Privacy
Last updated:
Blobbu is a small static website. It has no accounts, sets no cookies, and runs no tracking scripts or ads. Visit counts come from the host's server logs (see Netlify, below). This page explains what happens to the little bit of data it does touch. One small thing is stored on the server: the arena list of recent Blobbu codes, explained below.
Your Blobbu lives in the link
Your quiz answers, a random number (the "salt") and your Blobbu's name are put in the part of the web address after the #, for example #b=1govtnq4fcedgto2lxqac&n=Smokey (older links look like #a=0123&s=1x2y3z&n=Smokey). That part is called the fragment. Browsers don't include the fragment when they request a page, so it isn't sent to the server that hosts Blobbu. The Blobbu is drawn entirely in your browser.
The fragment does stay in the link itself. If you share the link, whoever receives it, and any app or service you use to send it, can see the answers and the name. Your browser may also keep the link in its history like any other page. The name is whatever you type, so don't use anything you wouldn't want in a link.
Saved Blobbus (only if you say yes)
Blobbu saves nothing in your browser unless you choose Allow in the storage notice. The notice doesn't pop up when you arrive: it appears when you first try to save a Blobbu, restore a backup or turn the sound off, or when you open Storage settings. If you choose Allow:
- It uses your browser's local storage, under one key:
blobbuddy.v1. - That key holds your choice (
consent: "yes"), your Sound on/off setting and your Theme (Dark or Light) if you change them, and, when you press Save, the Blobbus you saved, up to 24. Each saved Blobbu is just its answers, salt and name, the same things that are in its link. - It is written when you press Allow and each time you save or remove a Blobbu.
- It never leaves your browser. Blobbu doesn't send it anywhere.
To delete it, use Clear my data in the Menu, or choose No thanks in Storage settings. Both remove the key completely. Clear my data also removes an arcade cabinet's local record (below) if this browser holds one. Clearing your browser's site data for Blobbu does the same. If you choose No thanks, nothing is stored, so your choice isn't remembered and you'll see the notice again the next time you try to save on a later visit.
The arena (the 20 latest Blobbus)
When you hatch a new Blobbu, the app sends its 21-character code to Blobbu's server, for example 1govtnq4fcedgto2lxqac. The code is your four quiz answers plus the random number (salt). It is the only thing sent and the only thing kept:
- No name. Your Blobbu's name is never sent. In the arena every Blobbu gets a made-up name, worked out in the browser from the code itself.
- Nothing else is stored with it: no time, no IP address, no device details. The code has no connection to you.
- Only the latest 20. Each new code pushes the oldest one off the list, and it is deleted.
- The list is public. Anyone who opens the battle panel sees those 20 Blobbus (under made-up names) and can battle them.
- Only fresh hatches are sent. Opened links, saved Blobbus, Today's Blobbu and battles are not.
The list is kept with Netlify (Netlify Blobs, part of the hosting). As with any request, Netlify's server logs record the request itself (see Netlify, below).
Battle honors need no storage. When a Blobbu wins, Keep the honor adds the beaten Blobbu's code to the winner's link (w2=…; links made before October 14, 2026 use w=…). The browser re-runs the battle to check it, and the beaten Blobbu's code is visible to anyone you share that link with.
Ascension needs no storage either. Clearing the arcade's Gauntlet adds the day's date to the Blobbu's link (asc=2026-10-18), and any page that opens it re-runs that day's ladder to check it. If you save an ascended Blobbu, the date is saved with it, like an honor. A Gauntlet run itself lives only in the arcade page's memory and is wiped with the rest of the game.
The hatch API (for AI agents)
AI agents can hatch a Blobbu with one request to /api/hatch. The request carries the quiz answers and a name, if one is given, in the address. A small Netlify Function rolls the Blobbu and sends it back. It stores nothing, calls no other service, and doesn't add the Blobbu to the arena. Like any request, it may appear in Netlify's server logs (see Netlify, below), so names shouldn't contain personal details.
Sharing and downloads
Share opens your device's own share sheet if it has one; otherwise it copies the link, with a short intro and #MyBlobbu, to your clipboard. Challenge a friend (after a battle) copies the battle link and a one-line taunt. Either way, Blobbu hands the link to your device and nothing goes to us. What happens next depends on the app you pick. PNG and Card create their images in your browser and download them to your device. Downloaded images carry a small "blobbu.net" mark.
Share codes. The Share code pill, the trading card and the system card show a QR code for your Blobbu's share link, with the Blobbu in the middle. The code is made in your browser; nothing is sent anywhere to make it. Like the link itself, it contains the Blobbu's code and name, so anyone who scans a card you post can open that Blobbu.
Mini games. The arcade's mini games run in your browser. A run and its score exist only in the page's memory and on the sticker you print; nothing is saved or sent.
