Blockade Labs / Skybox AI
California Privacy Notice (CCPA/CPRA)
Effective date: 09/11/2026
Scope
This California Privacy Notice supplements the Blockade Labs Privacy Policy and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”), to the extent required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, “CCPA”). Capitalized terms not defined here have the meaning given in the Privacy Policy.
Categories of Personal Information We Collect
In the preceding twelve (12) months, we have collected the following categories of personal information about California consumers, as defined by Cal. Civ. Code § 1798.140, along with the retention period or criteria applicable to each category:
| Category (CCPA/CPRA) | Examples of What We Collect | Collected? | Disclosed For a Business Purpose To | Retention Period or Criteria |
|---|---|---|---|---|
| A. Identifiers | Name, email address, phone number, account username, IP address | Yes | Service Providers; Affiliates | While Your account is active. After Your account becomes an Inactive Account, per the notice, export, and deletion schedule in Terms of Service Section 13. |
| B. Customer Records (Cal. Civ. Code § 1798.80(e)) | Name, address, phone number, payment card or bank account number (via Stripe/Coinbase Commerce) | Yes | Payment processors (Service Providers) | Account-level contact details: same as Identifiers above. Payment and transaction records: 7 years from the date of the transaction, to satisfy tax, accounting, and payment-network recordkeeping obligations. |
| C. Protected Classification Characteristics | None collected | No | N/A | N/A, not collected. |
| D. Commercial Information | Subscription tier, purchase and billing history, Wallet balance and Automatic Top-Up preferences | Yes | Service Providers; Affiliates | While Your account is active, then per the Inactive Account schedule, except billing/transaction history, which follows the 7-year period described under Customer Records above. |
| E. Biometric Information | None collected | No | N/A | N/A, not collected. |
| F. Internet or Other Network Activity | Usage Data, browser type/version, pages visited, time on pages, device identifiers | Yes | Service Providers (analytics, security) | Generally retained for a shorter period than account data, except where used to strengthen security, improve the Service, or as otherwise required by law, consistent with the Privacy Policy's Usage Data retention statement. |
| G. Geolocation Data | Approximate location derived from IP address | Yes | Service Providers | Same as Internet or Other Network Activity above (this data is only approximate, IP-derived location, not precise geolocation). |
| H. Sensory Data | Text and image prompts, and generated Assets, You submit to or receive from Skybox AI | Yes | Other users (as described in the Privacy Policy); Service Providers | While Your account is active and the Asset remains hosted, per Terms of Service Section 4 (Ownership). Following account inactivity, per the Inactive Account schedule in Terms of Service Section 13. |
| I. Professional or Employment Information | Claimed academic email address and verification status (Academic Subscription only) | Yes | Service Providers (verification) | For the duration of Your Academic Subscription and any period reasonably needed to verify or re-verify eligibility. |
| J. Non-Public Education Information | None collected beyond the academic email verification described in row I | Limited | N/A | Same as Professional or Employment Information above. |
| K. Inferences | Inferences about Your preferences drawn from Usage Data, to improve and personalize the Services | Yes | Service Providers; Affiliates | For as long as the underlying Usage Data used to derive the inference is retained, per the Internet or Other Network Activity row above. |
| L. Sensitive Personal Information | Account login credentials; precise geolocation is not collected | Limited | Service Providers, as needed to provide the Services | While Your account is active, then per the Inactive Account schedule in Terms of Service Section 13. |
Categories of Sources
We collect the categories of personal information listed above from the following sources:
- Directly from You, when You create an account, submit a prompt, subscribe to a Subscription, or contact us.
- Automatically from Your device or browser, through Cookies and similar tracking technologies, as described in the Privacy Policy.
- From Service Providers, such as our payment processors (Stripe, Coinbase Commerce) and academic-email verification vendor, if applicable.
- From other users, where Your name or prompts appear in connection with Assets visible to other users of the Service.
