Privacy policy
Last updated: 2026-05-13
This page describes what Ploo collects, why, and how we use it. Plain English first — the lawyer-reviewed version will replace this verbatim before public launch.
What we collect
- Account info — email, display name, optional date of birth (used only to clamp children's accounts under COPPA). Stored encrypted at rest.
- Gameplay — scores you submit, achievements you unlock, games you start. Used to power leaderboards and your profile.
- Device + browser — IP address, user-agent, screen size. Used for spam protection and ad-frequency capping.
- Cookies — a single httpOnly session cookie so you stay signed in, plus a consent cookie that remembers your cookie-banner choices.
What we don't collect
- Your contacts, location, microphone, or camera.
- Anything from children's accounts beyond what's strictly needed to run the site. No personalised ads, no behavioural profiling.
Cookies and consent
We use a Consent Management Platform (CMP) to ask you which cookies you allow. The default is the strictest setting (only strictly-necessary cookies) until you choose otherwise. You can change your choices any time via the "Manage cookies" link in the footer.
Third parties
- Aniview — serves the video ads between games. Receives only your IP, user-agent, and consent state.
- Google Analytics 4 — pageview + event analytics. Anonymised when you decline analytics cookies.
- Google OAuth — if you choose "Continue with Google", we receive only your email, name, and a stable user id from Google.
Children's privacy (COPPA)
Accounts whose date of birth indicates the user is under 13 are tagged as COPPA-protected. Those accounts never see personalised ads, are excluded from any cross-site profiling, and only retain the minimum data necessary to run the games.
Your rights
You can request a copy of everything we hold about you, or ask us to delete your account, by emailing hello@ploonow.com. We respond within 30 days.
Retention
Scores and achievements are kept indefinitely (they're the point of the leaderboard). Raw event logs are kept for 90 days. Account data is deleted on request.