Stickers, badges and the arcade. Stickers, die-cut stickers, winner stickers, honor badges, the card back and the sticker sheet are drawn in your browser from your Blobbu's code. The sticker sheet uses the Blobbus you already saved on this device; nothing new is stored. The arcade page (blobbu.net/arcade) is the same app made into a cabinet: a splash screen, PRESS START and big buttons. A game exists only in the page's memory while someone plays; nothing is saved, the arcade never shows Blobbus saved on that device, and after the end screen or a minute without a touch (two during a battle) it wipes the game and goes back to the splash. Scanning a code there reads the picture on the device; it is never uploaded. Its print options, how long it waits and whether it starts muted are part of its link (set up at blobbu.net/arcade?setup). The operator can also press Save on this cabinet there: the same settings (no player data) are then kept in that browser's local storage under blobbu.arcade.v1, so opening blobbu.net/arcade on that machine starts with them; Forget saved settings or Clear my data removes them, and they are never sent anywhere. While it is open it asks the browser to keep the screen awake; nothing is recorded. The Advanced printing setting is remembered only if you allowed storage, like the Sound setting. The arcade's Dark/Light button lasts only for that session; its starting theme is part of its link. One opt-in exception: a cabinet's operator can switch on a local record at setup — per Blobbu, its battle wins and losses and Gauntlet best at that cabinet — stored in that browser's local storage under its own key, blobbu.records.v1 (keyed by each Blobbu's code; no names, no times), shown at the cabinet's hub, and cleared by the setup page's Clear button when it is opened on the cabinet itself, or by Clear my data in that browser. It is never sent anywhere, and it is off unless the operator turns it on in the link. The same goes for the cabinet's high-score table, a second opt-in at setup: each mini game's ten best runs at that cabinet — the Blobbu's name, the score and the date, nothing else — stored in that browser's local storage under blobbu.board.v1, shown on the cabinet's splash and score screen, cleared by the setup page's Clear button on the cabinet or by Clear my data in that browser, never sent anywhere, and off unless the operator turns it on in the link.
Seasonal costumes. For a few weeks a year (Halloween: October 15 to 31) some Blobbus wear a costume, picked from the date and the Blobbu's own code. Nothing about you is used, and a Blobbu's stats and battles never change.
Scan a code. In Battle, Scan a code lets you take a picture with your phone's camera app, pick one, drop one in or paste one. The picture is read in your browser to find the code, then thrown away. It is never uploaded or stored, and the site never gets live access to your camera.
Chat, status page and other extras
- Chat. Your Blobbu's replies are picked from a fixed list of lines in your browser. What you type is only compared against a few keywords on the page. It isn't sent anywhere, isn't saved, and is gone when you leave or open another Blobbu.
- Status page, patch notes and benchmarks are worked out in your browser from the Blobbu itself. The status page also uses today's date from your device; the date isn't sent anywhere.
- Tiny adventures are canned stories picked and rolled in your browser from the Blobbu itself. A shared adventure link adds just the adventure's number (
adv=…) to the Blobbu's link. - System card works like the trading card: the image is made in your browser and downloaded to your device.
- Back up Blobbus downloads a small file (
blobbu-backup.json) with your saved Blobbus: the same answers, salts and names as in their links. Anyone you give the file to can open those Blobbus. Restore Blobbus reads a file you choose in your browser and adds its Blobbus to your saved list. The file isn't uploaded. - Blobbu of the day is worked out in your browser from today's date in UTC (taken from your device's clock). Its link carries that date (
d=…) so it opens with the "of the day" banner. - Poke squishes the drawing and plays a short "boing" that your browser synthesizes on the spot. Nothing is recorded, and Blobbu never uses your microphone. Sound only plays after you tap. The Sound button turns it off; if you've allowed storage, that setting is remembered in the same key as your saved Blobbus, otherwise it lasts for that visit.
- Battle sound effects are also synthesized on the spot by your browser, only after you tap something and only while Sound is on. Nothing is recorded or downloaded.
- Blobbu battles are decided in your browser. A pasted link is only read on the page. Challenge a friend shares a battle link of the form
/vs/…?an=…&bn=…, which carries both Blobbus' codes and names. Like Blobbu share links, it gets a preview image, so that part of the address reaches the server (see Share previews below). Inside the app the battle moves to the part after the#. As with any Blobbu link, whoever you share it with can see the codes and names. - The site tells your browser it never uses the camera (Scan a code takes a picture through your camera app instead), microphone, location, payment, motion sensors, USB or similar device features, so supporting browsers keep them switched off for this site.
Other companies involved
The Inter font is served from this site itself, so loading the page doesn't contact any font service.
- Netlify. Netlify hosts the site and keeps the arena list (codes only, see above). Like any web host, it processes request data, such as your IP address, browser user agent and the page requested (not the fragment), and keeps it in its server logs. Blobbu uses Netlify Web Analytics, which builds aggregate statistics (page views, unique visitors, top pages, top locations, pages not found and bandwidth) from those server logs. It runs no code in your browser and sets no cookies. Unique visitors are counted as distinct IP addresses per day. For how Netlify handles request data and how long it keeps it, see Netlify's privacy policy. For how Web Analytics works, see Netlify's Web Analytics documentation.
- PayPal. The optional tip links, including "Contact sales" on the Pricing page, take you to PayPal.me. Once you follow it you're on PayPal's site, and PayPal's privacy policy applies. Blobbu doesn't send PayPal anything about your Blobbu.
- Share previews. To show a preview image when a link is posted in a chat or social app, a small Netlify Function receives the Blobbu's answers, salt and name from the share link (
/b/…?n=Name), or both Blobbus' codes and names from a battle link (/vs/…). Unlike the fragment, that part of the address is sent to the server, so it may appear in Netlify's request logs.
Changes
If any of this changes, this page will be updated and the date at the top will change.