YOUR DATA, EXPLAINED

Privacy policy.

Swooshkey is operated by Francisco Cruzado Arroyo. This policy explains the information used to provide the game and how to contact us about it.

Last updated September 9, 2026.

What we collect

• Account information: your email address, a unique account identifier and your chosen username. When you accept the Player Content and Community Terms, we record their version, a fingerprint of the exact text, and the acceptance time. Email sign-in credentials are handled by Amazon Cognito; the game server does not receive or store your password.
• Game information: multiplayer wins and losses, match results and duration, weekly ranking records, and power-up availability. Live mallet movements and match state are processed to run online games.
• Your creations: mallet colors and drawings you save to your online profile, together with their moderation status.
• Safety and support: block lists, player reports, reported public content, review decisions and information you choose to send to our support email.
• Technical information: operational and error logs needed to secure and maintain the service. Hosting and network providers process connection information, including IP addresses, to deliver the app and website.

Practice and social sign-in

Practice is available without an account. Practice statistics and local mallet customization are stored on your device. Signing in enables online features.

When Google or Apple sign-in is offered and you choose it, the provider authenticates you and supplies an account identifier and email address to Cognito. Google may also supply basic profile information within the sign-in permissions; we do not request access to your Gmail, contacts or Drive. Your public game identity is the username you choose in Swooshkey. Third-party sign-in is governed by the provider’s privacy policy as well as this policy.

How we use information

We use this information to create and secure accounts, match opponents, run games, calculate statistics and weekly rankings, save customization, provide support, and investigate abuse. We do not sell personal information, show behavioral advertising, or use third-party advertising or analytics SDKs in the game. We do not track you across other companies’ apps or websites.

What other players can see

Your username, mallet color, approved drawing and multiplayer ranking information can be visible to other players. New or changed drawings remain private until approved. Other players cannot see your email address, password, private pending drawings, block list or the identity of someone who submitted a report.

Service providers and storage

Amazon Web Services hosts the game service, account system and database in the United States, in the Northern Virginia region. Our public website is hosted through OpenAI Sites and its hosting infrastructure. Support email is handled through Gmail. These providers process information to deliver their services. We may also disclose information when required by applicable law or when necessary to address abuse or protect people and the service.

Retention and deletion

Active profile data is kept while your account exists. You can request account deletion inside the app from your profile. This removes your active profile, terms acceptance record, username reservation, ranking records and block relationships, and starts deletion of your Cognito account. The app will offer a retry if a connection problem interrupts the process.

Player reports expire after 90 days; database removal may take additional processing time. Deleting an account removes that person’s identifiers and associated public-content snapshot from linked reports, and erases report details and resolution text. Remaining limited moderation records may persist until the original expiry. Minimal deletion markers and result receipts remain to prevent deleted accounts from being recreated by old tokens or duplicate results from being counted.

Game-service CloudWatch logs are configured to expire after 14 days. Cognito authentication and security events are also recorded in AWS CloudTrail, whose standard event history retains the past 90 days. These events can include IP address, account identifier, timestamps and error details. Database recovery backups can persist for up to 35 days. Deleting current records does not immediately erase copies in those backups. Support correspondence is retained while needed to handle the request and related follow-up; contact us to request its deletion.

To erase local practice information, remove the app and its local data from your device. For an Apple-linked account, the app asks you to authorize Apple again so the service can revoke Swooshkey’s Apple authorization during deletion. If automatic revocation is unavailable, you can still delete your game account. The app then keeps instructions available for removing Swooshkey’s authorization separately in your Apple Account’s Sign in with Apple settings. Deleting Swooshkey does not delete your Google or Apple account. You can manage third-party connections separately in those providers’ account settings.

Your choices

You can edit your mallet, block players, submit reports and delete your account in the app. You may also contact us to request access to, correction of or deletion of personal information, or to ask about rights available where you live. We may need to verify your identity before acting on a request. Please do not email your password.

Children and policy changes

Swooshkey is a general-audience game and is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and remove it. We will update this page when our practices change and identify the updated date above.