Block Party Studio Company
You can see our previous privacy policy here.
Block Party Studio Company ("Block Party," "we," "our," or "us") is an online safety company building tools to enhance privacy, security, and user experience on social media.Block Party takes your privacy seriously. Our Privacy Policy ("Policy") provides you with information about how we collect, process and use (together referred to as "processing") your personal data as well as your related legal rights. For your convenience, below you can read both an Overview and our full Privacy Policy.
We also recommend that you read our Terms of Service available at https://www.blockpartyapp.com/tos/ (the "Terms"), which govern how we provide our Browser extension, and any software made available on or in connection therewith (collectively, the "Service"). Any terms used in this Policy without definition have the meaning provided in the Terms. This Policy does not extend to the practices of third parties that are not owned, managed or controlled by us. By using the Service, you confirm that you consent to the collection, use and sharing of your information as described in this Policy.
We collect as little data as possible in order to provide you with our Service. We do not sell your data to third parties or use third-party advertising.
This Overview provides you with a general description about our processing of your personal data. For more information about our processing activities, please refer to our complete Privacy Policy https://www.blockpartyapp.com/privacy-policy/.
The following is a list of how we collect your data:
You have the right to:
If you would like to ask questions about our processing of your personal data, or to lodge a complaint, please contact Tracy Chou, our Controller, via email [email protected].
Protecting your privacy and data confidentiality is very important to us. We take the protection of your personal data seriously and collect as little data as possible. We collect your data because it is necessary for our product and website to function correctly, allows us to communicate with you, and permits us to process payment for our services. Our general practice is to avoid collecting more data than necessary. This Policy informs you about the collection, processing and use of your personal data. We gather and use personal data firmly within the provisions of applicable law . Below we lay out the specific data, scope and purpose of our collection and use of personal data when you are using our Service or visiting our website.
The legal person responsible for the collection, processing and / or use of personal data in connection with our website and Service ("Controller") and Data Protection Officer is:
Tracy Chou
Block Party Studio Company
3790 El Camino Real #1209
Palo Alto, CA 94306
U.S.A.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be specifically identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This information includes, for example, details such as name and email address, nicknames and information in your social media accounts or any content you generate. Such information may be referred to in applicable rules, laws or regulations as “personally identifiable information” or “personal information.”
We collect and process your personal data for specified, explicit and legitimate purposes and do not further process your data in a manner that is incompatible with those purposes.
We collect and process your personal data for the following purposes:
We collect and process your personal data in compliance with applicable laws.
Other than data that is collected automatically in order for our website or Service to function, we will always ask for your consent to collect and process your personal data for the aforementioned specific purposes, as permitted by applicable law. Where you have provided us with your consent to the collection and processing of your personal data for the aforementioned specific purposes, you have the right to withdraw your consent at any time by either 1) no longer visiting our website if you are not a registered user or 2) deactivating your account and asking us to delete your personal data so far as allowed under applicable law if you are a registered user.
The collection and processing of your personal data may be necessary for the performance of a contract to which you may be a party, such as signing up to use our Service. Prior to entering into such a contract, the collection and processing of your personal data may also be necessary in order to take steps at your request or to operate our website as a visitor. This applies for registration and the use of our Service and website.
Collection and processing of your personal data may be necessary for compliance with a legal obligation to which we are subject under laws applicable to users of our website or Service.
The collection and processing of your personal data may be necessary for the purposes of our legitimate interests. For example, we use personal data on the social media accounts you select to apply our Service. We also collect and process website logs for technical reasons, such as, but not limited to, preventing denial of service attacks. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. Preventing such overloads of our systems and any security issues by denial of service attacks is in your and our vital interest and therefore we use the website logs. Furthermore, we collect and process such data to ensure that our website and Service are constantly improved and adjusted to the changing requirements for an efficient usability and the technical environment. In addition, we collect personal data to remember your privacy settings and/or to keep you logged in. Ensuring the usability of our website and our Service is in your and our vital interest and therefore we use such data.
