Pool Max Privacy Policy

Effective date: October 10, 2026

This policy describes information processed by Pixelwork when you use Pool Max: Play Billiards (Pool Max), including the Android app com.poolmax.game and connected game services. Contact: develioglu306@gmail.com.

Need to remove your account? Request deletion of your Pool Max account and associated data, even if you no longer have the app.

1. Account and sign-in information

You can use a guest account, an email/password account, or Google sign-in. Google Firebase Authentication processes your account identifier, chosen sign-in method, credentials or authentication tokens and, where supplied, email address and profile information. Passwords are sent to Firebase through encrypted connections; they are not stored in our game database or included in our usage events.

For Google sign-in, the game may use your display name and profile picture. We receive authentication tokens, not your Google password. A guest account still has a persistent account identifier and is not the same as anonymous, unrecorded activity. The app stores session credentials locally so you can stay signed in.

2. Profile and game data

Our servers store your player identifier, player name, avatar selection or Google profile-picture URL, country code, level, experience, virtual coin/cash balances, owned and equipped cues, rewards, statistics and game progress. We record online match participants, table, entry/prize amounts, result, timestamps and reasons a match ended. Virtual balances are gameplay data, not bank accounts.

Other players may see your public player name, avatar, country, level and game statistics in matchmaking, matches, profiles and leaderboards. We do not display your email address, passwords or authentication tokens to other players.

3. Usage information

For player safety we also store policy acceptance version/time, block preferences, and submitted reports containing the reporter and reported account IDs, reason, reported name/photo-reference snapshot, timestamps and moderation outcome. Reports are reviewed by authorized operators and are not published to other players. These records support abuse prevention and may be retained where necessary to investigate a safety issue.

Our own backend records session starts, sign-in method and verified login time, last-seen time, platform and game version. It also records match starts and finishes, table and mode (including practice, solo, bots or human opponents), outcome and timestamps. We use these records to understand daily participation, completed matches, service stability and game balance.

The current app does not send an event for every button tap, aim movement or physics frame. Pending lifecycle events may be stored locally and retried later; the local queue drops events older than approximately 30 days. This is a local retry limit, not a promise that server-side records are deleted after 30 days.

4. Network and technical information

Google and Cloudflare process technical request information, such as IP address, device/browser information and service logs, to operate and secure their services. Our backend may derive a country code from network information for player profiles; the app does not request GPS or precise-location permission. Online gameplay uses encrypted HTTPS and secure WebSocket connections.

The current Android app requests internet and vibration access. It does not request your contacts, camera, microphone, personal photos or precise location, and does not include an advertising SDK, advertising-ID permission or Firebase Analytics SDK. Our own lifecycle records described above are still collected.

5. Why we use information

6. Service providers and disclosure

These providers may process data internationally under their applicable safeguards and policies. We do not sell personal information. Public game-profile information is disclosed to other players as described above. Information may also be disclosed where required by law or necessary to protect players and the service.

7. Retention and deletion

Account and game data are kept while your account is used and as needed to operate the service, resolve support issues, prevent abuse and meet applicable obligations. Server usage and match records are not automatically erased when you uninstall the app. Local credentials and settings remain until cleared, replaced or removed with app data; logging out is not account deletion.

To request deletion of your account and associated profile, progress and identifiable usage records, use our account deletion page. We may first verify account ownership. Limited records may be retained when necessary for security, fraud prevention, dispute resolution or legal obligations; any applicable exception will be explained when handling your request. Records concerning other players may be de-identified rather than removing their history.

8. Your choices and rights

You can choose guest sign-in instead of providing an email or Google profile, change supported profile preferences, log out, and request access, correction or deletion through our contact address. A guest still creates an identifiable game account. Rights depend on applicable law. Do not send passwords, verification codes or authentication tokens in a support email.

9. Security and children’s privacy

We use encrypted connections and server-side authentication to protect account and game data. No system is completely secure. If you believe a child has supplied personal information without appropriate authorization, contact us so we can investigate and address the request.

10. Changes and contact

We will update this page and its effective date when the game or its data practices change. For privacy questions and rights requests, email develioglu306@gmail.com.