Privacy Policy

Last updated: July 22, 2026

Bolitas is an app by Pewén Labs SpA (Santiago, Chile). This policy explains what data we process and why. The short version: only what the game needs — no ads, no ad tracking, no selling data.

Data we process

• Anonymous game account. Opening the app creates an account with a random identifier. No email, real name or phone required.
• Apple or Google backup (optional). If you choose "Continue with Apple" or "Continue with Google" to keep your progress, we receive that account's identifier and, if you share it, your name. We don't use your email for marketing.
• Display name. The nickname your rivals see.
• Game data. Matches, shots, results, marble balance and history, skins, rankings and leagues. Required for multiplayer and server-side validation of every move.
• Chat messages (ephemeral). In online matches you can send short messages to your rival. They travel directly between devices and are not stored on our servers: they vanish within seconds. The only exception: if you report an offensive message, we keep that message together with the report so we can review it.
• Reports and blocks. If you report or block a player, we store that record to moderate the community and keep you from being matched again.
• Notifications. If enabled, we store your device token to tell you when it's your turn. You can turn them off anytime in your system settings.
• Purchases. Payment is processed by Apple or Google — we never see your card. We store the transaction identifier to credit your marbles and prevent duplicates.
• Game usage (anonymous). We measure, in aggregate and anonymously, how the app is used (which modes are played, opens, retention) to improve it. It doesn't identify you or track you outside Bolitas.
• Language. To show the app and notifications in your language.

What we don't do

Infrastructure providers

We rely on third-party services that process data on our behalf:

• Supabase (database and authentication; servers in the US, AWS us-east-1).
• Apple and Google (optional sign-in, in-app purchases and push notification delivery).
• Expo (push notification service).
• PostHog (anonymous product analytics: aggregate game usage, no personal data, no cross-app tracking).
• Sentry (error diagnostics: if the app crashes, we receive a technical report without email or IP address).
• Cloudflare Turnstile (invisible anti-bot verification at account creation; governed by Cloudflare's privacy policy and its Turnstile Privacy Addendum).

Retention and deletion

We keep your data while your account exists. You can delete your account and all its data directly in the app (Play with friends → delete account) — deletion is immediate and irreversible. You can also request it by writing to contacto@pewen.dev; we process it within 30 days.

Children

Bolitas is rated 13+. We do not knowingly collect data from children under 13.

International transfers

Data is stored on servers in the United States (providers listed above) with industry-standard security measures.

Changes

If this policy changes, we will publish the new version on this page with its update date.

Contact

Pewén Labs SpA · Santiago, Chile · contacto@pewen.dev