Privacy Policy

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

Our privacy policy is structured as follows:

I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing

Scope. This privacy policy covers the website mobx.games and every game published by MobX GmbH, wherever you play it: in your browser on mobx.games, as a download from Steam, the Apple App Store or Google Play, or on partner platforms such as CrazyGames, Poki or Discord. Not every game uses every feature described below; where a section applies only to some of our games, it says so.

I. Information about us as controllers of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

MobX GmbH, Siemensstr. 2, 53121 Bonn, Deutschland

E-Mail: contact _AT_ mobx _DOT_ app
(please replace _AT_ with @ and _DOT_ with .)

II. The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR); to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR); to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR; to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR); to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Cookies

a) Our own cookies and similar storage

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages, to keep you signed in to your mobx.games account, or to remember your game settings.

Some of these cookies are session cookies that are deleted when you close your browser. In addition, when you play the games on this website or create a mobx.games account, we store a persistent first-party sign-in token in a cookie that is valid on mobx.games and its subdomains, so that your account and progress follow you across our games. Our games may also store a randomly generated device identifier, your settings and game progress, and a short queue of usage events waiting to be sent (see Analytics below) in your browser's local storage.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website.

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Advertising (Google AdSense)

We finance the free games on this website through advertising. For this we use Google AdSense, including H5 Games Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When ads are served, Google and its partners use cookies and similar technologies to serve and measure ads and, where you have consented, to personalize them based on your visits to this and other websites.

If you are in the European Economic Area, the United Kingdom, or Switzerland, personalized advertising is only used with your consent, which we ask for through a consent banner. The legal basis is your consent per Art. 6 Para. 1 lit. a) GDPR. Without consent, only non-personalized ads are shown; these still use cookies for frequency capping, aggregated reporting, and fraud prevention. The legal basis for this is our legitimate interest in financing our free games per Art. 6 Para. 1 lit. f) GDPR.

You can review, change, or withdraw your consent at any time via the link, which is also available in the footer of this website.

Details on how Google processes data are available at policies.google.com/technologies/partner-sites. You can manage ad personalization in your Google account at adssettings.google.com and opt out of interest-based advertising by many other providers at youronlinechoices.eu or optout.aboutads.info.

Ads in our mobile apps. Our free mobile apps show ads through Google AdMob, another Google advertising service. AdMob uses your device's advertising ID and similar technologies to serve and measure ads and, where you have consented, to personalize them. In the European Economic Area, the United Kingdom, and Switzerland we ask for your consent through Google's consent form when you first launch the app, and you can change or withdraw it at any time via the ad consent option in the app's settings (shown where consent applies). On iOS, ads are only personalized if you additionally allow tracking in the App Tracking Transparency prompt. The legal bases are the same as above: consent per Art. 6 Para. 1 lit. a) GDPR for personalized ads, and our legitimate interest in financing free games per Art. 6 Para. 1 lit. f) GDPR for non-personalized ads. You can also reset or delete your advertising ID in your device settings.

Fonts (Google Fonts)

This website and some of our games load the Inter typeface and other fonts from Google Fonts, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To deliver the font files, your browser connects to Google's servers, which receive your IP address and the address of the page you are visiting. Google Fonts sets no cookies. Our legitimate interest lies in a consistent and readable presentation of our website and games; the legal basis is Art. 6 Para. 1 lit. f) GDPR. Details are available at developers.google.com/fonts/faq/privacy and in Google's privacy policy at policies.google.com/privacy.

Contact

If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The contact form sends your name, email address and message to our mailbox as an email through Amazon Web Services (AWS) Simple Email Service; the website itself does not store your message. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Analytics (first-party)

We measure how our games and this website are used with our own analytics system, which runs on Amazon Web Services (AWS) in the EU (Frankfurt region) on our behalf as a data processor. We do not use third-party analytics providers such as Google Analytics, and the system sets no cookies. Events waiting to be sent are kept briefly in your browser's local storage.

