Last updated: October 12, 2026
1. Who we are and what this policy covers
Pinball Punch is developed and operated by Alexandre Bobeda, using the studio name AB Studio, in Rio de Janeiro, Brazil. Alexandre Bobeda is the controller of personal data processed for the purposes described in this policy.
This policy covers the Pinball Punch Android game, its pages and website analytics on alexandrebobeda.com, and communications about the game. It does not cover the operation of unrelated projects, other games, or external services linked from the developer's website.
For support, privacy questions, or requests concerning your personal data, email pinball.punch@alexandrebobeda.com.
2. Game progress stored on your device
Pinball Punch stores game progress locally on your device, including scores, earned stars, unlocked levels, completed-game records, and records used to grant gameplay rewards correctly. This information lets you continue playing and retain your achievements.
We do not upload local save files to an AB Studio server. The launch version does not offer player accounts, cloud saves, online leaderboards, in-app purchases, or subscriptions. It does not include a separate crash-reporting service. If you choose to enable optional game analytics, selected score and gameplay information is sent to Google as described in section 5; this does not create a cloud backup. Advertising services can also collect the technical and interaction data described below.
You can remove locally stored progress by clearing Pinball Punch's app storage through Android settings or uninstalling the game. Doing so deletes your local progress, and we cannot restore it from our servers.
3. Optional rewarded advertising
Advertising is Pinball Punch's launch revenue source. The game uses Google AdMob, through the Google Mobile Ads SDK, to provide optional rewarded advertisements. You can choose to watch an advertisement for a gameplay benefit, such as a Ball Save or Rewarded Ball. Watching advertisements is not required to play, unlock levels, or earn stars.
Google's advertising services may collect or receive:
- Your IP address, which can be used to estimate your general location.
- Device and advertising identifiers, such as the Android advertising ID and app set ID, subject to device settings, consent, and SDK configuration. Google may also receive identifiers associated with signed-in accounts on the device where applicable; this does not create an AB Studio player account.
- App and advertisement interactions, such as launches, taps, video views, and ad completion events.
- Diagnostic and performance information, such as startup time, responsiveness, and energy usage.
Google uses this information to deliver and measure advertisements, operate and improve its advertising services, detect fraud, and protect those services. Advertising identifiers may support personalized advertising when permitted. App set IDs are used only for permitted purposes such as analytics and fraud prevention, not advertising personalization.
AdMob can process data when the advertising SDK is initialized or an advertisement is requested, including when an ad is loaded before you decide to watch it. Choosing not to watch an advertisement does not by itself stop all advertising SDK processing. Required consent and age restrictions apply before the relevant processing begins.
We use AdMob without integrating additional third-party advertising networks at launch. Google may work with advertisers and advertising technology providers as part of delivering advertisements. Applicable providers and choices are disclosed through the advertising consent interface where required.
Learn more in Google's Privacy Policy, Google's advertising information, and Google Mobile Ads data disclosures.
4. Personalized ads, consent, and your choices
Personalized advertisements may be offered to eligible adults aged 18 or older where permitted by law and Google policy. Where consent is required, we obtain it before using personal data or device storage for those purposes. We do not use behavioral profiling to target commercial advertisements to players under 18. If adult eligibility has not been established, personalized advertising is not enabled.
The game and its consent tools may process and store an age-eligibility category, your privacy choices, and records of consent to apply the correct advertising restrictions and remember your choices. Age-related signals may be sent to Google to restrict advertising. We use this information to apply privacy protections, not to create an advertising profile of a younger player.
The game provides an Ad Privacy menu for reviewing your age category, personalization preference, optional game analytics choice, and, where applicable, the regional advertising choices. You can use it to review your choices, refuse optional processing, or withdraw consent. Withdrawal does not affect processing that was lawful before you withdrew consent. Accepting the Terms of Service or choosing a gameplay reward does not constitute consent to personalized advertising or optional game analytics.
Depending on your choices and applicable requirements, the game may offer non-personalized ads, limited ads, or no ads. Non-personalized ads can still involve device storage and data processing; they are not automatically exempt from consent requirements. Ad-funded rewards may be unavailable if no permitted advertisement can be served, but ordinary gameplay remains available.
You can also manage or delete your advertising ID through Android settings and review Google's My Ad Center. These controls supplement the game's privacy choices; they do not necessarily stop all advertising data processing.
5. Optional game analytics and feature configuration
Pinball Punch uses Google Analytics for Firebase to measure how the game and rewarded offers are used. Game analytics is disabled by default, including automatic Analytics collection before your choice. It is enabled only after a player has confirmed they are aged 18 or older and separately allowed game analytics. It remains disabled for players under 18 and when adult eligibility is unknown. The game offers this optional choice after adult age confirmation, and eligible adults can change it through GAME ANALYTICS in the Ad Privacy menu.
