Privacy policy

1. Who is responsible

Vladyslav Lishafai, trading as OTC Soft, operates PimPoPom from Plaza Victoria 17/4B, Malaga, 29012, Spain. Tax number: ESZ4073946F. Contact us about privacy at info@otcsoft.com.

This policy covers the PimPoPom iPhone app and its game services. Apple and Google also process information under their own policies when you use their sign-in, purchase, Game Center or advertising services. The general OTC Soft consulting website and its enquiry forms are outside the scope of this game policy. These legal/support pages contain no analytics scripts or advertising; hosting may process ordinary access and security logs.

2. Playing with and without an account

You can play local Arcade and Zen without creating a PimPoPom account. Online Multiplayer, ranked results, saved progression, purchases and account-owned items require sign-in where shown in the app. Local Zen sessions do not create ranked results or durable game progression.

Device settings and preferences, such as sound, haptics and appearance, may be saved on your device. Network connections and any enabled advertising services can still process technical information when you play without an account.

3. Information we process

We do not ask for your password, payment card number, bank details, contacts, photos, microphone access or precise GPS location to play. Apple processes App Store payments. Sign-in proofs are validated when exchanged; the game account database is designed not to retain raw Apple/Google subjects, sign-in tokens, provider display names or provider email addresses. If you email us, the email address you use is part of that correspondence.

Google’s sign-in service can also process profile contact information, account/device identifiers, approximate location and usage information for authentication and related services. Provider processing can differ from the data retained in PimPoPom’s own database. Read Google’s Privacy Policy and Apple’s Privacy Policy for their practices.

4. What other people can see

Your chosen public name and eligible results can appear on leaderboards and profile views. In Multiplayer, other players can see information necessary for the room and match, including your public name, color, readiness, score and lives. Public rooms can be discoverable; a private room limits discovery but other participants still receive the information needed to play. Avoid putting your real name or contact details in your public name.

If you link Game Center and use its publication features, eligible information may be sent to Apple for Game Center display. PimPoPom’s backend controls publication of supported scores and achievements. Removing a link stops future publication through that link; it does not itself remove information already held by Apple. Online Multiplayer results are separate from Game Center publication.

5. Advertising and your choices

PimPoPom includes Google AdMob and Google’s User Messaging Platform (UMP). Where advertising is enabled, the app checks the applicable consent status and your ad-free entitlement before requesting ads. You can reopen Settings → Privacy → Privacy choices when that control is available in the app. Declining optional consent does not block core gameplay or purchases.

Where an age range is available, it determines the advertising protections. Ages 13–15 receive Google’s more protective child treatment without an advertising-consent request. Ages 16–17 receive teen treatment with applicable Google consent prompts. Both treatments disable personalized advertising and remarketing, and the app does not request Apple tracking permission for these age groups. If Apple supplies a broader range, the youngest possible age determines the protections. Skipping the optional age question leaves the age unknown and uses non-personalized or limited advertising without requesting Apple tracking permission.

PimPoPom uses 16 as a conservative product threshold for this advertising flow. This is not a universal legal consent age. Applicable local requirements and any necessary parent or guardian authorization still apply. Age treatment does not mean that advertising services process no information or that consent is unnecessary for every type of processing.

Starting with version 1.02, build 34, adults can permit personalized advertising and advertising measurement. Where Google’s regulatory consent is required, the app collects that choice first. It requests Apple’s App Tracking Transparency (ATT) permission only for adults whose applicable consent permits personalization. Tracking-enabled advertising is permitted only after Apple authorizes tracking. Refusing or restricting ATT keeps ads non-personalized, subject to Google’s applicable consent rules. Earlier builds do not request ATT and use non-personalized advertising.

When personalization is not permitted, the app disables publisher personalization and the publisher first-party identifier and requests non-personalized ads. These controls do not mean that Google processes no data. Its SDK can process IP addresses, approximate location inferred from an IP address, app or device identifiers, ad impressions and interactions, product interactions, crash information and performance data for advertising, measurement, security and service operation. For consenting adults with ATT authorization, the advertising identifier (IDFA) may be used by advertising partners to link information across other companies’ apps and websites for targeted advertising and advertising measurement.

Age and consent choices stay with the app installation; signing in or out of a PimPoPom profile does not clear them. Google refreshes applicable consent status on launch and can request consent again when required. You can review Google choices through the available in-app Privacy choices control and change Apple tracking permission in iOS Settings → Privacy & Security → Tracking. Refusing optional advertising permission does not prevent local play or purchases.

Read how Google uses information from apps that use its services and Google’s Privacy Policy. Apple privacy controls may also be available in iOS Settings.

6. Why we process information

For people protected by European data protection law, we rely on:

• Performance of the service contract for requested account features, online play, saved progression, purchases and support needed to provide them.
• Legitimate interests in preventing cheating and fraud, protecting players and infrastructure, diagnosing faults and handling ordinary enquiries. We consider your interests and rights when relying on this basis.
• Legal obligations where records are required for applicable tax, accounting, consumer protection or regulatory duties.
• Consent for optional processing that requires it, including relevant advertising or device-storage choices. You may withdraw consent for future processing through the available privacy controls or by contacting us; withdrawal does not affect processing that was lawful before withdrawal.