Each event carries your pseudonymous player ID (the randomly generated ID of your mobx.games account, a random device ID if you play without one, or, in games launched through Discord, an ID derived from your Discord user ID), the game, the event type and time, whether you are on a phone or a desktop, the game version, and where you came to the game from (for example this website, an app store version or Discord). Depending on the event it also contains gameplay details such as session and match length, the mode played, results and scores, and, on this website, the page you visited including any campaign parameters in its address. Events never contain your IP address, your email address or your display name, and our analytics system does not read your IP address or browser identification.

To see which websites send visitors to us, we also evaluate the access logs of our web hosting (AWS Amplify): from them we keep only the number of visits per referring website and day; individual log entries are not stored by us.

Raw events are deleted after 90 days. For each player ID we keep a short summary (first and last day played, number of sessions and games) for long-term statistics such as returning players; everything else is kept only as aggregate statistics that do not identify you. When you delete your account, your events and your summary are deleted as well. Our legitimate interest lies in understanding how our games are played so that we can improve them; the legal basis is Art. 6 Para. 1 lit. f) GDPR. You can object to this processing at any time (Art. 21 GDPR) by contacting us.

Game Accounts & Player Data

The games on this website use a shared mobx.games account so your progress follows you across our games and devices. When you first play, we automatically create an anonymous account identified by a randomly generated ID and gamertag; no email or personal information is required to play.

For each account we store: a randomly generated player ID and gamertag, your chosen display name, your game statistics and best scores, any cosmetic items you own, your friends list (see below), when the account was created and last used, and a device authentication token. In our online multiplayer games we also store your rating and your numbers of games, wins and losses; Blob Volley additionally keeps a history of your matches (opponent, result, score and rating change), each entry for 400 days. The legal basis is Art. 6 Para. 1 lit. b) GDPR (providing the game service you requested).

Leaderboards. Some of our games have online leaderboards. If you play signed in and set a score, your display name, gamertag, and score are stored and displayed publicly to other players. Scores from anonymous play are never published. The legal basis is Art. 6 Para. 1 lit. b) GDPR.

Friends. You can connect with other players as friends. We store your friend connections, pending friend requests, and any players you have blocked. Players who know your tag can send you a friend request, and your friends see your display name and best scores on friends leaderboards. The legal basis is Art. 6 Para. 1 lit. b) GDPR.

Ratings and favorites. On the game pages of this website you can rate a game with a thumbs up or down and mark games as favorites. A rating is stored with your player ID (if you do not have a mobx.games account yet, an anonymous one is created when you first rate), the game and the month of the vote; other visitors only ever see totals, never who voted. Favorites are kept in your browser's local storage; if you are signed in with an email address, they are also stored with your account so that they appear on your other devices. Deleting your account deletes your ratings and favorites. The legal basis is Art. 6 Para. 1 lit. b) GDPR.

Reporting and blocking players. In some multiplayer games you can report another player, for example for an offensive name, and block players. A report stores who reported whom, the names and gamertags of both players, the reason you chose, an optional note of up to 200 characters, and the time. We use reports only to review the case, and they are deleted after 90 days. Blocks are stored with your friends list. Display names are checked against a list of offensive words when they are set. The legal basis is our legitimate interest in a safe and respectful community, Art. 6 Para. 1 lit. f) GDPR.

Purchases. Some of our apps offer in-app purchases through Google Play or the Apple App Store, which handle the payment. To unlock what you bought, the app or our server checks the purchase with the store; we then store only which items you own and when you last bought something, never your payment details. The legal basis is Art. 6 Para. 1 lit. b) GDPR.

Email (optional). You may optionally connect an email address to your account so you can restore it on another device. If you do, we store your email address solely to send you a one-time verification code and to let you sign back in. We do not use it for marketing. The legal basis is Art. 6 Para. 1 lit. b) GDPR. Verification codes are sent via Amazon Web Services (AWS) Simple Email Service.

Retention. Anonymous accounts that have not been used for 90 days and have no email connected are automatically and permanently deleted. Accounts with a connected email are retained until you delete them.

