PPong — Privacy Policy

Last updated: 2 October 2026

PPong is a ping-pong game published by Niko Games (package com.nikogames.ppong). This policy explains what the game collects, why, and what your choices are. The game creates an account for you automatically so your progress is saved; signing in with Google is optional. There are no in-app purchases. The game is free and shows ads.

What we collect

• A game account. The first time you open the game it creates an anonymous account: a random identifier with no name or email attached. Against it our server stores your display name and portrait, your coins, level, items, daily streak and quests, your match counts, and your leaderboard scores. Your display name, portrait, equipped frame, level, player code (the #TAG on your profile) and scores are shown to other players on the leaderboard. This is kept in our database at Supabase (see below).
• Your Google account, only if you choose Sign in with Google. Signing in lets you keep your progress on another device. We receive your Google email address and account identifier and keep them in Supabase's sign-in records, linked to your game account. Google may also pass on the name and profile picture of that Google account as part of signing in; the game does not use or show them. We do not receive your password or your contacts.
• The display name and portrait you choose. You type them yourself before a match. Please do not use your real name — anything you type is shown to the other players in the room and on the leaderboard.
• Gameplay and device data for online matches. To run a multiplayer match our server processes your inputs, scores and connection data. As with any internet service, your IP address is visible to the server while you are connected; it is used to deliver the match and is not stored as a profile.
• Usage and crash analytics. We use PostHog to understand how the game is played and to catch errors. It records events such as screens opened and matches started, a random device identifier and, once you have a game account (a guest one included), that account's identifier, so one player's events on two devices count as one player. It also records the display name and portrait you chose, plus standard technical data (device type, operating system, browser, approximate region derived from IP, and referring page). For a guest account it holds nothing that identifies you beyond the display name you chose. For an account signed in with Google, we could match the account identifier to the Google email address kept in Supabase's sign-in records; we do not send that email to PostHog ourselves. When you sign out or delete your account, the analytics identity on that device is reset, so what happens next is not joined to the account you left.
• Settings stored on your own device. Your chosen name, portrait, audio and graphics preferences, and the sign-in session that identifies your game account, are kept in local storage on your device so the game remembers them. Clearing the app's data removes them from your device; a game account you have not linked to Google then cannot be reopened, so delete it first if you want it gone.
• Advertising data. On the web and in the Android app, ads are served by Google AdSense between matches and on the menu screens — never during a match. Google and its partners may use cookies and device identifiers to show and measure ads, and approximate location derived from your IP address. Where the law requires it (for example in the EEA, UK and Switzerland) you are asked for consent first; if you decline, you still see ads, but they are not personalised. You can change your choice at any time from Settings → AD PRIVACY in the game.

We do not collect your real name, phone number, contacts, photos, precise location, microphone or camera data, or payment information. We hold an email address only if you choose to sign in with Google, as described above.

Ads and cookies

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

You can opt out of personalised advertising by visiting Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info or, in the EU and UK, at www.youronlinechoices.eu. Players in the EEA, UK and Switzerland can also change their choice at any time from Settings → AD PRIVACY in the game.

Why we use it

To run online matches, to keep your account, coins, items and progress, to rank players on the leaderboard and pay its weekly prizes, to remember your preferences, to diagnose crashes, to improve the game, and to show ads that pay for it. We do not sell your data.

Who we share it with

Only the service providers that run the game and pay for it:

• Google AdSense — advertising. How Google uses data from sites and apps that show its ads: policies.google.com/technologies/partner-sites.
• Supabase — sign-in and the database that holds game accounts.
• PostHog — product analytics and error tracking.
• Cloudflare — hosting and delivery of the game (Pages), and storage of the database backups (R2).
• Railway — hosting of the multiplayer game server.

We may also disclose information where the law requires it.

How long we keep it

The live data of a match (inputs and positions) lives only for the duration of the match and is discarded when the room closes. What the match earned you — coins, level, match counts and leaderboard points — is kept against your game account until you delete the account (see below). We back up the database every night; backups are kept with Cloudflare for up to 14 days and then deleted, so a deleted account can remain in a backup for that long. Analytics events are retained by PostHog for up to 12 months. Preferences stay on your device until you clear them.

Children

PPong is suitable for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.

Security

All traffic between the game and our servers is encrypted in transit (HTTPS/WSS). No method of transmission or storage is completely secure, but we take reasonable measures to protect the little data we handle.

Your rights

You can clear the app's storage at any time to erase your saved name, portrait and preferences, and you can delete your game account yourself (see below). Depending on where you live (for example under GDPR or the CCPA) you may have the right to access, correct, or delete the data we hold, or to object to its processing. Write to us at the address below and we will act on your request.

Deleting your account

Open your profile from the title screen and choose DELETE ACCOUNT. This permanently removes your game account and everything stored against it — coins, items, level, streak and leaderboard scores — and, if you signed in with Google, your email address and the link to your Google account. If the game cannot reach the server, or you no longer have the device, you can ask us to delete it by email at the address below; include the code shown on your profile (for example #7K2FQ).

Copies in our nightly backups are not edited: they are deleted when they expire, within 14 days, so a deleted account can remain in a backup for that long. A backup is used only to recover the game after a disaster.

Changes

If this policy changes, the revised version will be posted at this address with a new "last updated" date.

Contact

Questions or requests: [email protected]