Privacy Policy

Effective 1 November 2026 · Last updated 1 November 2026

The short version

• We collect what we need to run the game, keep your progress and show you to your friends.
• We do not show ads, we do not sell your data and we do not track you across other apps or websites.
• You can delete your account, and everything recorded under it, at any time from the app.

What we collect in the app

• Your account. Playing needs an account. We keep the identifier Apple, Google or Facebook gives us (or your email address if you sign in with an email code), the email address they share (with Sign in with Apple this can be a private relay address), your display name and, if you add one, your profile photo.
• Your games and progress. Scores, distances and times for every round, the games and modes you play, your streak, level, XP, rank, badges, journey progress and the outfit you chose for Pip.
• Friends and matches. Your friends list and invite code, friend requests, the players you block, your duels, live rooms and Arena matches and their results, and the preset quick-chat lines you send during a match.
• Purchases. Whether you have Pinpoint+, which plan, when it renews or ends, and items you buy. Payment itself is handled by Apple or Google; we never see your payment details.
• Notifications. A push token for your device if you allow notifications, and your notification settings.
• A random install id, created on your device the first time you open the app, so games played on that device can be moved onto your account.
• Usage and diagnostics. Which screens and features are used, linked to your account id but never to your name or email, and crash reports with device model, operating system and app version, so we can find bugs and improve the game.
• Player reports. If you report another player, we keep who you reported, the reason you chose and the optional note you wrote. Our admins review reports; the reported player is not told who reported them.
• Messages you send us, such as suggestions and bug reports from the app or emails to our support address.
• Server logs. Technical request data such as IP addresses, kept for a short time to run and protect the service.

The app never reads your device’s location.

What this website collects

The website sets no cookies and runs no analytics or advertising scripts. Our hosting provider records technical request data (such as IP address and browser) to deliver and protect the site. See the Cookie Policy.

Why we use it, and on what legal basis

• To provide the game you signed up for: scoring, progress, sync across devices, leaderboards, leagues, friends, duels, live rooms and Pinpoint+ (performance of our contract with you).
• To show you to other players. Your display name, photo, level, rank, badges and scores appear on leaderboards and your public profile; friends also see your streak, today’s score and your duel results with them (contract).
• To send you emails such as sign-in codes, account and subscription notices, and a weekly recap of your games, which you can ask us to stop at any time (contract and legitimate interest).
• To send push notifications you allowed on your device (consent, which you can withdraw in your device settings).
• To keep the app working and improve it with usage statistics and crash reports (legitimate interest).
• To review player reports, prevent abuse and keep leaderboards fair (legitimate interest).
• To meet legal obligations, such as accounting for purchases (legal obligation).

Who helps us

These providers process data on our behalf, under contracts that require them to protect it:

• Railway: hosting of our servers and database.
• Vercel: hosting of this website.
• RevenueCat: managing Pinpoint+ subscriptions bought through Apple and Google.
• PostHog (EU hosting): app usage statistics.
• Sentry: crash and error reports.
• Postmark: sending emails.
• Apple Push Notification service and Firebase Cloud Messaging: delivering notifications.
• Apple and Google: in-app purchases and app distribution.
• Mapbox: drawing the map. The Mapbox SDK may send anonymous usage and device data to Mapbox under the Mapbox privacy policy.
• Apple, Google and Facebook handle sign-in under their own privacy policies.

Some of these providers are based in or access data from outside the European Economic Area, mainly the United States. Where that happens, transfers rely on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep it

We keep your data while your account exists. When you delete your account, your account and every game recorded under it are deleted immediately. Crash reports and usage statistics expire on their own within 90 days, and server logs are kept for a short time. Reports about other players are kept while they are needed to review them and to deal with repeated abuse. Purchase records may be kept as long as accounting law requires.

Your rights

Under the GDPR you can ask to access, correct, export or delete your data, to restrict or object to how we use it, and to withdraw any consent you gave. You can delete your account at any time in the app under Profile → Settings → Delete account, or from the web: see Delete your account. For anything else, email hello@pinpointarcade.com; we answer within one month. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority where you live.

Children

Pinpoint Arcade is for players aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, email hello@pinpointarcade.com and we will delete it.

Changes

If we change this policy, we will update the date at the top and, for significant changes, tell you in the app or by email.

Contact

Tribus Technologies SRL (RO42291622), Bd. Unirii 59, 030167 Bucharest, Romania. Email: hello@pinpointarcade.com.