We will make every effort to inform you of any third-party transfer of your personal data when reasonably practicable except as used for functionality of our website and Service.
We will not transfer your personal data to third parties as a matter of course without letting you know in advance. As far as practicable and whenever legally required, we will ask for your prior permission unless the transfer of such data is permitted by applicable national data protection laws.
We use third-party service providers for services such as request logging, emailing and error logging. Where we use such third-party providers, we review their privacy policies to ensure that the service providers provide sufficient guarantees regarding an adequate level of data protection and only use personal data for the purposes stipulated by us and in accordance with our instructions. We also contractually require the service providers to treat your personal data solely in accordance with this Policy and applicable data protection laws. If you would like more specific information on our service providers and their privacy policies, please contact us at [email protected].
You may opt-out to sending metrics data to Mixpanel and error data to Sentry, at any time.
Data transfers to other third parties are required for application functionality and users cannot opt out.
If you are a Registered user you should be able to update your name within the Service as well as delete your saved progress (with respect to social media settings and content metadata). You may also delete your account which permanently removes all of your personal information from the Company’s system.
To the extent legally permitted and in compliance with applicable laws you have the following rights to protect your personal data collected and processed by us (excluding personal data manifestly made public by the data subject):
Upon request, you have the right to receive information about the personal data stored by us about you and information about how we collect, process and store your personal data. Where we have your personal data stored, you have the right to gain access to such personal data. You also have the right to request that we correct any inaccurate personal data. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal data completed.
You also have the right (1) to receive all personal data concerning you and which you have provided to us.
You have the right to demand from us the erasure of your personal data, where, among other situations, one of the following grounds applies:
Please note, if data needs to be retained for legal purposes under applicable law, we will restrict the use of the respective data. In addition, in some cases, requesting that we not process or retain your personal data will mean that you can no longer use our Service if such data is reasonably required to perform the Service.
You have the right to withdraw your consent at any time, when you have provided us with your consent to the collection and processing of your personal data for one or more specific purposes.
To exercise your rights, please contact us via email at [email protected] or mail to:
Block Party Studio Company
3790 El Camino Real #1209
Palo Alto CA 94306
United States
You may opt to link your account on the Service to your social media account or other accounts, such as without limitation Google and Okta, in accordance with your account settings (which you may change at any time) and respective policies of these third parties.
This Policy may be changed from time to time. The current version is available at: https://www.blockpartyapp.com/privacy_policy/
When you use our Service on your browser, we collect and process the following data:
During an error, the following data may be sent to our error logging provider, Functional Software, Inc. (Sentry):
Said data is only collected when the Service crashes or throws an error.
When using our website, we automatically collect the following data in order to provide you with our Service, and for security reasons:
All requests to our website are recorded in the website logs. Data stored includes your IP address (solely for the purpose of IT security and only accessible by our IT Security team), the time at which the request was made, the web address accessed, the browser identifier and the referring page. This data is used to generate usage statistics as well as to investigate potential security issues and forum or blog spam. Detailed logs are retained for a period of 30 days, after which only the aggregated usage statistics that cannot be connected to a single user remain. Everything else is deleted.
We use cookies to recognize signed-in users or to store your privacy preferences. Cookies are small files that are stored on your computer with the help of your internet browser. The cookies are necessary to provide you with our Service and/or website functionality, are not evaluated in any other manner, and are never used to track website visitors. If you do not want to enable cookies, you can opt against using them by selecting the appropriate settings on your browser. Please note that the efficiency and range of our services may be restricted as a result.
We use functionality cookies to associate user activity in the browser extension to activity on our deployed servers for the purposes of product analytics and presenting a continuous user experience between the two applications.