Processing & storage. Player data is stored in Amazon Web Services (AWS) data centers (primarily the EU, Frankfurt region) and processed by AWS Lambda and DynamoDB on our behalf as a data processor.

Your right to erasure (Art. 17 GDPR). You can permanently delete your account and all associated data at any time: on this website, open the account menu and choose Delete account, or use the corresponding option inside our games where available. This immediately and irreversibly deletes your account, gamertag, statistics, leaderboard entries, friend connections and requests, game ratings and favorites, owned cosmetics, connected email, and authentication tokens. You can also request deletion via the web at mobx.games/delete-account, or by emailing us (see the contact details above).

Online Multiplayer

Some of our games can be played online with other players. To bring players together and keep a match in sync, our servers process your IP address, a temporary room or lobby code, the display name you use in the game, the server region you play on (chosen from your time zone, which you can change), and the game data the match needs (for example positions, actions and scores). This data is used only to run the session. Our multiplayer servers run on Amazon Web Services (AWS), primarily in the EU (Frankfurt region), on our behalf as a data processor. The legal basis is Art. 6 Para. 1 lit. b) GDPR (providing the game service you requested).

Direct connections between players. In some games, players connect directly to each other (peer-to-peer, using WebRTC). As with any direct internet connection, the other players in your session can then technically see your IP address. To find a direct route, your browser asks a public STUN server operated by Google LLC for your public IP address. If a direct connection is not possible, the traffic is forwarded through a relay (TURN) server of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which processes your IP address on our behalf as a data processor. Cloudflare and Google may process data in the USA; such transfers are based on the EU-U.S. Data Privacy Framework, under which both companies are certified, and on the EU standard contractual clauses. These connections are encrypted, and the relay forwards the traffic without reading or storing its content. The legal basis is Art. 6 Para. 1 lit. b) GDPR (providing the game service you requested) and our legitimate interest in reliable, low-latency online matches per Art. 6 Para. 1 lit. f) GDPR.

What other players see. While you play together, other players see your display name or, in games launched through a platform such as Steam or Discord, the name on your profile there.

Voice Chat

Some of our multiplayer games offer voice chat with the other players in the same session. Voice chat only works if you allow the game to use your microphone. Where a game offers it, you can mute yourself or switch voice chat off in its settings, and in every game you can withdraw microphone access at any time in your browser or device settings. Access to your microphone is based on your consent per Art. 6 Para. 1 lit. a) GDPR, which you give through the permission prompt of your browser or device; the transmission itself is based on Art. 6 Para. 1 lit. b) GDPR.

Your voice is sent live and encrypted to the other players in your session, directly or through the relay server described above. We do not record, store or analyze voice chat, and it is not passed to us or to any third party. Please note that other players could record what they hear on their own devices; we have no control over this.

Games on Third-Party Platforms and Stores

Some of our games are also offered through third-party platforms: Steam (Valve Corporation), the Apple App Store (Apple Inc.), Google Play (Google Ireland Limited), CrazyGames, Poki and Discord. If you get or play one of our games there, that platform processes your data as a separate controller under its own privacy policy, for example for your platform account, purchases, downloads and its community features. Ads shown on partner web portals are served by the portal operator under its own privacy policy. You can find each platform's privacy policy on its website.

From a platform we receive only what the game needs to work. On Steam, this is your Steam ID and profile name (to show your name to other players and to let you invite friends), your achievements, and the save files you keep in Steam Cloud. On Discord, it is your Discord user ID, username, display name and avatar, and the server and activity you started the game in: other players see your name and avatar, lobbies are limited to your server, and we store your rating and your numbers of games, wins and losses under your Discord user ID. While you play, the game shows the game name, its state and the party size as your Discord activity (rich presence); it never posts anything else. Player records from Discord are not tied to a mobx.games account; to have yours deleted, email us with your Discord username. We never receive your payment details. From the stores we receive aggregated sales and download reports that do not identify you. The legal basis is Art. 6 Para. 1 lit. b) GDPR.

Last updated: 2026-10-03