on the account deletion page (or email tung@ohhagroup.com from your registered address). We process requests within 30 days.
Deleting your account does not delete game data stored on your device (you can keep playing as a guest); remove it by uninstalling the app or clearing its data.
8. Children
Iron Blitz is intended for players aged 13 and over. You must be 13 or older to create an account. We do not knowingly collect data from children under 13; if we learn that we have, we will delete the account and data. Parents can contact us to request deletion.
9. Your rights
You can access, correct and delete your account data. You can edit your display name and avatar directly in the game; delete your account as described in section 7; send other requests (for example, a copy of your data) to tung@ohhagroup.com. We may need to verify that you own the account before acting.
10. Changes to this policy
If we change how we collect or use data (for example, adding online features or leaderboards), we will update this page, change the "Last updated" date, and describe what is collected, why, and how you can control it.
11. Contact
For any privacy questions, email tung@ohhagroup.com.