JoinPal
Privacy policy
Last updated:
JoinPal is a set of games that run inside Telegram. This page explains what we collect when you play, why, and the choices you have. We do not sell your data.
What we collect
- Your Telegram account details that Telegram shares with the app: your Telegram ID, first name, language and the link to your profile photo.
- Sign-in methods you choose to link: a verified email address, or your Google account ID and its email address.
- Your games: moves, results, ratings, leaderboard positions, lesson and puzzle progress, in-game chat messages, invitations, recent opponents and players you block.
- Optional details you add in your profile: birth year, gender and country.
- Technical data: your device's time zone, an approximate country from your network, app usage events, sign-in sessions and connection status, and fair-play signals.
- Purchases: records of payments made with Telegram Stars and of in-app coins. Telegram handles the payment itself; we never see card details.
- On our website: anonymous visit counts (the page, its language and the kind of site you came from, such as a search engine). Your browser keeps only the date of your last visit; these counts use no cookies and store no IP address or other identifier.
How we use it
- To run your account and your games, keep ratings and leaderboards, and show your online status to other players.
- To keep games fair and the service safe: detecting cheating, limiting abuse and protecting accounts.
- To send the verification codes you ask for.
- To improve the games using statistics in which no individual player is identified.
- To answer you when you contact us.
What other players see
Other players see your display name, profile photo, ratings and game statistics, and whether you are online, in a game or offline. They never see your Telegram ID, email address, Google account or the optional details in your profile.
Who we share it with
- Only service providers that help us run JoinPal, and only what they need: our hosting provider, which runs our servers; Resend, which delivers verification emails; Google, only if you link a Google account; Telegram, the platform the app runs on and which processes Stars payments; and AdsGram, only when you choose to watch a rewarded ad.
- We may disclose data if the law requires it. We never sell your data or use it for advertising profiles.
How long we keep it
We keep your account and game history while your account exists. Verification codes expire after 10 minutes and are deleted within a week. When you ask us to delete your account, we delete or anonymize your data, keeping only what the law requires and anonymous game records that other players' history depends on.
Your choices and rights
- Leave the optional profile details empty, or clear them at any time.
- Add or remove a linked email or Google account in your profile.
- Ask us for a copy of your data, to correct it, or to delete your account, by writing to support@joinpal.fun.
Children
JoinPal is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
Security
All connections are encrypted (HTTPS). Verification codes are stored only in hashed form, sign-in sessions can be revoked from your profile, and access to our servers is restricted.
Changes and contact
We will update this page when our practices change and show the date at the top. Questions or requests: support@joinpal.fun.