We use Google Analytics, a web analytics service from Google Inc. ("Google"), on our website. Google Analytics uses so-called "cookies" (text files stored on your computer that enable us to analyze your use of our Websites). Information generated by the cookies (including your abbreviated IP address) is transmitted to and stored at a Google server in the United States. Google uses this information to assess your use of our website/Service, to compile activity reports, and to provide more services connected with the use of our website/Service. It is possible that Google may transmit this information to third parties if required by law, or if third parties process this information on behalf of Google.
We collect personal information such as your user activity through the use of Mixpanel. Mixpanel’s ability to use and share information is governed by the Mixpanel Terms of Use, available here, and the Mixpanel Privacy Policy, available here. All users have the option to opt-out and/or opt-in of sending metrics data to Mixpanel, at any time.
Twilio
We use Twilio to provide authentication services.
We use customer.io for transactional and marketing email outreach with registered users and others who have shared their email address for product-related communications.
We use Sentry to investigate errors when the Service crashes or throws an error. You may opt-out to sending error data at any time.
Hotjar
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
HubSpot
We use HubSpot’s tracking code on our website to better understand how visitors interact with our site content and to optimize the user experience. HubSpot sets cookies and collects information such as pages visited, links clicked, and time spent on pages. This data allows us to see overall site analytics and trends without identifying individual users.
Stripe
We use Stripe to collect and process payment information. We do not deliberately store nor collect any billing or payment information.
Our Service is publicly available. If you sign up for our Service, we collect and process personal data you voluntarily provide as follows:
Full name, phone number, financial and billing information, transaction information, geolocation data on an anonymous basis only.
We may host product campaigns or offer mailing lists that rely on email collection. We will never sell your email address, or any other information collected, to any third parties.
We also collect Social Media Settings and Social Media Account Information in an identifiable manner for registered users only and anonymously for unregistered users.
This section only applies to California residents. It explains how we collect and use Personal Information as well as the rights available to California residents under the California Consumer Protection Act (“CCPA”). The words in this section have the same meaning given to them in the CCPA. Please note that the words as described under the CCPA may be broader than their common meaning.
“Personal Information,” for example, refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household. Personal Information does not include information that is aggregated or information that cannot be reasonably linked to you.
In order to provide you with our Service, we must process certain Personal Information about you. We do not sell any of your Personal Information, and we never will. For a detailed explanation about the kinds of information that we collect and how we use it, please review the information provided in the above Policy. Here is a summary of the CCPA categories of Personal Information that we may have collected about you over the past 12 months:
We may have collected these categories of Personal Information for the following business purposes:
Subject to the limitations in this Policy, we share your Personal Information with external vendors (“Service Providers”) that are contractually prohibited from retaining, using, or disclosing Personal Information for any purpose other than the specific business purposes described in the contract. These Service Providers include:
Additionally, we may also share your Personal Information with law enforcement or other third parties as necessary to comply with legal requirements.
We receive Personal Information from you, our website, social media platforms you link to our Service, your device(s), and our external service providers. The categories of sources from which we have collected or received Personal Information include:
We use Render Networks Pty Ltd, an Oregon-based service provider to store your data. Render encrypts all stored data. Sensitive information such as passwords are salted and hashed. Employee access to data occurs through company Google SSO login. Once the employee is terminated, access is automatically cut off.
The CCPA provides you with the following rights:
Please note that we have a duty to verify your identity whenever you exercise your Right to Know and/or your Right to Request Deletion. In order to do so, we will request Personal Information from you to match against the Personal Information in our records. In some cases, we may also request additional documentation to verify your identity.
Please also note that the CCPA allows you to exercise these rights yourself or to designate an authorized agent who will exercise these rights on your behalf. In the event that an authorized agent exercises rights on your behalf, we may request a written permission from you that establishes the individual as your authorized agent as well as other information necessary to verify the identity of the authorized agent.
If you have any questions about this section or how to exercise your rights under the CCPA, please contact us [email protected].
Updated October 14, 2024
