Privacy
Effective August 9, 2026
Data we use
Pal Rally stores your sign-in email, username, linked sign-in providers, session IP address and browser information, settings, pals, invitations, game participation and results, push subscription, and reports you submit. Game and product events use internal account and game IDs; analytics events do not contain usernames or emails.
Why we use it
We use this data to authenticate you, run private games, deliver invitations and notifications, prevent abuse, answer reports, recover the service, and measure reliability and product use.
Providers
Cloudflare hosts the app and database and delivers sign-in email. Your browser’s push service receives encrypted notification requests. A sign-in provider receives data when you choose that provider. If you allow analytics cookies, Google Analytics receives page, referrer, browser, device, and approximate location data to measure site use. Pal Rally disables Google advertising signals, does not send Google names, email addresses, or game content, does not sell personal data, and does not use advertising trackers. Learn more about how Google uses data from sites using its services.
Retention and deletion
Sessions expire after 30 days. Raw product events are deleted after 90 days. Resolved support reports are deleted after one year. Account data remains while your account is active. Deleting your account removes sign-in, social, settings, and push data and changes historical game records to “Deleted player.” Deleted data may remain temporarily in Cloudflare’s point-in-time recovery history.
Your choices
Use Cookie settings in the footer to allow or decline Google Analytics. You can disable notifications in Settings and delete your account there. Use Support for access, correction, deletion, or other privacy requests.
Children
Pal Rally is not for children under 13.