Legal

Privacy Policy

What bl4ck keeps when you use it, why, where it is stored, and how you can see, download or delete it, in plain words.

Effective date: 7 November 2026

In short

You can use bl4ck without an account. As a guest, your settings and progress stay in your own browser and are never sent to us.
With an account, we keep only what it needs: your sign-in details (held by Google's Firebase Authentication), a unique username, a display name, an optional photo link and your progress.
Your email address stays in the sign-in system. It is never copied into our database.
There are no ads, no analytics and no tracking cookies on bl4ck today, and we never sell your data.
You can download your data or delete your account at any time on Your profile.

Who we are

bl4ck is a website of free online tools and games. It is created and run by its owner, an independent creator, who decides how the information described on this page is used. In data-protection law, that makes the owner the controller of your data.

In this policy, “bl4ck”, “we”, “us” and “our” mean the website and its owner. “You” means anyone who visits or uses it.

We don't have a public contact address yet. Until we do, you can handle everything yourself onYour profile: see and edit your details, download a copy of your data, or delete your account. As soon as a contact address is available, it will be listed here.

What we collect and why

We collect as little as we can. Here is everything, grouped by where it is kept.

Your sign-in account

When you create an account, our sign-in service, Firebase Authentication (run by Google), keeps:

your email address;
your name and a link to your profile photo, if Google or Facebook shares them when you sign in with them;
the sign-in methods you use (email and password, Google or Facebook) and the account ID that each of those services gives us;
basic account records, such as when the account was created, when you last signed in and whether your email address has been verified.

If you sign up with an email address and a password, the password goes straight to Firebase, which stores it only in a scrambled (hashed) form. We never see your password and can't look it up.

To keep accounts safe, Firebase also processes technical details when you sign up or sign in, such as your IP address and the type of browser you use, so it can spot abuse like automated sign-ups.

Why: so you can sign in securely, get back into your account if you forget your password, and use the same account on any device.

Your profile

When you choose a username, we create your profile in our database, Cloud Firestore (also part of Google Firebase). It contains:

your username, which must be unique. A separate list links each username to the account ID that owns it, so no two people can have the same one;
your display name;
a link to your profile photo, if you have one (normally the photo your Google or Facebook account uses);
three dates: when the profile was created, when it was last updated, and when you last changed your username.

Your email address is not stored in our database. Our security rules don't even allow an email field in a profile.

Your profile is private: only you can open it. To tell you whether a username is free, a signed-in visitor can check one name at a time. That check can reveal only the name, the internal account ID that owns it and the date it was claimed, never your name, email address, photo or progress. Nobody can download the list of usernames. If we ever add features that show usernames to other people, such as leaderboards, we will update this policy before they launch.

Why: your username is how bl4ck knows you, and your profile lets the site greet you and show your account.

Your progress

When you're signed in, bl4ck saves your progress to your account, so it follows you to every device:

the worlds (themes) you have explored and the one you are using now;
simple activity stats: the date of your first visit, the last day you visited, how many days you have been active, and your current and best daily streaks;
as tools and games are added, the progress each of them saves, such as scores, levels or settings.

Your progress is stored under your account, and only you can read it.

Why: keeping your progress safe and in sync between devices is the main reason accounts exist on bl4ck.

Data that stays on your device

Some information lives only in your browser's storage, on your own device. These settings and your guest progress are never sent to us:

bl4ck-theme: the world (theme) you picked;
bl4ck-motion: whether you turned animation down or back up;
bl4ck-arcade-hi: your high score in the Arcade Siege world's background game;
bl4ck-progress:guest: your progress while you are not signed in, such as the worlds you have explored and your visit stats.

While you're signed in, your browser also keeps a few working copies. They make the site fast and make sure no progress is lost:

bl4ck-session: a small sign-in hint (your account ID, username, display name, photo link and two account dates), so the header can show you as signed in the moment a page opens. Signing out removes it;
bl4ck-progress:<account ID>: a copy of your progress, in case you go offline or close the tab before a change is saved. It is removed when you sign out, once everything has reached your account;
your sign-in session, which Firebase keeps in your browser's storage so you stay signed in between visits. Signing out ends it;
up to three short-lived markers in session storage, which your browser deletes when you close the tab.

When you sign in, the progress you made as a guest on that device is added to your account, and the guest copy is removed. To delete everything bl4ck has stored in a browser, clear this site's data in that browser's settings.

Cookies, ads and analytics

bl4ck doesn't use advertising or analytics cookies and doesn't track you across other websites. Our pages don't set cookies of their own; the settings above use your browser's storage instead. The Google and Facebook sign-in windows are run by those companies and may use their own cookies, under their own policies.

To keep bl4ck free, we may show ads in the future (for example through Google AdSense) or count visits. Before that happens, we will update this policy to explain exactly what changes, and we will ask for your consent wherever the law requires it.

Technical data when you visit

Like every website, the service that delivers our pages processes technical data such as your IP address, your browser type and the page you asked for, so it can send you the page and protect the site from attacks. We don't use this data to build a profile of you.

Signing in with Google or Facebook

You can create an account with Google or Facebook instead of a password. Here is what happens:

A Google or Facebook window opens and asks whether you want to share your basic profile with bl4ck. Nothing is shared unless you agree.
If you agree, the provider shares your name, email address, profile photo and an ID for your account (Google's window may also mention your language preference). That basic profile is all we ask for: on Facebook, only the two basic permissions called public_profile and email.
We never see your Google or Facebook password. bl4ck can't post anything for you, and we don't get your friends, contacts, messages or anything else.
When bl4ck shows your profile photo, your browser loads it from Google's or Facebook's servers.
If you use different sign-in methods with the same email address, bl4ck links them into one account after you sign in with the method you used first.