Account information is needed for account-based features. If you do not provide it, you can still use the local modes described above. We use automated game rules and integrity checks to calculate results and decide whether they qualify for rankings or rewards. If a result or account restriction appears incorrect, contact support for review.

7. Who receives information and international processing

We use Hostinger for website/backend hosting and the email domain, and Railway for online Multiplayer hosting. Apple provides sign-in, StoreKit and optional Game Center; Google provides sign-in and enabled consent/advertising services. Hosting and communications providers process information needed to deliver those services. Advertising partners applicable to your choices are identified in the consent interface when it is shown. Other players receive the public and match information described above. We may disclose information where legally required or necessary to establish, exercise or defend legal claims.

Our Multiplayer service uses Railway’s Amsterdam region. Our providers also operate internationally, including in the United States, so a European game-server location does not mean that all processing stays in Europe. Hostinger and Railway publish data-processing terms that include safeguards for relevant international transfers, including the European Commission’s Standard Contractual Clauses or an applicable adequacy framework. See Hostinger’s data processing addendum and Railway’s data processing addendum. Apple and Google describe their own international processing in their linked privacy policies. You can contact us for information about the safeguards relevant to your data or to request a copy, subject to necessary redactions for confidential information.

8. How long information is kept

We determine retention by the purpose of each record. Account and progression information is generally kept while you maintain the account and need the associated features. Game evidence and operational/security records are retained for as long as needed to deliver and reconcile results, investigate faults or abuse, and handle disputes. Support correspondence is retained while the enquiry is open and for any further period necessary to document its resolution or deal with a related legal claim. Purchase and settlement evidence may need to be retained after account deletion to meet applicable legal duties, prevent duplicate credit and handle later Apple refunds or reversals. Relevant factors include whether a transaction is settled, an investigation or dispute remains open, and an applicable statutory or claims period has ended. Backup and queued-service copies may remain beyond removal from the live account while they are required for recovery or reconciliation. The same privacy protections continue to apply to retained personal data. Contact us for information about a particular record or an erasure request.

9. Deleting your account

Open Profile → Delete Account, review the consequences, enter DELETE MY ACCOUNT, and follow the recent Apple or Google sign-in confirmation. Detailed steps are on the support page. Removing the app from your iPhone does not delete your server account.

The in-app deletion process removes your live PimPoPom identity, public name, ordinary account/profile state and active sessions. It also requests revocation of linked Apple authorization. Some service records can require separate reconciliation or retention as described above; contact us if information remains visible after deletion or you need help completing a broader erasure request. Limited purchase, refund and allocation evidence is detached from the live account and kept under a protected pseudonym when needed for duplicate prevention and settlement. Pseudonymized records are still protected data; they are not used to recreate your deleted account. Your Apple Account, Google Account and records independently held by those providers are not deleted by this action.

10. Your rights and complaints

Depending on the law that applies to you, you may request access, correction, erasure, restriction, objection or a portable copy of your information. Contact info@otcsoft.com with “PimPoPom privacy” in the subject. We may ask for proportionate information to verify ownership. Do not email passwords, bank information or a full identity document unless we have explained why a secure verification step is necessary.

For requests under the GDPR, we normally respond within one month. If the law permits more time for a complex request, we will explain the extension within that first month. You may complain to your local supervisory authority or Spain’s Agencia Española de Protección de Datos (AEPD).

11. Children and families

PimPoPom is intended for players aged 13 and over. It is not intended for children under 13. If you believe a child under 13 has provided personal information through the game, please contact info@otcsoft.com so we can review and take the steps required by law.

On supported iOS versions, PimPoPom first checks Apple’s eligibility for regional age features. When eligible, it requests an age range through Apple’s Declared Age Range API. Apple may display its own sharing or account controls. The app receives a range, not a birthday or identity document. Apple-supplied restrictions are read-only in the game and cannot be replaced by a manual answer; incorrect Apple information must be corrected through Apple’s account or family controls. If required Apple information is unavailable, the app asks you to retry.

When Apple’s regional check does not require a range, or on an older supported iOS version, a first-use question offers Under 13 / 13–15 / 16–17 / 18+ / Skip. No date of birth or document is requested. A known under-13 range prevents access; Skip is not an adult declaration. The choice is saved on the device and is not sent to the PimPoPom game account. Google receives corresponding age-treatment signals rather than a birthday. A manual choice is self-declared, not verified proof of age. Contact support if you selected a range incorrectly; the game does not provide a manual override of an Apple restriction.

The App Store age rating describes content suitability; it does not itself establish that every child can give valid consent or enter a purchase contract. Where a child cannot legally consent to particular processing or enter a purchase contract, the necessary parent or guardian authorization is required. Parents and guardians can contact info@otcsoft.com if a child has supplied information without required authorization; we will review the request and remove information or take other steps where required by applicable law. We do not ask for a child’s date of birth as part of ordinary account sign-in.

12. Changes and contact

When our practices change, we will update this policy and its effective date, and provide additional notice when required. Questions can be sent to info@otcsoft.com or to the postal address above.