Plinzo (“the App”, “we”, “us”, or “our”) is an ad-supported, turn-based card-game service. This Privacy Policy explains what personal data we process, why we process it, how it is used and shared, how long it is retained, and the rights available to you.
1. Data Controller
The data controller responsible for the processing described in this Privacy Policy is:
Appcator
CVR: 31817412
Denmark
Email: privacy@appcator.com
2. Information We Process
The information processed depends on how you use Plinzo and which optional features you enable.
Account and profile information
When you create an account, play as a guest, or link a sign-in provider, we may process:
- A unique Plinzo account identifier and authentication identifier;
- Your display name, optional country flag, and optional profile picture;
- Your email address, where supplied by you or an authentication provider;
- Your authentication provider and account-linking status; and
- Your preferences, blocked-player list, and other account settings.
Authentication may be provided through Firebase and, depending on the options available in your version of the App, Apple, Google, Facebook, or email and password. Plinzo does not receive your password from Apple, Google, or Facebook.
Games and social features
To operate games and social features, we may process game invitations, lobby participation, game state and actions, game and round history, scores, Crown Points, friendships and friend requests, reactions, reports, blocks, and moderation records.
Other players can see the profile and gameplay information needed to share a lobby or game with you, including your display name, profile picture where available, country flag, game status, scores, and game actions.
Profile pictures, camera, and photo library
You may optionally take a profile picture or select one using Apple’s system photo picker. Plinzo receives only the image you choose; the system photo picker does not give Plinzo general access to your photo library. Camera access is requested only when you choose to take a picture.
The selected image is cropped, resized, and compressed on your device before upload and is then stored with your Plinzo profile. Profile pictures are visible to other players where your profile appears. If you do not upload a picture, Plinzo displays its standard avatar. Do not upload an image you do not have the right to use.
Notifications
If you enable notifications, we may process a device installation identifier, push-notification token, device platform, language and time-zone information, notification preferences, and the game or social event needed to deliver and route a notification. You can change notification categories in Plinzo and disable notification permission in your device settings.
Advertising information
Plinzo may display banner and interstitial advertisements provided through Google AdMob. Depending on your region, settings, consent choices, and the type of advertisement served, advertising providers may process information such as:
- Advertising, device, or installation identifiers;
- IP address and approximate location inferred from it;
- Device, operating-system, and app information;
- Ad views, interactions, and diagnostic information; and
- Consent and privacy-choice signals.
Where required, Plinzo uses Google’s User Messaging Platform to request consent and provide applicable privacy choices before advertising data is used. Available choices depend on your region and device settings.
Analytics and technical information
We use Firebase Analytics to understand how Plinzo is used and to improve the App. Analytics data may include App interactions and events, game type and general game context, app version, device type, operating-system version, language, general geographic information, installation identifiers, authentication state, notification-permission state, and other technical usage information.
We do not intentionally include card hands, authentication credentials, email addresses, push tokens, profile pictures, reports, or other free-text content in analytics events. Where consent is legally required for analytics processing, collection is governed by the applicable consent choices.
Website and support information
When you visit our website, the hosting provider may process technical request information such as your IP address, browser type, requested page, date and time, and security logs. If you contact us, we process your email address, message, and any information you choose to provide so we can answer and provide support. Please do not send passwords or login codes.
3. Purposes and Legal Bases
Where the General Data Protection Regulation (“GDPR”) applies, we rely on the following legal bases.
Performance of a contract
We process information necessary to create and manage your account, operate games, show profiles and game history, provide social and safety features, save your preferences, deliver notifications you request, and provide support.
Consent
We rely on consent where it is required for personalized advertising, advertising or analytics storage, certain analytics processing, and optional access to your camera, selected photos, or notifications. You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Legitimate interests
We may process limited information where necessary for our legitimate interests in maintaining and improving Plinzo, measuring feature performance, securing the service, preventing abuse and cheating, moderating user-generated profile content and reports, diagnosing technical problems, and protecting our users and legal rights. We consider whether these interests are overridden by your rights and interests.
Legal obligations
We may process or retain information when necessary to comply with applicable law, respond to lawful requests, resolve disputes, or establish, exercise, or defend legal claims.