Your Google and Facebook accounts are covered by those companies' own policies: theGoogle Privacy Policy and theMeta Privacy Policy.

Who processes your data

We don't sell, rent or trade your personal data, and we don't share it with advertisers. A few service providers process it for us, only to run bl4ck:

Google Firebase (Google LLC) runs our sign-in system (Firebase Authentication) and our database (Cloud Firestore), and sends our account emails, such as address verification and password resets. Your account data and progress are stored on Google's servers, which may be outside your country: Firebase Authentication, for example, runs in data centers in the United States. Google processes this data for us under its Firebase data processing terms. Read more inPrivacy and Security in Firebase.
Cloudflare (Cloudflare, Inc.) hosts bl4ck and delivers its pages through its global network (Cloudflare Pages). To do that and to protect the site from attacks, it processes the technical data described above, such as your IP address. Read more in theCloudflare Privacy Policy.

We may also share information if the law requires it, for example to answer a valid legal request.

Our legal bases

Privacy laws such as the GDPR in the European Union and the UK GDPR ask us to name the legal basis for each use of your data:

Providing the service you asked for (our contract with you): creating and running your account, keeping your username unique, and saving and syncing your progress.
Legitimate interests: keeping bl4ck secure, preventing abuse and fake sign-ups, and fixing problems, always balanced against your rights.
Consent: wherever the law requires your permission, for example for any ad or analytics cookies we might add in the future. You can withdraw consent at any time.

How long we keep your data

We keep your account, profile and progress for as long as you have an account. When you delete it, we erase it straight away (see How to delete your data).

How long each kind of data is kept
What	How long
Sign-in accountEmail address, name, photo link, sign-in methods	Until you delete your account
ProfileUsername, display name, photo link, dates	Until you delete your account. When you change your username, the old one is released at once.
ProgressWorlds, activity stats, tools and games	Until you delete your account
Security logsIP addresses that Firebase records at sign-up and sign-in	A few weeks, kept by Google
In your browserTheme, motion setting, guest progress, working copies	Working copies until you sign out; everything else until you clear this site's data in your browser

After an account is deleted, Google removes any remaining copies from its backup systems within 180 days, as described in its Firebase privacy information.

Your rights and controls

You stay in control of your data. On Your profile you can:

see your profile and edit your details, such as your display name;
change your username (once every 30 days);
download a copy of your data as a JSON file, a standard format that other programs can read;
delete your account and everything in it (see how).

Depending on where you live, the law may give you further rights: to get a copy of your data, to correct it, to have it deleted, to take it to another service, to object to or restrict how we use it, and to withdraw your consent. You can use most of them yourself on Your profile, and you can complain to the data protection authority where you live.

Emails: we don't send newsletters or marketing emails, so there is nothing to unsubscribe from. We only send the emails your account needs, such as the link that verifies your address or the link that resets your password, and only when you sign up or ask for one.

How to delete your data

You can delete your bl4ck account and all of its data yourself, at any time. It takes about a minute.

Sign in to bl4ck the same way you created your account: email and password, Google or Facebook.
Open Your profile (/account/) from the menu under your picture in the top-right corner.
Scroll down to Danger zone.
Select Delete account.
Confirm. For your safety, bl4ck first asks you to prove it's you: enter your password, or confirm in the Google or Facebook window.

What gets deleted

your profile: username, display name and photo link;
all of your saved progress;
your sign-in account, including your email address and every linked sign-in method;
on the device you use for the deletion, bl4ck's sign-in hint and its copy of your progress.

Your username is released, so someone else may choose it later.

Immediate and permanent

Deletion happens right away and can't be undone: nobody can restore a deleted account or its progress. You're welcome to create a new account later. (Google then clears any leftover copies from its backup systems within 180 days.)

Data in your browser

Your theme and motion settings aren't part of your account, so they stay in your browser. The same goes for copies on any other device you used. To remove them, clear this site's data in each browser's settings. Guest progress, made without an account, exists only in your browser, so clearing the site's data deletes it.

If you signed in with Facebook

Removing bl4ck from your Facebook account (in Facebook: Settings & privacy → Settings → Apps and websites, then choose bl4ck and Remove) stops Facebook from sharing your information with us, but it doesn't delete your bl4ck account. For a complete clean-up, first delete your bl4ck account with the steps above, then remove bl4ck in Facebook. If you already removed it, you can still sign in with Facebook once more (Facebook will ask for your permission again) and then delete your account.

Signed in with Google? You can also remove bl4ck from the connected apps in your Google Account, atmyaccount.google.com/connections.

Can't sign in any more?

If you use an email address and a password, use the forgot-password option in the sign-in window to set a new password, then follow the steps above. If you signed in with Google or Facebook, recover that account with Google or Facebook first.

Children

bl4ck accounts are not meant for children under 13. If you are under 13, or under the minimum age for online accounts where you live if that is higher, please don't create an account. You can still use bl4ck as a guest, which keeps everything on your device.

We don't knowingly collect personal data from children under 13. If we learn that a child under 13 has created an account, we will delete it.

A parent or guardian who can sign in to the account can delete it right away on Your profile.

Security

Connections to bl4ck and to Firebase are encrypted (HTTPS).
Our database's security rules let each account read and change only its own records. Nobody else can open your profile or your progress through the website.
Passwords are handled entirely by Firebase and stored only in hashed form.
Before an account is deleted, bl4ck asks you to confirm that it's you.
The site owner can see account records in Firebase's admin console, and looks at them only when that's needed to run the site, fix a problem or stop abuse.

No system is perfectly secure. If a security problem ever affects your data, we will tell you as the law requires.

Changes to this policy

When we change this policy, we update the effective date at the top of this page. If a change is significant, for example new kinds of data, ads or analytics, we will announce it on the site before it takes effect.