Privacy Policy — POOL • ALISOPLAY
ALISOPLAY ("we", "us", or "our") operates the mobile game POOL — ALISOPLAY (package: com.alisoplay.pool). This Privacy Policy explains our commitment to transparency regarding the collection, processing, and protection of your data when playing our 8-ball billiards title or using ALISOPLAY ID services.
1. Information We Collect and Process
We collect only the minimal data required to provide fair, reliable multiplayer gameplay, progression tracking, and secure account management:
A. Account & Authentication (ALISOPLAY ID):
• Email address and display nickname when creating an account.
• One-way salted password hashes (Bcrypt/Scrypt). We never see or store plaintext passwords.
• Cryptographically verified provider subject identifiers (Google Subject ID or Facebook User ID) when using third-party login. We never access your Google or Facebook passwords.
B. Game Progress & Virtual Inventory:
• Virtual Coins, Game $, XP points, player level (LV 1–500), and rank tier badges.
• Unlocked cues, stat upgrades (force, aim, spin), and victory box inventory.
• 15 World Tour city unlocked statuses and verified match records for reward idempotency.
C. Social & Friendly Match Data:
• 5-character public Player Code (e.g. POOL-XXXXX) for friend invitations.
• In-game friend lists and private match participation.
D. Local Guest Mode:
• When playing as a Guest without signing in, all progress is kept strictly on your local device storage. Guest data is never transmitted to our servers until you choose to link or create an ALISOPLAY ID.
2. What We Explicitly Do Not Collect or Sell
• We do not embed third-party advertising tracking SDKs or share advertising IDs.
• POOL is strictly an entertainment game: Coins and Game $ have zero cash value, and real-money gambling or cash redemption is prohibited.
• We never sell, lease, or monetize your personal data with data brokers.
• We do not track your browsing or activity outside of the ALISOPLAY platform.
3. Third-Party Service Providers
• Google Identity & Firebase Authentication: Used exclusively to verify RS256 Google ID tokens.
• Meta Graph API: Used exclusively to verify Facebook OAuth access tokens server-side.
• Google Play Billing: For optional in-app digital items processed through standard Google Play channels.
4. Data Security and Retention
• All communications use industry-standard HTTPS/TLS encryption.
• Session tokens are stored securely on-device using Android secure preferences.
• We retain your cloud gameplay data as long as your account remains active. You may request permanent deletion at any time.
5. Children’s Privacy
POOL — ALISOPLAY is not directed to children under 13 (or applicable local age of consent). We do not knowingly collect personal data from children under 13. If we discover that a child has provided us with personal information, we immediately purge it from our servers.
6. User Rights and Data Deletion
You retain full rights to access, update, export, or permanently delete your personal information:
• In-App Guidance: Open POOL > Settings > Legal & Support > Delete Account & Data to review deletion scopes or reset local guest data.
• Verified Web Deletion Request: Visit https://alisoplay.com/apps/pool/data-deletion.
• Official Privacy Contact: Reach our data protection team directly at alisoplay.apps@gmail.com.
Need to Delete Your Data or Contact Privacy Team?
We provide transparent self-service and web-based options to exercise your data deletion and privacy rights at any time without charge.