PRIVACY POLICY

This policy explains how Pablo ("we", "us") handles personal data when you use the game at pablogame.net or in our iOS and Android apps (together, the "Service"). We've tried to write it in plain language rather than legal boilerplate.

1. WHO WE ARE

Pablo is an independently developed game. For any privacy question, data access request, or deletion request, use the contact form and select "Privacy / Data Request" — it reaches us directly.

2. WHAT WE COLLECT

If you create an account

• Email address — used to identify your account, let you sign in, and reset your password.
• Account identifier — a unique ID assigned by our authentication provider.
• Display name — either randomly generated for you or chosen by you. This is visible to other players and on the public leaderboard.
• Sign-in method — whether you used email and password, Google, or Apple.

If you sign in with Google or with Apple, we receive an email address and a unique identifier from that provider. We do not receive your password. If you use Sign in with Apple and choose Apple's private relay option, we only ever see the relay address, not your real one.

Game data

• Progress and economy — your chip balance, card packs and collectibles you own, equipped cosmetics, and whether you have an active Pro subscription.
• Statistics — games played and won, in Arcade and online modes.
• Multiplayer state — while you're in an online game, the room you're in, your seat, your connection status, and the game's state. Game rooms and their contents are deleted after the game ends.
• Leaderboard entry — your display name and win counts, which are publicly readable by design.
• Referrals — if you arrive via another player's invite link, we record which account referred you so the referral can be credited.

If you play as a guest

Guest play does not require an email address or an account. Guest progress is stored locally in your browser and is not associated with any identity we hold.

If you contact us

The contact form collects the name, email address and message you provide, so we can read your message and reply to it. We keep correspondence only as long as needed to resolve what you wrote in about.

If you make a purchase

We never see or store your card details. Payments on the website are processed by Stripe; purchases in our iOS and Android apps are processed by Apple and Google respectively. We receive only a confirmation that a purchase succeeded and a transaction identifier, which we record so the same purchase can't be credited twice.

Usage analytics

We use Google Analytics to understand how the Service is used in aggregate — which screens people reach, how often games are started and finished, and whether features work. These events are tied to a random analytics identifier, not to your email address or your account, and we use them to improve the game rather than to profile individuals.

You can opt out entirely with the Google Analytics Opt-out Add-on, and most ad and tracking blockers stop these events as well — the game is built to work normally when they are blocked.

Collected automatically

• Technical data — IP address, browser and device type, and timestamps, as generated by our hosting and infrastructure providers in the normal course of serving the Service and protecting it from abuse.
• Local storage — we store small amounts of data in your browser for settings, your current game session, and any pending invite or referral code. This is not transmitted to us except where needed to run the game.

3. WHY WE COLLECT IT

We use the data above only for these purposes:

• To run the game — authenticating you, saving your progress, matching you with other players, and running multiplayer games.
• To keep it fair and working — preventing cheating and abuse, diagnosing bugs, and keeping the Service secure and available.
• To handle purchases — verifying transactions and crediting what you bought.
• To support you — answering messages you send us.
• To fund the game — showing advertising to players who aren't Pro subscribers.

Where the law requires a legal basis (for example under the UK and EU GDPR), we rely on performance of a contract for running your account and the game, legitimate interests for security, abuse prevention and improving the Service, consent for personalised advertising where consent is required, and legal obligation where we must retain records.

4. ADVERTISING AND COOKIES

We show advertising through Google AdSense to players who don't have a Pro subscription. Some specifics you're entitled to know:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our Service and other sites on the internet.
• You can opt out of personalised advertising by visiting Google Ads Settings.
• You can opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info/choices or youronlinechoices.com.
• Third-party vendors we don't control may also place cookies through the ads they serve.

We also use essential storage that isn't advertising-related — keeping you signed in, remembering your settings, and holding your current game session. The Service will not work correctly without these.

Subscribing to Pablo Pro removes ads entirely, and with them the advertising cookies those ads set.

5. WHO WE SHARE DATA WITH

We do not sell your personal data. We share it only with service providers who help us run the Service, each handling it under their own terms:

We may also disclose data if we're legally required to, or where it's necessary to protect our rights, our players, or the security of the Service.

Other players can see your display name, your seat at the table, and your public leaderboard statistics. They cannot see your email address.

6. WHERE DATA IS STORED

Our infrastructure runs on Google Cloud, and data is processed and stored on servers in the United States. If you're in the UK, the EEA, or elsewhere outside the US, this means your data is transferred internationally. These transfers are covered by the safeguards our providers maintain, including standard contractual clauses where applicable.

7. HOW LONG WE KEEP IT

• Account and progress data — for as long as your account exists.
• Multiplayer game rooms — deleted after the game finishes.
• Purchase records — retained as long as needed for accounting, tax and fraud-prevention obligations.
• Contact messages — kept only as long as needed to resolve your enquiry.
• Guest data — held only in your browser; clearing your browser data erases it.

8. YOUR RIGHTS

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct anything inaccurate
• Delete your account and associated data
• Export your data in a portable form
• Object to or restrict certain processing
• Withdraw consent where we relied on it
• Complain to your local data protection authority

To exercise any of these, use the contact form from the email address on your account and select "Privacy / Data Request". We'll respond within 30 days.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we won't discriminate against you for exercising your rights.

Deleting your account

Request deletion through the contact form and we'll remove your account, your progress, and your leaderboard entry. Note that deletion is permanent: chips, purchases and collectibles cannot be restored afterwards, and purchases are not refunded on deletion.

9. CHILDREN

Pablo is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it. Depending on your country, a higher minimum age may apply to consent for data processing.

10. SECURITY

We use industry-standard measures to protect your data, including encrypted connections, authentication handled by Google Firebase, and server-side rules restricting what any client can read or write. Multiplayer game logic runs on our servers specifically so that private game information — like other players' cards — is never sent to your device in the first place.

No online service can promise perfect security, but we take this seriously and design accordingly.

11. CHANGES TO THIS POLICY

We may update this policy as the game develops. The "last updated" date at the top will always reflect the current version, and we'll give prominent notice in the game of any change that materially affects your rights.

12. CONTACT

Questions about this policy, or about your data, go through the contact form with "Privacy / Data Request" selected. A person reads every message.