Privacy Notice
Effective October 8, 2026 · version 2026-10-08
Controller/operator: Noah Martino, Pennsylvania, United States. Privacy contact: personal.boredhero@gmail.com.
Data needed to provide requested features
- Accounts: username, account creation time, password and recovery-code hashes, session-token hashes, and the version/date of Terms acceptance. We do not store readable passwords. Accounts are for adults 18 or older; we retain the affirmation through Terms acceptance, not a birth date or identity document.
- Online play: player display names, account links when signed in, match results, shots, pocketed balls, fouls and disconnect/forfeit facts used to provide casual statistics. Room codes and connection state run the current match. Other players see your display name and game state, not your credentials.
- Jev games: account, daily allowance, server-owned table state and actions, start/update times, completion status, provider request counts, input/output tokens, estimated API cost and unmetered failures. A hashed source-network identifier enforces a shared daily game allowance. This is necessary service and abuse-control accounting, not optional analytics; disabling analytics does not disable it.
- Security: IP addresses are received to deliver connections and enforce limits. Security counters use hashed identifiers; hashing does not make an IP-derived identifier anonymous. Hosting infrastructure may keep IP addresses and request metadata in diagnostic logs subject to its log rotation. We do not use these records for advertising or visitor profiling.
Optional feature analytics
Off by default. Only after an adult affirmatively opts in, we create a random session and record broad device input type (touch or pointer), session times, and named actions such as opening settings, help, camera controls, online play, CPU/Jev, a new rack, spin reset or the changelog. Analytics records do not include account IDs, usernames, IP addresses, full user agents, referrers, URLs, typed text, cursor movements, screen recordings or fingerprints. They are not publicly accessible, and no analytics reporting endpoint is provided.
Use Privacy choices on the game page to decline or withdraw. Rejecting is as easy as accepting, and play remains available. Withdrawal stops new analytics and deletes the currently identified analytics session and its events. Older random sessions are not linked to your identity and expire under the retention schedule. We honor Global Privacy Control and Do Not Track by disabling optional analytics. We do not sell or share data for cross-context behavioral advertising.
Cookies and device storage
- The essential
pool_sessionsign-in cookie keeps you authenticated for up to 30 days. It is HttpOnly and Secure in production. Logging out clears it. - Local storage remembers requested table appearance, controls, camera preferences, dismissed instructions and your privacy choice. The service worker caches game assets for loading. These do not send feature analytics by themselves; you can clear them through browser settings.
- The optional
pool_analyticsHttpOnly cookie expires after one day. It is only set after analytics consent and is removed on withdrawal. Privacy choice storage is retained until you change it, clear browser storage or the notice version changes.
Service providers and transfers
Choosing Jev sends numeric candidate-shot features and a remaining-target count from our backend to TypeSafe for inference. We do not include your account identity, username, IP address, password or session token in model input. TypeSafe processes these requests under its published legal and privacy terms. The game does not contact TypeSafe directly from your browser. Hosting and network providers process the connection data needed to operate the service. Processing may occur in the United States or other countries where providers operate.
Retention
Optional session/event records are removed after 30 days of inactivity by scheduled maintenance. Detailed Jev game/cost records are removed after 90 days since their last update. Account-level lifetime Jev counters, account data and online match history remain while the account exists unless you request deletion, subject to necessary security/legal retention. Expired sign-in and throttle records are cleaned through normal service operation. Backups may retain deleted information until their normal rotation; they are not used for ongoing analytics.
Your choices and rights
Contact the operator to request access, export, correction or deletion, or to object to processing. We verify account control and handle requests under applicable law. Do not send passwords or recovery phrases. If you are in a jurisdiction that gives additional rights, those rights are not waived. Where applicable, service processing relies on providing your requested service, security processing on legitimate interests, and optional analytics on your withdrawable consent. You may complain to your local data-protection authority.
Children and changes
We do not knowingly create accounts or collect optional analytics from children; account and analytics flows require an adult affirmation. If you believe a child has supplied personal information, contact us so we can investigate and remove it as appropriate. We will date material notice changes and request renewed analytics consent when its version changes.