Privacy Policy
Last updated: October 22, 2026
This Privacy Policy explains what information bloxtoy (“we”, “us”) collects when you use this website, how we use it, and the choices you have.
1. Information we collect
Information you give us
- Account information: your username. We do not use passwords, and we do not ask for your email address to make an account.
- Passkeys: you sign in with a passkey. We store its public key, a credential ID, a random ID for your account, a name for the passkey, and when it was created and last used. Your private key and any biometric data (such as a fingerprint or face) stay on your device and are never sent to us.
- Recovery code: we store only a one-way hash of your recovery code, so we cannot see the code itself. To stop people from guessing codes, we briefly keep a hashed record of failed attempts.
- Your content: the materials, works, and worlds you save, including titles, descriptions, block data, animations, and thumbnail images, plus the likes you give.
- Messages you send us: if you use the contact form, we receive your name, email address, and message, along with your IP address and browser type. We use them only to reply to you and to prevent abuse.
Information stored in your browser
- Session cookie: we use a cookie (
dworld_sid) to keep you logged in and to protect forms from forgery. It lasts up to 30 days. - Local storage: the editor saves unsaved drafts and your background music choice in your browser’s local storage. This data stays on your device and is not sent to us until you save a work.
Information collected automatically
- Server logs: like most websites, our server may record your IP address, browser type, the pages you request, and the time of the request. We use these logs to keep the site running and secure.
- Analytics and advertising data: see sections 3 and 4 below.
2. How we use information
- To provide the service: create your account, sign you in, and save and show your works.
- To show public works to other people, together with your username.
- To understand how the site is used so we can improve it.
- To show advertising that helps keep the site free.
- To prevent abuse and keep the site secure.
We do not sell your personal information.
3. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to understand how visitors use the site. Google Analytics uses cookies and similar technologies to collect information such as the pages you visit, how long you stay, the device and browser you use, and your approximate location. This information is used in aggregate and does not directly identify you.
For more information, see How Google uses information from sites or apps that use its services. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
4. Advertising (Google AdSense)
We use Google AdSense to show ads on this site. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website or other websites.
Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalized advertising by visiting www.aboutads.info.
If you are in the European Economic Area, the United Kingdom, or Switzerland, we will ask for your consent before using cookies for personalized ads where the law requires it.
5. Cookies and your choices
You can block or delete cookies in your browser settings. If you block our session cookie, you will not be able to log in. Blocking analytics or advertising cookies does not stop you from using the site, but ads may be less relevant.
6. Other third-party services
Pages load fonts from Google Fonts. When your browser downloads these fonts, Google may receive your IP address and browser information. See the Google Privacy Policy.
7. Public content
Works you post (make public) can be seen by anyone, together with your username, and may be indexed by search engines. Other users can also use your public materials in their own Mix works, and anyone may reuse public content as described in our Terms of Service. Works you keep private are only shown to you.
8. Data retention and deletion
We keep your account and content while your account exists. You can delete your works and passkeys at any time from your page. When you delete a work, it is removed from our database. To delete your whole account, please contact us (see section 13).
9. Security
We use reasonable measures to protect your information, such as passkeys (no passwords), hashed recovery codes, limits on sign-in and recovery attempts, HTTPS, and protection against cross-site request forgery. However, no method of sending or storing data on the Internet is completely secure.
10. Children
This site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, please contact us and we will delete it.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to how we use it. To make a request, please contact us.
12. Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page.
13. Contact
If you have any questions about this policy, please use our contact form.