Privacy Policy.

8ballUniverse, Canada is responsible for the personal information described in this policy. It covers the 8 Ball Universe app, 8balluniverse.com, our support channels, and community.8balluniverse.com.

Effective date: 16 October 2026. For privacy questions or to exercise your rights, email our privacy contact at [email protected] or use the account and data request page.

1. Information we process

The information involved depends on which features you use, your platform, and your privacy choices.

• Account information: email address, account and player identifiers, display name, chosen avatar, sign-in provider information, and authentication records. A sign-in provider handles its own credentials; we do not receive the password you use with that provider.
• Game and social information: match activity and results, progression, rankings, virtual balances, inventory, rewards, purchase entitlements, club membership and roles, friend relationships, challenges, and content you submit to social features. Information marked public in the app can be visible to other players.
• Device and service information: IP address, device and operating-system information, app version, connection and error records, and security or app-integrity signals used to operate the service and prevent abuse.
• Notifications: device push tokens, notification preferences, and delivery information when you enable relevant features.
• Purchases and rewards: product and transaction identifiers, receipts or purchase-verification records, reward claims, and associated account records. Payment details are processed by the store or payment provider; we do not receive full card numbers from app-store purchases.
• Advertising: depending on platform, settings, and consent, advertising providers may process device or advertising identifiers, IP address, approximate location inferred from IP, ad interactions, and consent signals to deliver, measure, and protect advertising. We also process information needed to verify optional ad rewards.
• Forum information: username, email address, password stored in hashed form, profile choices, posts, replies, moderation reports, preferences, and security records. Forum and game accounts are separate.
• Support and privacy requests: your contact email, request category, optional player identifier, message, correspondence, verification information, and request reference. Please do not submit passwords, full payment-card details, or identity documents unless we specifically explain a necessary and proportionate verification method.

2. How and why we use information

We use information to create and authenticate accounts; provide matches, progression and social features; deliver purchases and rewards; operate and moderate the forum; respond to support and privacy requests; send requested or service-related notifications; diagnose faults; prevent cheating, fraud, spam and unauthorized access; and comply with legal obligations.

We seek meaningful consent where required. Where other legal bases apply, processing may be necessary to perform our agreement with you, meet legal obligations, or pursue legitimate interests such as service security and reliability, subject to your rights. Optional advertising and device permissions are handled through the applicable consent and permission controls. We do not treat a privacy request as consent to marketing.

3. Service providers and disclosure

We use providers to operate the service. Depending on the platform and feature, these include:

• Google Firebase: account authentication and app-verification services.
• Microsoft PlayFab and associated cloud infrastructure: player and multiplayer services.
• Hetzner: hosting of website and application services.
• Cloudflare: DNS, encrypted traffic delivery, caching, security, and automated-abuse protection.
• Appodeal and its enabled advertising partners: delivery and measurement of in-app ads, subject to applicable choices.
• Google Play and Apple services, where used: app distribution, purchases, sign-in, or push-notification infrastructure.
• Email delivery providers: support correspondence and account-related messages.

Providers process information under their applicable terms and privacy arrangements. Advertising partners and app stores may also act independently for their own disclosed purposes. You can review provider information at Firebase Privacy, Microsoft Privacy, Cloudflare Privacy, and Appodeal Privacy.

We may disclose information when legally required, to investigate or prevent unlawful activity or serious abuse, to protect people's rights or safety, or as part of a lawful business transfer with appropriate privacy protections. We do not sell support requests or account information as a business activity. Advertising-related processing is described above and may be subject to additional regional choices.

4. Public profiles and community posts

Display names, avatars, rankings, club information, and other information presented as public may be visible to players. Public forum posts can be read by visitors and indexed by search engines. Avoid including personal contact information in public content. Deleting an account does not automatically erase copies made independently by other people or search engines; contact us about personal information in content we control.