How We Use Personal Information
We use the categories of personal information listed above for the business and commercial purposes described in the “Use of Your Personal Data” section of the Privacy Policy, including to provide and maintain the Service, process payments and Wallet top-ups, verify eligibility for discounted or restricted-use Subscription tiers (including the Academic Subscription), detect and prevent fraud and misuse, provide customer support, and comply with legal obligations. We do not use sensitive personal information to infer characteristics about consumers beyond what is necessary to provide the Service.
Categories of Third Parties to Whom We Disclose Personal Information
We disclose personal information for a business purpose to the categories of third parties described in the “Use of Your Personal Data” section of the Privacy Policy: Service Providers, Affiliates, Business Partners, professional advisors, other users of the Service (for Assets and associated names), and law enforcement or regulators where legally required. We do not disclose personal information to third parties for the third party's own independent marketing purposes, except as described below regarding advertising cookies.
Sale or Sharing of Personal Information
We do not sell personal information for monetary consideration.
Sharing for Cross-Context Behavioral Advertising
To the extent Blockade allows third-party advertising cookies described in the Privacy Policy's “Links to Other Websites” section to operate on the Website, that activity may constitute “sharing” of Internet or Network Activity information (Category F above) with advertising networks for cross-context behavioral advertising, as defined by the CCPA. You may opt out of this sharing at any time using by submitting a request to personaldata@blockadelabs.com
Retention
The specific retention period or criteria for each category of personal information is set out in the “Retention Period or Criteria” column of the table above. As a general matter, we do not retain personal information for longer than reasonably necessary for the purposes described in the Privacy Policy and this Notice.
Your California Privacy Rights
Right to Know / Access
You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it, for the 12-month period preceding your request.
Right to Delete
You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (for example, where retention is necessary to complete a transaction, detect security incidents, or comply with a legal obligation).
Right to Correct
You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing
You have the right to opt out of the sale or sharing of your personal information. As described above, we do not sell personal information, and currently do not share personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Personal Information
To the extent we collect sensitive personal information (Category L above), you have the right to limit our use of it to what is necessary to perform the Services you request.
Right to Non-Discrimination
We will not discriminate against you for exercising any of these rights, including by denying goods or services, charging different prices, or providing a different level of service, except as permitted by the CCPA (for example, offering a different price or service level that is reasonably related to the value provided by your data).
Right to Data Portability
Where technically feasible, you have the right to receive a copy of your personal information in a portable, readily usable format.
How to Submit a Request
You, or an authorized agent acting on your behalf, may submit a request to know, delete, or correct by emailing personaldata@blockadelabs.com. We will verify your identity before responding, using a method reasonably designed to match the sensitivity of the information requested and the risk of harm from unauthorized access. If you use an authorized agent, we may require the agent to provide proof of authorization and may still require you to verify your own identity directly with us.
We will confirm receipt of your request within ten (10) days and will respond substantively within forty-five (45) days, which we may extend once by an additional forty-five (45) days where reasonably necessary, with notice to you of the extension and the reason for it.
Shine the Light
Separately from the CCPA, California Civil Code § 1798.83 (“Shine the Light”) permits California residents to request certain information once per year about our disclosure, if any, of personal information to third parties for those third parties' own direct marketing purposes. As described above, we do not disclose personal information to third parties for their own independent marketing purposes.
Minors
The Skybox AI Terms of Service require that Users be at least 18 years old. We do not knowingly collect personal information from consumers under 16 years of age, and accordingly do not sell or share the personal information of consumers we know to be under 16.
Changes to This Notice
We may update this Notice from time to time consistent with the “Changes to this Privacy Policy” section of the Privacy Policy.
Contact Us
Requests or questions regarding this Notice or your California privacy rights may be directed to:
Blockade Games, Inc.Attn: Marguerite DeCourcelle8520 Allison Pointe Blvd Ste 223 Indianapolis, INpersonaldata@blockadelabs.com