Privacy policy
Secret Shot is a mobile pool game operated by Raz Rosh ("we", "us"). This policy explains how we process information when you use the game, sign in with a supported provider, visit these pages, or contact us. For privacy questions, email raz@razrosh.com.
Information we process
- Account and profile: a game account ID, an app-generated device identifier, your chosen display name and preset avatar, settings, sign-in sessions and linked provider identifiers. You can begin as a guest.
- Optional sign-in: when you choose Facebook Login, we request the
public_profilepermission and retrieve your Facebook app-specific user ID and name. We use the ID to link or recover your game account and the name as a sign-in display hint. Our integration does not request your email address, friends list, posts or photos, and cannot publish posts for you. Facebook credentials are exchanged to verify sign-in; we do not store your Facebook password or persist the Facebook access token in your game-account record. Google Play Games sign-in provides a player ID and display name; Game Center provides a player ID and identity-verification information. - Game activity: matches, shots and outcomes, rank and XP, achievements, collection and equipped items, virtual coin balances and transaction history, reward claims and tutorial progress.
- Technical and diagnostic information: app version, platform, device model, operating-system version, session activity and playtime, crash and exception reports, connection failures and service-performance information. Our servers also process network information such as your IP address to deliver and protect the service.
- Purchases and advertising, where enabled: product identifiers, purchase-validation tokens or receipt references, transaction status, and ad-reward verification information. Payment details are handled by the platform store; we do not receive your full payment-card details. Advertising providers may process device identifiers, IP address, ad interactions and consent choices under their own policies. Availability differs by platform and build.
- Support: your email address and the information you choose to send us.
How we use information
We use information to create and recover accounts, run multiplayer matches, save progress and preferences, maintain rankings and rewards, validate transactions, prevent cheating and fraud, diagnose failures, improve reliability, and answer support and privacy requests. Facebook information is used for sign-in and account linking; it is not used for advertising or sold.
Where applicable law requires a legal basis, we process information to provide the service you request, for legitimate interests in operating and securing the game, to meet legal obligations, or with consent where required. You can withdraw consent for optional processing without affecting processing that was lawful before withdrawal.
Who receives information
Other players can see game-facing information such as your display name, selected avatar, rank and shared match activity. Sign-in credentials and unrevealed secret-ball assignments are not public profile information.
We use service providers for hosting, backups and operations, including Amazon Web Services. Google, Apple and Meta process information when you use their sign-in, store or advertising services. We may disclose necessary information to comply with law, protect users and the service, or handle a business transfer subject to applicable privacy protections. We do not sell personal information.
Provider policies: Meta, Google, Apple, and AWS.
Storage and retention
The game service is hosted in the United States. Information may be processed outside your country by us and our service providers. Where required, international transfers are subject to applicable safeguards.
We keep account information while needed to operate your account. When account removal completes, the service removes your personal profile and settings, provider links, device sign-in records, refresh sessions, and player-associated session and diagnostic reports. Limited settled match, virtual-economy, reward, ownership and purchase records remain associated with an internal account reference, without the removed personal profile, to preserve transaction integrity, prevent fraud and address disputes or legal obligations. Removal and hashed device records remain to prevent the old account from being recreated accidentally. Restricted support and administrative audit records can also remain, including previous display names when an operator has edited a profile, to investigate account changes and disputes. These retained records are not described as fully anonymous.
Diagnostic event reports are normally pruned after 180 days, or removed earlier with the account. Restricted database backups follow a 30-day expiration schedule; deleted information can remain in those backups until they expire. Expired sign-in handshakes cannot be used and are cleaned up when new sign-ins begin. Other records are kept for the purposes described above; there is no single fixed deletion deadline for all retained records.
Your choices and rights
You can edit your profile and settings in the game, choose guest play, and use Settings → Controls → Your account to export your account data or start account removal. For the exact steps and an email alternative, see Delete your Secret Shot data.
You may remove Secret Shot from Facebook's Apps and Websites settings to revoke its Facebook authorization. This alone does not delete the Secret Shot game account. Ask us if you want to remove the Facebook link while keeping the game account; removing a sign-in method can affect account recovery.
Depending on your location, you may have rights to access, correct, delete or receive a copy of your information, restrict or object to certain processing, withdraw consent, and complain to your local data-protection authority. Contact raz@razrosh.com to exercise these rights. We may need reasonable information to verify account ownership. We never need your provider password or a sign-in code.
Children
If you believe a child has provided personal information in circumstances requiring parental consent, contact us so we can investigate and take appropriate action, including deletion.
Security and these web pages
We use encrypted connections, access controls and restricted operational access to protect information. No system can guarantee absolute security. These privacy and support pages do not include advertising pixels or analytics scripts; the hosting service processes requests needed to serve them.
Changes and contact
We may update this policy as the game or our practices change. The date above identifies the latest revision. Where required, we will provide notice or obtain consent for material changes.
Raz Rosh · Secret Shot
raz@razrosh.com