Privacy Policy

1. Who we are

PickleBash is operated by Automatica Labs, LLC, based in Texas, United States ("we," "us," or "our"). This Privacy Policy describes how we handle information when you visit picklebash.app, use our game or mobile app, or contact us. For questions or privacy requests, email poppy@picklebash.app.

2. Information we collect

• Account information: email address, username, account identifiers, sign-in credentials handled by our authentication provider, and account settings. Guest play can also create a persistent account identifier.
• Game and social information: player names and appearances, saved rosters, skills, progression, matches, scores, shot selections, game commands, invitations, friends, rivalries, shared content, and coaching reports.
• Device and usage information: browser or app type, operating system, app version, activity timestamps, identifiers, feature use, errors, and connection information such as IP addresses processed by our hosting and service providers.
• Notifications: device push tokens or browser notification subscriptions, notification preferences, and delivery or activity records when you enable notifications.
• Purchases, where available: products, purchase and transaction identifiers, payment status, refunds, and ownership records. Payment providers handle payment details; we do not receive your full payment-card number.
• Communications: information you include when contacting us or reporting a problem.

3. How we use information

We use this information to operate and secure the game; create and manage accounts; save progress and purchases; connect friends and process invitations; run matches and rivalries; provide coaching and reports; send requested service notifications; respond to support and privacy requests; prevent cheating, fraud, and abuse; understand performance and feature use; and meet legal obligations. We do not use gameplay as professional medical, fitness, or safety advice.

4. Voice and coaching features

If you choose voice controls, we request microphone access. Depending on the voice option and device, speech is processed on your device or by your browser’s speech service under that provider’s terms. Recognized shot text and relevant game context may be sent to our servers and service providers to interpret commands. Relevant gameplay information may also be sent to OpenAI to create coaching reports, strategy, and opponent responses. Saved reports and game records can remain associated with your account. Avoid including sensitive personal information in commands, player names, or other game content.

5. Local storage, analytics, and session recordings

We use browser or device storage to keep you signed in, remember settings, save local progress, and support analytics. We use PostHog to understand game activity, such as launches, invitations, matches, shots, and feature use, using account identifiers. Our product-event filters exclude emails, player names, passwords, free-form commands, report text, and secret invitation links. We may collect a sample of masked menu and navigation recordings to diagnose usability problems. Recording is configured to mask text and inputs and exclude gameplay canvas, microphone audio, and network request bodies. Providers can still process connection information when receiving requests. These legal pages do not load the game, analytics, or session recording scripts.

6. Your tracking and device choices

You can manage local storage through your browser and revoke microphone or notification access through browser or device settings. Clearing storage may remove local saves or sign you out and does not delete server records. Browser blocking tools may limit client analytics but do not stop server-side records needed to run games or our analysis of those records. PickleBash does not currently change its analytics behavior in response to a browser Do Not Track signal. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use advertising trackers. Contact us about privacy choices that apply in your location.

7. When we share information

• Other players and people you share with: usernames, player appearances, match results, and relevant social or game content are visible where the feature requires it. Shared game, rivalry, invitation, or player-card links may be viewed or forwarded by recipients. Public community content and published cards may be accessible beyond your friends.
• Service providers: we use Supabase for accounts, database, and storage; Railway for hosting; PostHog for product analytics and masked recordings; OpenAI for the game features described above; and Apple and browser push services for notifications. Where purchases are offered, Apple, RevenueCat, and Stripe process or verify purchases. Providers receive the information needed for their services and may have their own privacy notices for services they provide directly to you.
• Legal and safety purposes: we may disclose information to comply with applicable law or valid legal process, protect rights and safety, and investigate fraud or abuse.
• Business changes: information may be transferred as part of a merger, acquisition, financing, or sale of assets, subject to applicable privacy obligations.
• At your direction: when you ask us to share information or use a sharing feature.

8. Retention and security

We keep account, game, and social records while needed to provide the service, maintain game history, resolve disputes, and meet legal obligations. Many game records do not have an automatic expiration. Retention depends on the type of record and purpose; purchase, security, backup, and legal records may remain after an account is closed where necessary. We use access controls and other safeguards designed to protect information, but no service or transmission is completely secure.

9. Access, correction, and deletion

You can update supported account and player details in the app. To request permanent account deletion, open Profile and choose Delete account (or Delete guest account). Registered accounts confirm with their password; requests are processed within 30 days. This removes the account and associated game data, including hosted player cards. Reports and blocking records are used to investigate safety issues and prevent unwanted contact. To request access, correction, a copy of your data, or help with deletion, email poppy@picklebash.app, preferably from the email associated with your account. Do not send your password. We may ask for information reasonably needed to verify your request. Depending on your location, you may also have rights to object to processing, restrict processing, withdraw consent, appeal a decision, or complain to a privacy regulator. We will handle applicable requests as required by law and will not discriminate against you for exercising protected rights. Deletion may affect saved games and access to purchases; information required by law or for legitimate security and dispute purposes may be retained. Copies previously shared with others may remain outside our control.

10. International users

Our providers may process information in the United States and other countries whose privacy laws differ from your own. Where applicable law requires a transfer mechanism or other safeguards, those requirements apply. Where relevant, we process information to perform our agreement with you, for legitimate interests such as security and improving the game, to meet legal obligations, or with consent where required. You may withdraw consent without affecting earlier lawful processing.

11. Children

PickleBash is intended for people age 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under the permitted age has provided personal information, contact poppy@picklebash.app so we can investigate and take appropriate action, including deletion where required.

12. Changes to this policy

We may update this policy as the service or our practices change. We will post the revised policy with a new effective date and provide additional notice or request consent when required by law. The current version is always available at picklebash.app/privacy.