Privacy Policy

Last updated October 7, 2026.

Balldog is a live pool game that runs inside iMessage. This policy describes what the iOS app and its game server collect.

What we collect

• Display name. The name you type is stored on your device in the Balldog app group and sent to the match server so other players can see it on the table HUD.
• Seat identifier. Messages gives each device a participant identifier for the conversation. Balldog uses that value as your seat id so the correct phone can shoot and receive turn notices.
• Push token. If you allow notifications, Apple’s device token is stored and sent to the server so we can notify you when it is your turn, when you lose a life, or when a match ends.
• Avatar choice. The character you select is saved on your device and shared with the match server so other players see the same portrait. Avatar styles do not describe or infer your gender.
• Match state. Shots, lives, and table positions live on the game server for the length of the match (and a short retention window after it ends).
• Table page. A table’s invitation link also opens a web page for people who don’t have Balldog yet. Anyone with that link can see the table’s player names, portraits, lives and result while the table exists.

What we do not do

• We do not sell personal data.
• We do not use your data for advertising or tracking across other companies’ apps or websites.
• We do not require an account, email address, or location.

Where data lives

The iPhone keeps your display name, avatar choice, seat id, and push token in the Balldog shared app group. Match state is processed on Cloudflare Workers / Durable Objects that host the live table.

Profile backup

When you finish setup, your chosen name and avatar are saved for future games in the app and Messages. When backup is enabled, a copy is stored in Cloudflare D1, separately from any match. Your device holds a private random access key; the server stores only its hash. This is not an account and does not provide sign-in or recovery on another phone.

You can turn off “Back up my profile” in Your profile or Settings to remove the server copy while keeping your choices on this iPhone. If you are offline, removal retries when the app is open and connected. The backup remains until you remove it. Deleting the app removes the local access key and does not automatically delete the server backup; turn backup off before uninstalling to remove it.

Retention

Finished matches are deleted from the server after seven days. Push token registrations are stored separately and are not deleted with a match; contact us to request their deletion. You can delete the app to remove local settings. Uninstalling also removes the Messages extension.

Contact

Privacy questions or deletion requests: danny@bizzy.sh.