Account and play
We store your game ID, display name, language, progress, gold, energy, helpers, experience, badges and game transactions. A guest session uses a private access token. If you link an available Apple or Google account, we verify its identity for account saving and recovery. We do not receive your Apple or Google password. Optional Google Sign-In uses Google’s SDK to process basic profile details, including name, email address, user ID and profile image information. The SDK also processes device and network information, including IP addresses that may be used to infer an approximate area for fraud prevention. Google’s SDK may also process technical and usage data for analytics; this can differ from Plioro’s optional GA4/Meta measurement.
Public profiles and images
Your public name, ID, approved photo and level can appear in profiles, friends and rankings. You can hide achievement details; your level remains visible. We receive only images you select and submit. Supported images are validated and re-encoded with unnecessary metadata removed. Pending images stay private and community contributions require review before publication. No full-library or camera access is required. We store in-game friend links and social connections within Plioro without reading your phone contacts.
Optional services
When purchases are available, the official device store processes payment. Verified transaction data supports delivery, recovery and refunds; we do not receive full card details. Notifications use a device token after your choice. Advertising and measurement services, when enabled, require their applicable privacy choices and disclosures. A configuration setting does not prove a provider is active.
Protection and your choices
We use information to provide play, account recovery, moderation, support and fraud prevention, with restricted administrative access and protected private tokens. We do not sell account information or uploaded photos. You can change notification and language preferences, manage photos, hide achievement details, report content, block players and request account deletion.
Deletion and retention
A deletion request deactivates ordinary play and starts the displayed recovery window, currently 30 days for new requests. Private data remains recoverable until the saved deadline. Only an explicit reactivation cancels the request; signing in or signing out alone does not. After the deadline, final erasure revokes access and removes or anonymizes progress, social data and contributed media. Failed file cleanup is retried. Limited pseudonymous transaction and erasure records may remain for refunds, fraud prevention and legal/accounting obligations. Contact info@2-g.net for retention details or privacy rights; never send a password, private token or full purchase proof.
Invitation reward protection
To prevent repeated invitation rewards, a one-way hash of the sign-in identifier is kept while your account is active and for 180 days after final deletion (at most 365 days). At final deletion, it is detached from your player and invitation records; the original provider identifier is not kept for this purpose. The retention deadline is saved when deletion completes and is not extended by later setting changes.
Sign in with Apple after deletion
Deleting your Plioro account continues even if automatic Apple authorization revocation is unavailable. The game shows whether an additional step is required in Apple Account settings → Sign in with Apple → Plioro. An encrypted token may be held separately for revocation retries for up to 24 hours after final deletion; it is then removed. Anonymous revocation status remains for at most seven days. See Apple’s account settings for the current steps. The device can also retain a private Apple sign-in handle for up to 90 days from a verified sign-in to observe its authorization state. Passive app use does not extend that deadline. Matching local sign-out/deletion, expiry or corrupt storage triggers its cleanup; it is not used for advertising or analytics.
Optional measurement
Usage and campaign measurement has its own optional choice, separate from notifications, and also depends on audience, privacy and supported service settings. Without an eligible choice and supported configuration, our server creates no measurement events. When available and chosen, it may use an application-instance identifier and server-confirmed game, sign-in and purchase events; this is not a promise of campaign attribution. On our server the choice lasts 30 days, an instance binding up to 7 days, a pending event payload up to 24 hours, and minimal delivery/deduplication state up to 7 days. A delivery attempt clears the instance payload. Withdrawal or account deletion removes our choices, bindings and queued payloads; it does not promise deletion of data already processed by a provider or of an independent SDK queue.