5. Cookies, local storage, and your choices

The public website does not use advertising pixels or optional analytics tracking. The website and our security providers may use necessary cookies or similar mechanisms for request verification and abuse prevention. The forum uses cookies for sign-in, sessions, security, and preferences. The app uses local storage for settings, cached content, and session-related features.

Advertising within the app is separate from the marketing website. Where applicable, use the app's consent controls and your device's advertising and privacy settings to manage advertising choices. You can manage notification permissions in your device settings. Blocking necessary storage may prevent sign-in or other requested functions from working. If you cannot locate a privacy control, contact support.

6. Retention and deletion

We keep personal information only as long as needed for the purposes described here, taking account of account activity, service requirements, legal obligations, security, and disputes. Different records have different retention needs; deleting a player profile does not require us to erase transaction evidence that we must lawfully retain.

• Accounts and game records: retained while needed to provide the account and related services, then deleted or de-identified after a verified request unless a specific lawful retention reason applies.
• Public forum contributions: retained to maintain discussions until removed or de-identified as appropriate. We review personal information contained in posts when handling deletion requests.
• Website support submissions: pending requests are retained for handling. Closed requests are scheduled for removal from the website request system after 90 days unless a documented legal or dispute hold applies. Related email correspondence may be retained as needed to resolve the matter.
• Website anti-abuse records: short-lived rate-limit and verification data are used to protect the forms; raw message bodies and email addresses are not written to ordinary HTTP access logs.
• Backups: deleted information may remain in access-restricted backups until those backups expire or are replaced. If a backup is restored, applicable deletion actions must be reapplied. We do not restore deleted information for normal use merely because a backup exists.

Where information must be retained after a request, we explain the relevant categories, reason, and applicable period or criteria. Access to retained information is limited to its continuing lawful purpose.

7. Access, correction, withdrawal, and deletion requests

You can ask to access or correct your personal information, withdraw consent where applicable, or request deletion of your account or information. Depending on applicable law, you may also have rights to portability, restriction, objection, or additional advertising choices. Withdrawal of consent does not affect processing that was lawful before withdrawal and may mean that we cannot continue a feature that needs the information.

Use our dedicated request page or email [email protected]. You do not need a forum account or to reinstall the app to submit a request. Please identify whether the request concerns the game, forum, website, or all of them. We may request proportionate information to verify ownership, especially before disclosing or deleting account data. We do not ask for your password.

We respond within the time required by the law applicable to your request and explain any lawful extension, limitation, or refusal. Where GDPR applies, the usual response period is one month, subject to its permitted extensions. Canadian access requests are handled within the applicable statutory period. A request acknowledgement confirms receipt; it does not mean deletion has already occurred.

8. International processing and safeguards

8ballUniverse operates from Canada and uses infrastructure and providers in other countries, including Europe and the United States. Information may be processed outside your province or country and may be subject to lawful access by authorities there. Where required, we use appropriate contractual and other safeguards for international transfers.

We use measures appropriate to the information and risks, including encrypted transport, access controls, separate service credentials, restricted administrative access, and security monitoring. No internet service can guarantee absolute security. Contact us promptly if you suspect a privacy or security issue.

9. Children and guardians

Use of the service must comply with the age and parental-authorization requirements described in our Terms and applicable law. Where a child's consent is not legally sufficient, the appropriate parent or guardian must provide any required authorization. If you believe a child has provided personal information without the required authorization, contact us so we can investigate and take appropriate action. Please do not include unnecessary information about a child in a public forum post.

10. Concerns, complaints, and updates

Our privacy contact is [email protected]. We will investigate concerns about our information-handling practices. You may also contact the Office of the Privacy Commissioner of Canada, an applicable provincial privacy regulator, or the relevant supervisory authority where you live.

We may update this policy as our services or practices change. We will update the effective date and provide additional notice or obtain consent where required for material changes.

8ballUniverse · Canada
[email protected]
Contact support · Request account or data deletion