Privacy policy

Last updated: 2026-05-13

This page describes what Ploo collects, why, and how we use it. Plain English first — the lawyer-reviewed version will replace this verbatim before public launch.

What we collect

Account info — email, display name, optional date of birth (used only to clamp children's accounts under COPPA). Stored encrypted at rest.
Gameplay — scores you submit, achievements you unlock, games you start. Used to power leaderboards and your profile.
Device + browser — IP address, user-agent, screen size. Used for spam protection and ad-frequency capping.
Cookies — a single httpOnly session cookie so you stay signed in, plus a consent cookie that remembers your cookie-banner choices.

What we don't collect

Your contacts, location, microphone, or camera.
Anything from children's accounts beyond what's strictly needed to run the site. No personalised ads, no behavioural profiling.

Cookies and consent

We use a Consent Management Platform (CMP) to ask you which cookies you allow. The default is the strictest setting (only strictly-necessary cookies) until you choose otherwise. You can change your choices any time via the "Manage cookies" link in the footer.

Third parties

Aniview — serves the video ads between games. Receives only your IP, user-agent, and consent state.
Google Analytics 4 — pageview + event analytics. Anonymised when you decline analytics cookies.
Google OAuth — if you choose "Continue with Google", we receive only your email, name, and a stable user id from Google.

Children's privacy (COPPA)

Accounts whose date of birth indicates the user is under 13 are tagged as COPPA-protected. Those accounts never see personalised ads, are excluded from any cross-site profiling, and only retain the minimum data necessary to run the games.

Your rights

Delete your account in the app. Signed in on the web or in the Ploo app, open your profile menu (tap your avatar) and choose Delete account, or go to your profile → Edit profile → Delete account. After you confirm, your account is deleted immediately and you're signed out on every device.

Deleting removes your profile, handle, photo, email, sign-in links (including Sign in with Apple, whose tokens we revoke with Apple), wallet and Plus entitlement, favourites, likes, follows, achievements, progress, comments, notifications and push tokens, and takes down the Pops and Worlds you created. Records other players rely on — past scores, match and tournament results — are kept with your name and identifiers removed. Purchase receipts are kept without your name or email where the law requires us to keep financial records. Deleting your account doesn't cancel an App Store subscription — cancel it in your Apple ID settings.

You can also request a copy of everything we hold about you, or ask us to delete your account, by emailing hello@ploonow.com. We respond within 30 days.

Retention

Scores and achievements are kept for as long as your account exists (they're the point of the leaderboard); when you delete your account they're removed or anonymised as described above. Raw event logs are kept for 90 days.