4. Sharing and Service Providers
We share personal data only where needed to provide Plinzo, operate the features described above, protect the service, comply with law, or where you direct us to do so. Service providers may act as processors for us or as independent data controllers, depending on the service.
Providers used by Plinzo may include:
- Hosting and database providers — App backend, website, stored profiles, games, and related service data;
- Google Firebase Authentication — account authentication;
- Apple, Google, and Meta — sign-in services selected by the user;
- Firebase Cloud Messaging and Apple Push Notification service — push notifications;
- Firebase Analytics — usage analytics;
- Google AdMob and Google User Messaging Platform — advertising and privacy choices; and
- Email and support providers — communication and support requests.
For more information, see Google’s Privacy Policy, Firebase privacy and security information, Apple’s Privacy Policy, and Meta’s Privacy Policy.
5. International Data Transfers
Some service providers, including Google, Apple, and Meta, may process personal data outside Denmark or the European Economic Area, including in the United States.
Where required, international transfers are protected by an applicable legal transfer mechanism, such as an adequacy decision, participation in the EU–US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses together with any required supplementary safeguards. Information about a provider’s transfer arrangements is available in that provider’s privacy documentation.
6. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
In general:
- Account, profile, game, social, and preference information is retained while needed to provide your account and Plinzo’s features;
- Profile pictures are retained while attached to your account and are removed when you remove the picture or delete the account, subject to temporary backups;
- Push tokens are retained while valid and needed to provide notifications;
- Reports, moderation, security, and audit information may be retained for as long as needed to investigate abuse, enforce our terms, prevent repeated misuse, and protect the service and its users;
- Analytics and advertising information is retained according to our configured settings and the applicable provider’s retention practices;
- Support correspondence and technical logs are retained for as long as needed to resolve the matter and protect the service; and
- Backups and cached copies may remain for a limited period after deletion.
We may retain limited information for longer where required by law or necessary for dispute resolution, security, or legal claims.
7. Account and Data Deletion
You can request deletion of your account through the account settings in the App. If you cannot access the App, contact privacy@appcator.com from the email address connected to your account where possible. We may need to verify that the request relates to your account.
Subject to applicable legal exceptions, deleting your account deletes or anonymizes the personal data associated with it, including your uploaded profile picture. Some game, moderation, security, or audit information may be anonymized or retained where necessary to preserve shared game records, prevent abuse, resolve disputes, comply with law, or establish, exercise, or defend legal claims.
8. Your Privacy Rights
Depending on your location and the circumstances, you may have the right to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete data;
- Request deletion of your personal data;
- Request restriction of processing;
- Receive certain data in a portable format;
- Object to processing based on legitimate interests;
- Withdraw consent at any time; and
- Lodge a complaint with a data-protection authority.
To exercise your rights, contact privacy@appcator.com. We may request information necessary to confirm your identity. In Denmark, you may lodge a complaint with Datatilsynet.
9. Automated Decision-Making
We do not use your personal data to make decisions that produce legal or similarly significant effects through solely automated processing. Automated systems may be used for advertising selection, analytics, security, abuse prevention, and server-controlled game actions performed by bots.
10. Safety and Security
Display names and profile pictures are user-generated content. Plinzo may filter names and review reports to prevent abuse. You can report or block another player in the App. We may hide or remove inappropriate profile content or restrict accounts where reasonably necessary to protect players and enforce our terms.
We use reasonable technical and organisational measures designed to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration, and destruction. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Children’s Privacy
Plinzo is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. Where local law requires parental consent at a higher age, users must meet that requirement before providing personal data or using account and social features.
If you are a parent or guardian and believe a child has provided personal data in breach of these requirements, contact us. We will investigate and delete the information where required.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to Plinzo, our providers, legal requirements, or our data-processing practices. The current version will be available through the App or website, and the “Last updated” date will be changed. If an update materially affects your rights or how we use personal data, we will provide additional notice where reasonably possible or legally required.
13. Contact Us
Questions, suggestions, and privacy requests can be sent to:
Appcator
CVR: 31817412
Denmark
Email: privacy@appcator.com