Privacy Policy
Last updated: September 25, 2026
What we collect
- Account data: a display name; optionally a username (email) and a hashed password if you register. Guests get a random account id.
- Gameplay data: match results, card collection, trophies/ELO, guild membership — the stuff the game needs to function.
- Reports and blocks: if you report or block another player, we keep the report (who you reported, the reason and any note you wrote) to moderate the game, and your block list to keep that player away from you.
- Purchase data: if you buy something on plops.io, Stripe processes your payment; in the iOS app, Apple does. We never see or store your card number or your Apple ID. We store the product bought, the amount and currency, and the store's transaction id for support, restoring purchases and fraud prevention.
- Technical basics: server logs with IP addresses (kept briefly for abuse prevention), and a session token stored on your device so you stay signed in.
- Diagnostics: when something goes wrong (an error, a loading screen that stalls, a graphics reset) and after each battle (frame rate and similar), the game reports it along with basic device details — app or browser version, device type, screen size, memory, processor count and language. Reports are linked to your account when you're signed in, keep your IP address only as a short one-way hash, and are deleted after 30 days.
- Country: when you open Rankings, we record the country your connection comes from (as reported by our network provider, Cloudflare) and show it as a flag next to your name on the leaderboard.
- Analytics: Google Analytics counts visits — which pages get opened, what linked to them, and roughly which country you're in. It sets a first-party cookie called _ga so a returning visit isn't counted twice. In the UK, EU and Switzerland that cookie is not written until you say yes, and we remember your answer; anywhere else it starts on and you can switch it off below. That's the only thing on the site that isn't ours. Google's advertising features are disabled on every page: no ad profiles, no advertising trackers, no selling of data — ever.
How it's used
To run matches, save your progress, deliver purchases, prevent cheating and abuse, and answer support requests. That's it.
Sharing
Account email (password-reset and sign-in codes): Amazon Web Services' email service, which receives your email address and display name. Payment processing: Stripe (and the relevant app store if you buy on Steam, iOS, or Android). Analytics: Google, which receives the page you opened, the page that referred you, and your IP address. Hosting: our game servers in the EU/US. We share data only when required to provide the service or by law.
In the iOS and Android apps
The apps collect the same account, gameplay, diagnostics and country data described above. Google Analytics does not run in the apps, nothing is sold in them, and there is no advertising or tracking across other companies' apps and websites.
Your choices
Change your analytics cookie choice — or just use an ad blocker, or Google's opt-out add-on. Nothing in the game breaks without the tag. You can play as a guest with no email.
Deleting your account
You can delete your account yourself at any time: in the game, open Settings → Account → Delete account — on plops.io and in the apps alike. It takes effect immediately and signs out every device. Your name, username or email, password and linked sign-ins are removed, and you disappear from the rankings, guilds, rivals lists and the public battle feed. Records of purchases are kept, anonymized, because tax law requires it. What deleting removes and what it keeps.
Can't sign in any more? Email [email protected] from the account's email, or tell us its display name, and we delete it within 30 days.
Children
The game is intended for players 13 and older. We do not knowingly collect personal information from children under 13; contact us for removal.