When enabled, Analytics may process:
- An app-instance identifier and device and app information, such as the device model, operating system, app version, and general region.
- App usage and timing information, such as app opens, sessions, activity, and return visits.
- Gameplay information, such as level, score, score changes, reward use, and the reward-offer variant applied to a run.
- Rewarded-ad interactions, such as an offer being shown, a player choosing it, completion, errors, impressions, and ad revenue reported by the advertising service.
We use these measurements to compare reward offers, understand player progression and return visits, and assess advertising performance. Custom gameplay events do not include your date of birth, a player-account identifier, or the game's individual run identifiers. This analytics choice is separate from personalized-ad consent: allowing one does not allow the other. Refusing or withdrawing game analytics consent does not prevent ordinary gameplay or, where otherwise permitted, rewarded advertisements.
Disabling GAME ANALYTICS stops future Analytics collection, clears Analytics data stored by the SDK on your device, and resets its app-instance identifier. This does not delete game progress or automatically erase data previously received by Google. Provider-held data and deletion requests are addressed in section 10. See Google Analytics for Firebase and Firebase Analytics collection controls.
The game also uses Firebase Remote Config to receive feature settings, including whether a run can offer one rewarded benefit or both Ball Save and Rewarded Ball. A run keeps the rules selected at its start. Configuration delivery is separate from optional game analytics and can operate when game analytics is declined. Google may process a Firebase installation identifier and technical connection information to provide this service. The configuration contains feature settings, not sensitive player information or local save files. See Firebase's privacy information and Firebase Remote Config.
6. Pinball Punch website pages and cookies
The developer's website is hosted on Vercel and uses Google Analytics. When you visit Pinball Punch pages on that website, hosting and analytics services can process technical and usage information, including requested pages, timestamps, referrers, browser and device information, general location, and network information needed to deliver and secure the pages.
Google Analytics is the website's analytics service. It uses the following first-party analytics cookies to measure visits and interactions and produce website usage reports:
- _ga: Distinguishes visitors. Configured expiration: 2 years.
- _ga_0DB7K5WVMY: Maintains session status and analytics state for the website's Google Analytics data stream. Configured expiration: 2 years.
Browser limits and your deletion choices can shorten these lifetimes, and cookies may be renewed on subsequent visits. Cookie expiration is separate from the retention of analytics data on Google's servers. See Google Analytics cookie information.
Vercel provides website hosting and security services. Vercel Web Analytics is not used on these pages. Hosting and security processing is separate from Google Analytics measurement.
You can manage, block, or delete analytics cookies through your browser's privacy controls and use the Google Analytics opt-out browser add-on. Blocking cookies alone does not necessarily prevent every analytics request. These controls do not stop hosting and security processing needed to provide the website. For questions or requests about website analytics data under our control, contact pinball.punch@alexandrebobeda.com.
Website cookie choices, optional game analytics consent, and game advertising choices are separate. Visiting these pages or reading this policy does not give consent to optional game analytics or personalized advertisements in the game.
For provider information, see Google Analytics privacy information and Vercel's Privacy Policy.
7. Support communications
If you contact us, we receive your email address, the contents of your message, and any information or attachments you choose to send. We use them to answer your request, troubleshoot reported problems, and handle privacy or legal inquiries. Our email service providers process these communications to deliver and store them.
Please send only information relevant to your request. We do not need your password, payment details, or identity documents for ordinary game support. If identity verification is necessary for a privacy request, we ask only for information proportionate to that request.
8. Purposes and legal grounds
Where applicable data protection law requires a legal basis, we process personal data on the following grounds:
- Providing the service: Information necessary to operate the game, deliver requested benefits, and answer support requests, where processing is necessary to perform our agreement with you or take steps you request before entering that agreement.
- Consent: Optional game analytics, personalized advertising, optional cookies, and other optional processing where consent is required. Consent is specific to the relevant purpose and can be withdrawn.
- Legitimate interests: Necessary and proportionate security, fraud prevention, service reliability, and support administration, where permitted and after considering your rights and reasonable expectations.
- Legal obligations and legal claims: Information needed to comply with applicable law, respond to lawful requests, or establish, exercise, or defend legal rights.
These grounds do not override requirements to obtain consent or protections that apply to minors.
9. Sharing and international processing
Personal data may be processed by Google for advertising, optional game analytics, feature configuration, and website analytics; by Vercel for website hosting and security; and by our email service providers for support communications. Depending on the service and purpose, a provider may process information on our behalf or under its own responsibilities and privacy terms. We may also disclose information when legally required or when necessary and lawful to protect rights or investigate fraud or security incidents.
