Privacy policy
Last updated 4 October 2026
Pipling is a game, not a tracker. This policy explains what data Pointerflow LLC ("we") handle when you use the Pipling browser extension and this website, and the choices you have.
What we never collect
- Your browsing history: no URLs, tabs, bookmarks or search terms.
- The content of web pages, forms or anything you type outside the game.
The extension requests only the storage, alarms, notifications and side panel permissions (plus optional Google sign-in, when switched on). It does not request the tabs or history permissions, does not use content scripts, does not load remote code and only contacts the Pipling servers.
Playing as a guest
You can play without an account. A guest save, your progress and your onboarding answers stay in your browser's extension storage and are not sent to us. After a number of finished arcade games (currently 20, and we can change this without a new release) Pipling asks you to create a free account before you start more arcade games. Care, expeditions and the shop keep working without one, and you can always export your save as a file. When you sign in, your local save is uploaded and merged into your account so it can sync across your browsers.
What we store
| Data | Why | Kept |
|---|---|---|
| Account email and sign-in method | To sign you in (Google or email magic link) and send receipts | Until you delete your account |
| Game save: pets, coins, gems, Questdex, streak, settings | Cloud save and sync between your browsers | Until deletion; 90 days after you uninstall |
| Purchases: item, amount, status, provider reference | Delivering what you bought, refunds, tax records | Anonymised ledger kept for 7 years |
| Friends: display names and Player IDs you add | Gifts and friend leaderboards | Until you remove them or delete your account |
| Support messages and optional diagnostics | To answer you; diagnostics are save version, recent sync events and extension version only | Until the ticket is closed plus a reasonable period |
| Uninstall survey answers (optional) | To improve Pipling. If you were signed in the answer is linked to your account so support can follow up; guest answers stay on your device unless you tick "also share anonymously", and then they carry no account link | Linked answers until you delete your account; anonymous answers aggregated |
| Anonymous analytics (optional, off by default) | Product events such as screens opened and games finished, tagged with a random install ID. Never your Player ID, email, page addresses or browsing data | Aggregated; stop any time by switching it off |
Analytics
Analytics are off unless you switch them on in the extension's Settings (or Account > Privacy). When on, events are sent to our analytics provider (PostHog) with a random install ID, with person profiles and IP-based location lookup disabled. We never attach page URLs, titles, tabs or history to an event.
The uninstall page
When you uninstall, Chrome opens a feedback page on this website. Its address carries the extension version, how many days you used Pipling and, only if you were signed in, an opaque one-way hash of your account ID (not your email or name). Answering is optional. Signed-in answers are linked to your account; guest answers are stored in this browser and only reach us if you choose to share them anonymously. Your cloud save is kept for 90 days after uninstall so you can reinstall and pick up where you left off.
Who processes it
Our backend runs on a self-hosted Appwrite instance. Payments are handled by our payment provider; card details never reach us. Email is sent through a transactional email provider. Like any web server, ours keeps short-lived technical logs (such as IP address and request path) for security and abuse prevention, and the contact and feedback forms are rate-limited by IP address. We do not sell personal data and we do not show ads.
Cookies
When you sign in on this website we set one essential, HttpOnly, Secure, SameSite=Lax session cookie. We do not use advertising or cross-site tracking cookies. The uninstall page may keep a note in your browser's local storage so it does not ask twice.
Your choices and rights
- Export: Account > Privacy > Download my data gives you everything as a JSON file.
- Delete: Account > Privacy > Delete account removes your save and personal data after a 30-day grace period. Sign in during that time to restore the account.
- Marketing email and leaderboards: switch them off at any time on the same page.
- Depending on where you live you may also have rights to access, correct, restrict or object to processing. Contact us to use them.
Children
Pipling is not directed at children under 13, and we do not knowingly collect their data.
Changes
If we change this policy in a meaningful way we will update the date above and, for material changes, tell you in the app.
Contact
Questions about privacy: use the contact form or email support@pipling.app.