← Back

Privacy Policy

ENGLISH · 日本語

This is an English translation of the Japanese Privacy Policy, provided for convenience. If the two versions differ, the Japanese version prevails.

This policy describes the information that PUNIPO (the "App") collects and uses, and how that information is handled.

1. Information we collect

  • Sign-in information: the provider ID we receive from Google, Discord or Apple. From Google we also receive your email address when you sign in, but we use it only as the initial value of your display name and do not store it. From Apple we receive only the user identifier Apple issues; we do not request your name or email address.
  • User identifiers: the player_id and guest identifier assigned by the App
  • Profile: display name, bio, avatar image, and links to external social media accounts (X / YouTube / Instagram / TikTok; these links are optional)
  • Session identifiers used to keep you signed in
  • Notification tokens used to deliver push notifications, the language of those notifications and the device's time zone (so that we do not send notifications at night), and a marker used to deliver notifications meant for you to the devices you are signed in on (a value derived from your session identifier; the session identifier itself is not stored, and the marker is removed when you sign out)
  • User-generated content such as the games and comments you post
  • How your name is shown on each comment (your usual display name or “Anonymous”). For comments posted as Anonymous, we do not show your display name, avatar image or channel to other users (including the creator of the game), and notifications do not include your display name. However, to handle reports, blocks and deletion and to prevent fraudulent or inappropriate use, anonymous comments are still stored linked to the account that wrote them internally, and the operator can see which account wrote them. We also store blocks made from anonymous comments. Comments written without signing in are stored linked to a guest identifier and an IP address, and the operator can see them. If you create a new account on the device you used without signing in, the comments and likes you made without signing in are linked to that account. The comments stay shown as “Anonymous”.
  • Deleted comments: comments you delete, comments the operator deletes, and comments removed along with a deleted account or game disappear from other users right away. However, to handle reports and to check for fraudulent or inappropriate use, we keep their text, the time they were written, the account (including its display name at the time of deletion) or guest identifier that wrote them and any reports on them for one year after deletion, visible only to the operator, and then erase them (IP addresses are erased 90 days after the comment was written). If you ask us, we erase them before the year is up. When we suspend someone who comments without signing in, we keep that guest identifier until the suspension is lifted.
  • The short message you send to a user whose #1 record you beat, and a copy of your display name at that time for showing the notice. The message is shown only to that user and may appear in a notification. It is checked automatically before it is sent, and we read it when it is reported. It is deleted after 90 days (90 days after the report, if it was reported)
  • Scores and play records, and records of actions such as follows, likes, and saves (if you create a new account on the device you used without signing in, the record of the games you played until then is linked to that account; the record of the games you viewed may also be used to order that account's feed)
  • Access information: your device type and browser language, the country you connect from (derived from your IP address), the domain of the page you came from and how you arrived (a shared link, a video, and so on), and how long screens took to load
  • Sign-in records: what opened the sign-in sheet, whether the sign-in finished or failed, and how long it took (to see where signing in gets stuck)
  • IP addresses (recorded when a report is submitted and when a comment is written without signing in, to prevent fraudulent or inappropriate use; those recorded with comments are deleted after 90 days; otherwise used only for short-lived rate limiting and not stored)

Of this information, your display name, bio, avatar image, and external social media links, as well as the games and comments you post, are shown to other users, for example on your channel page (for a comment posted as Anonymous, only its text is shown, under the name “Anonymous”). Do not enter information you do not want to make public.

2. How we use information

  • Authenticating users and identifying you
  • Providing game features (showing scores and the feed, posting, comments, follows, and so on)
  • Delivering push notifications (including notices meant for you, such as when someone follows you or comments on your game)
  • Analyzing usage (aggregate statistics to improve the service)
  • Adjusting the order of games in the feed (based on the games you played and how you reacted to them)
  • Translating the text inside posted games, their titles and descriptions into the viewer's display language
  • Showing the creator of a game statistics about that game (numbers such as views, plays, play time, how many people saved it or marked it "Not interested", and which outside sites people arriving from share links came from (such as X or search; places with fewer than 5 people show no number), totaled per game and per day; they do not show who did something, at what time of day, or whose post they came from)
  • Preventing fraudulent or inappropriate use and keeping the service secure

3. Third parties and service providers

To provide its features, the App uses the following external services and sends information to them as needed.

  • Discord (user authentication)
  • Google (user authentication)
  • Apple (user authentication)
  • Cloudflare (application hosting, automated review of posted content, and receiving and sorting emails sent to our contact address)
  • Anthropic (translating the text inside posted games, their titles and descriptions)
  • Firebase Cloud Messaging (push notification delivery)
  • Turso (database)

4. Advertising

The App does not show ads and does not track you for advertising purposes.

5. Data protection

Information is encrypted in transit with HTTPS.

6. Deleting your data

To delete your account and related data, see the account and data deletion page (in Japanese). You can delete posted games, follows, likes, saves, and similar data one by one in the App without deleting your account. Comments you wrote without signing in can be deleted from the browser or app on the device you wrote them on. If you have changed devices or cleared your browser data, contact us at the address below to request deletion. To request deletion of data about you, contact us at the address below.

7. Contact

Contact: [email protected]

Last updated: October 30, 2026 (English translation added September 18, 2026)