We do not sell personal data for money. Personalized advertising may involve disclosures that qualify as sharing for targeted advertising under some privacy laws. Where those laws apply, you may exercise the corresponding opt-out rights through the available privacy controls or by contacting us.
We operate in Brazil. Providers may process information in other countries, including the United States, where privacy laws can differ. Where required, international transfers must use a valid legal mechanism and appropriate safeguards, such as applicable contractual protections. Contact us for information about safeguards relevant to your data.
10. Retention and deletion
Local game progress remains on your device until you clear app storage, uninstall the game, or otherwise remove that data. We cannot remotely delete records held only on your device.
We retain support correspondence only for as long as needed to resolve the request and for any further period necessary to meet legal obligations or handle related disputes. The period depends on the request, whether follow-up is needed, and applicable legal requirements. Information no longer needed for those purposes is deleted.
Privacy preferences, consent records, and age-eligibility information are kept for as long as needed to remember valid choices, apply advertising and analytics restrictions, and meet applicable recordkeeping requirements. Records stored only in app storage are removed when you clear that storage or uninstall; provider-held records may remain subject to their own retention rules.
For both the game and website Google Analytics properties, the configured retention periods are 2 months for event data and 14 months for user data. Deletion and any renewal of user-data retention follow the service's retention settings and processing schedule. Standard aggregated reports can have different retention from user-level or event-level records. These server-side periods are separate from the website analytics cookies' two-year configured expiry.
Advertising records held by Google are subject to Google's retention rules and the applicable advertising settings. Firebase installation identifiers used for Remote Config have separate provider retention and deletion rules; disabling game analytics does not delete that installation identifier. Clearing app storage, uninstalling the game, or resetting local Analytics data does not automatically delete data already held by these providers. Provider retention can vary by data type and purpose; see Google's retention information, Google Analytics retention settings, and the provider information linked above.
To request deletion of personal data under our control, email pinball.punch@alexandrebobeda.com. We will address the request under applicable law, explain any lawful retention exceptions, and assist with relevant provider requests where appropriate. Information irreversibly anonymized so that it no longer relates to an identifiable person may be retained as aggregate statistics.
11. Security
We use reasonable technical and organizational measures appropriate to the information processed, including limiting access to support communications and using secure services. Website connections use HTTPS, and Google states that Mobile Ads SDK data is encrypted in transit. Local progress is stored within the game's app storage on Android.
No storage system or transmission method can guarantee absolute security. If you suspect a privacy or security problem involving Pinball Punch, contact us at pinball.punch@alexandrebobeda.com.
12. Your privacy rights
Depending on your location and applicable law, you may have rights to:
- Obtain confirmation of processing and access to your personal data.
- Correct incomplete or inaccurate information.
- Request deletion, anonymization, or restriction of processing.
- Receive eligible information in a portable format.
- Obtain information about recipients and the consequences of refusing consent, and withdraw consent.
- Object to certain processing, opt out of targeted advertising or legally defined sale or sharing, and request review of qualifying automated decisions.
- Complain to the competent data protection authority, including Brazil's ANPD, or your local supervisory authority where applicable.
These rights are subject to applicable legal conditions and exceptions. Brazilian users have the rights provided by the Lei Geral de Protecao de Dados Pessoais (LGPD). Users in other jurisdictions may have additional rights. We respond within the time limits required by the law that applies to your request and do not discriminate against you for exercising privacy rights.
Send requests to pinball.punch@alexandrebobeda.com, with "Pinball Punch privacy request" in the subject. Explain what you are requesting and your country of residence so we can identify applicable requirements. We may need reasonable information to verify your request or locate data; we do not require you to create a player account.
13. Younger players
Pinball Punch is intended for teenagers and adults aged 13 or older and is not directed to children under 13. If your local law requires a higher age or a parent or guardian's involvement for particular processing or use of the service, those requirements apply.
Players aged 13 to 17 retain the protections applicable to minors. We do not use behavioral profiling to target commercial advertisements to them, and advertising must respect applicable age restrictions. Optional game analytics is disabled for these players. Age-related privacy controls are separate from the game's content rating.
If you believe a child under 13 has provided personal data to us, or that a younger player's information has been processed improperly, email pinball.punch@alexandrebobeda.com. We will investigate and take the steps required by applicable law, including deletion where appropriate.
14. Changes to this policy
We may update this policy when the game, providers, data practices, or legal requirements change. We update the date at the top and provide additional notice of material changes where required. If a new purpose requires consent, we obtain that consent before the relevant processing begins.
15. Contact
Alexandre Bobeda / AB Studio
Rio de Janeiro, Brazil
Email: pinball.punch@alexandrebobeda.com
Website: www.alexandrebobeda.com