Privacy Policy
Bubble Pool · Last updated: 08/16/2026
This policy explains what Bubble Pool collects, why, and what you can do about it. Bubble Pool is run by Aniten LLC. If you have a question about anything here, email [support@bubble-pool.com].
What we collect
| What | Why |
|---|---|
| Email address | To create your account, sign you in, and send a reset link if you forget your password. It is never shown to other players. |
| Password | Stored only as a cryptographic hash by our authentication provider. We never see or store the password itself. |
| Username | Identifies you to other players. Visible to anyone you play or who looks at your profile. |
| Profile picture | Optional. If you upload one it is visible to other players. Pictures are resized and re-encoded before upload. |
| Game records | Scores, levels completed, stars, coin balance, items owned, and the results of matches. This is what makes progress and matchmaking work. |
| Friends and requests | Who you have added, and requests sent or received. |
| Reports | If you report another player's picture, we record who reported whom so it can be reviewed. |
We do not collect your real name, date of birth, phone number, address, payment details, contacts, photos beyond the one you choose to upload, or your location.
What we do not do
- No advertising, and no advertising identifiers.
- No analytics, tracking pixels, or third-party trackers.
- No selling, renting, or sharing your data for marketing.
- No profiling, and no automated decisions with legal effects.
Who else is involved
Bubble Pool relies on three services to work:
- Supabase stores your account and game data and handles sign-in. Their privacy policy: supabase.com/privacy.
- Netlify serves the web version. Their servers see the IP address of anyone loading the page, as any web host does. Their privacy policy: netlify.com/privacy.
- jsDelivr, a content delivery network, serves one software library the app uses. Loading it means jsDelivr sees your IP address. Their privacy policy: jsdelivr.com.
These providers process data on our behalf. They are not permitted to use it for their own purposes.
What other players can see
Your username, profile picture, the level you have reached, your best score, and your solo and duel records are visible to other players — on your profile, in a friend's list, and during a match.
Your email address is never shown to anyone. Neither is your coin balance or your friends list.
Stored on your device
The app keeps two small settings in your browser's local storage: whether you have sound and music switched on, and a flag noting that a password reset is part-way through. It also stores a sign-in token so you are not asked to sign in every time. These are not used for tracking, and clearing your browser data removes them.
How long we keep it
- Account and game data: for as long as your account exists.
- When you delete your account it is removed immediately — profile, email, game history, friends, level progress, and any picture you uploaded.
- Matches you played against other people are kept, because they are also the other player's record, but your identity is removed from them and your name is replaced with "Deleted player".
- Backups may hold copies for a short period before being overwritten.
Deleting your account
In the app: tap your name on the main screen → Edit profile → Delete my account. You will be asked to confirm twice. This cannot be undone, and any coins or items are lost.
If you cannot reach the app, email [support@bubble-pool.com] from the address on the account and we will delete it for you.
Your rights
Depending on where you live — including the UK, the EU under GDPR, and California under the CCPA — you may have the right to see the data we hold about you, correct it, delete it, receive a copy, or object to how it is used. You can change your username and picture in the app at any time, and delete everything yourself. For anything else, email us and we will respond within 30 days. You also have the right to complain to your local data protection authority.
Children
Bubble Pool is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.
Where data is held
Our providers may store and process data outside your country, including in the United States. Where that happens, they rely on standard contractual clauses or equivalent safeguards.
Security
Traffic is encrypted in transit. Passwords are hashed, never stored in readable form. Access to your account data is restricted at the database level so one player cannot read another's private information. No system is perfectly secure, but if a breach affects you we will tell you and the relevant authority as the law requires.
Changes
If this policy changes we will update the date at the top. If a change materially affects how your data is used, we will tell you in the app.
Contact
Aniten LLC
[support@bubble-pool.com]