Privacy policy
Last updated: October 27, 2026
Air Hockey Online is an air hockey game for iOS. This page explains what data the app processes, why, how long it is kept and who can see it. There are no ads and no tracking, and your data is not sold. No e-mail address, phone number or password is needed for an account.
Offline play
Playing against the computer or two players on one device needs no internet. In these modes no data is sent to a server. Settings (language, handedness, etc.) stay on your device.
Data processed in online play
| Data | Why | How long it is kept |
|---|---|---|
| Player ID and friend code (randomly generated) | So your account and friendships work | Until you delete your account |
| Device ID and device secret (random values generated by the app; the secret stays in your device Keychain and the server keeps only a hash of it) | To recognise you on this device; no password is needed | Until you delete your account |
| Display name | Shown to your friends and opponents; if you play ranked, everyone can see it on the leaderboard | Until you delete your account |
| Friendships, blocks, match invitations | Social features | Until you delete your account (invitations expire within a minute) |
| Chat messages between friends | Messaging; only the two participants can see them. Offensive words are starred out automatically before a message reaches the other person | Until either participant deletes their account |
| Match results, score, rating, rank and match history | Ranked play, leaderboard, statistics | Until you delete your account; afterwards without any player identity |
| Reports: reason, description, the reported player's display name and a copy of the reported message | Moderating abuse | 12 months |
| Push notification token (Firebase registration token; only if you allow notifications) | To deliver notifications such as match invitations | Until you delete your account, turn notifications off (the token is removed from the server the next time you open the app) or Firebase marks the token invalid |
During a match your mallet movements are sent to the server that runs the match; they are not recorded, only the result and score of the match are kept.
Because notifications can appear on the lock screen, they never contain player names or chat content. The notification permission is requested on your first social interaction (for example when adding a friend) and you can turn it off at any time in iOS Settings.
Service providers
Your data is not sold, not used for advertising and not shared with analytics or advertising services. The following providers are used to run the service:
- Server hosting: the game servers and the database run on a rented server.
- Cloudflare: traffic to the servers passes through Cloudflare, which processes IP addresses and technical connection data to deliver it and protect against attacks. The app does not store your IP address with your account.
- Google Firebase Cloud Messaging and Apple (APNs): to deliver notifications, your push token and a generic notification text are sent to Google's Firebase Cloud Messaging service and from there to Apple's push notification service. For this, Firebase creates an app-specific installation ID on your device. Firebase is used for notifications only; Firebase Analytics and advertising services are not used. If you do not allow notifications, nothing is sent to Firebase.
Deleting your account
You can permanently delete your account in the app with "Delete Account" on the Online page. Your profile, device records, friendships, blocks, chat messages, rating and statistics and your push token are deleted at once. Results of matches you played remain without any player identity so your opponents' history stays intact. Your player ID is removed from reports; the display name and message copy in a report are deleted when its 12 months are over.
Backups
The database is backed up daily and backups are kept for 14 days, so deleted data disappears from backups within 14 days at the latest. If a backup ever has to be restored, accounts deleted after that backup are deleted again.
Moderation
We review reports. A player who breaks the rules may have their display name reset, a message removed or their account suspended. A suspended account cannot use online features; offline play keeps working.
Children
The app's age rating takes the chat feature into account. We do not knowingly collect personal information from children.
Security
Connections are encrypted with HTTPS/WSS. The device secret is stored in the iOS Keychain. Server logs never contain access tokens, secrets, push tokens or chat content.
Changes
If this policy changes, this page is updated and the date at the top changes.
Contact
Privacy questions and data requests: [email protected]