Privacy
Privacy Policy
Effective 7 September 2026. This policy covers the ParkBrawl iOS app and parkbrawl.com.
ParkBrawl has no accounts, no advertising, no analytics SDK and no tracking. We are not in the data business, we are in the theme-park-bingo business, and this page is a plain description of the small amount of information the game genuinely needs to work.
The short version
- There is no sign-up. No email address, no password, no name, no phone number, no social login.
- Your device gets a random identifier so the game knows which squares are yours. That is the whole of your identity to us.
- We do not run ads, we do not use an analytics or attribution SDK, we do not touch the advertising identifier (IDFA), and we do not track you across other apps or websites.
- We do not sell or share your information, and we never will.
- ParkBrawl never asks for your location, your camera, your microphone, your photos or your contacts, because it does not need any of them.
- Rooms close after 14 days without play or an explicit resume. Saved game history remains readable.
Who is responsible for your information
ParkBrawl is published by Mike Blom, of 13059 Penshurst Lane, Windermere, FL 34786. If you have any question about this policy or about information held about you, write to support@parkbrawl.com and a person will answer.
What we collect, and why
Every item below exists because a specific part of the game stops working without it. There is nothing collected "just in case".
| What | Why it exists |
|---|---|
| An anonymous installation identifier | When you first open ParkBrawl it creates an anonymous session and a random identifier, stored securely on your device. It is what tells the game that this square was claimed by you and not by somebody else, and it is what lets you close the app and come back to the same game. It is not linked to your name, your email, your Apple Account or any identifier from another app. Delete the app and the identifier goes with it; reinstalling creates a brand new one, with no way back to the old one. |
| Team names and any squares you write yourself | You type a team name so the other players can see who took a square, and a host can add custom challenges to a board. Whatever you type is shown to the other players in that game — so please do not put anything private in it. If you save a board as a pack, we keep the challenges you wrote so you can play them again; a pack is private to your installation, and it is only ever shown to someone else if you give them its code, which adds an independent copy to their app. If you share a result card, its preview shows what will be sent to the app you choose. Team names can be left off. Public rankings are no longer available. |
| What you type when you ask for challenge suggestions | A host with ParkBrawl Plus can describe where they are playing and who is playing, and ask for challenge suggestions. That description, whether the players are adults, children or a mix, and the titles of the challenges already in the pool are sent to OpenAI to draft suggestions back. Nothing that identifies you goes with it. We keep the suggestions that come back and a one-way hash of the request, so a retry does not cost you a second batch; we do not keep the words you typed. If nobody asks for suggestions, none of this happens. |
| Gameplay events | Which squares were claimed and released, by which team and when, the score, and how the game ended. This is the game — it is what draws the shared board, the activity feed and the result, and it is what makes the timing of a Speed Run authoritative rather than something a device asserts about itself. |
| A push notification token, only if you allow notifications | If you say yes to notifications, the app registers a push token with Expo's push service and stores it with us, along with whether the device is iOS or Android. It is used to tell you a friend has claimed a square or a game is about to start, nothing else. Say no, or turn notifications off later in iOS Settings, and no token is kept — the game still works, with in-app alerts instead. The app also tells the server when it is on screen, purely so it does not send you a push about something you are already looking at. |
| Subscription status | If you buy ParkBrawl Plus, our subscriptions provider RevenueCat tells us whether this installation currently has an active subscription. That yes-or-no answer is what lets you host a game. We never see your payment card, your billing address or your Apple Account — Apple handles the purchase and never gives those to us. |
| Ordinary server logs | Like every service on the internet, our hosting provider records technical request information, including IP addresses, for security and to diagnose faults. These are kept for a short period by the provider and are not used to build any profile of you. |
What we deliberately do not collect
No name. No email address. No password. No date of birth. No phone number. No contacts. No photos or camera access. No microphone access. No location — ParkBrawl never asks where you are, and does not check whether you are really in the park. No advertising identifier. No device fingerprint. No cross-app or cross-site tracking of any kind.
There is no third-party advertising SDK, analytics SDK or attribution SDK in the app. We are not measuring you.
Who else is involved
Running the game needs a handful of services. Each one is listed here with exactly what it receives. None of them is paid for your data, and none of them is permitted to use it for their own purposes.
| Service | What it does, and what it gets |
|---|---|
| Supabase | Hosts our database and the live connection that keeps everyone's board in sync. It holds everything described above, because it is where the game itself lives. |
| RevenueCat | Manages subscriptions on top of Apple's In-App Purchase. It receives your anonymous installation identifier and the purchase information Apple gives it, and tells us whether a subscription is active. |
| Expo | Delivers push notifications, and delivers app updates. It receives your push token and the text of the notification being sent, if you have allowed notifications. |
| Apple | Sells and renews the subscription, and delivers the app. Your purchase is between you and Apple under Apple's own privacy policy. We never receive your payment details. |
| OpenAI | Drafts challenge suggestions, and only when a host with ParkBrawl Plus asks for them. It receives what the host typed about what is available where they are playing, whether the players are adults, children or a mix, and the titles of the challenges already in the pool. No identifiers and no personal information are sent. The request is checked by OpenAI's moderation service first, and an unsuitable one is refused. If the description names a public venue, OpenAI may look that venue up on the web to get the details right. What comes back is a set of drafts a person picks from — nothing is put on a board automatically. Ask for nothing and nothing is sent. |
| themeparks.wiki | A public source of ride wait times. Our server asks it what the queues look like. Nothing about you is sent — it is a one-way read of public park information, and it never learns that you exist. |
We may also disclose information if the law genuinely requires it, or to protect the safety or rights of players. If ParkBrawl were ever sold or transferred, this information would move with it and this policy would continue to apply until you were told otherwise.
How long we keep it
- Live game data is removed on a 30-day cleanup cycle after closure.Before that cleanup, we save the board, team names, scores, result, timing and activity history so players can revisit their games and we can answer support questions.
- Unfinished rooms close after 14 days without play or an explicit resume.Successful play or an explicit resume by any participant restarts that shared timer. Viewing history or background updates does not. Completed games close immediately; closed games cannot be continued, but their history remains readable.
- Legacy posted Speed Run records are no longer publicly accessible and are deleted 30 days after their original posting date. Personal game history remains available.
- Packs you save are kept until you delete them, or until 18 months go by without one being used. A pack is saved on the installation that made it, plus its code — deleting the app loses a pack unless you kept its code, and we cannot recover one for you, because there is no account to look it up against. Deleting your data deletes your packs outright.
- Push tokens are switched off after 90 days without the device being seen, and deleted after 180.
- Saved game history has no fixed expiry. It is linked to the anonymous identifier for the installation that played, so My Games can show the right records. It also helps us answer support questions, investigate disputed results and understand how games are played. Delete my data in the app removes that link and anonymizes your team names. Shared game records remain available to other participants. You can also contact support@parkbrawl.com about your data.
- Your anonymous identifier lives on your device for as long as ParkBrawl is installed.
Your choices and your rights
Deleting everything
Delete the ParkBrawl app from your device. That destroys the anonymous identifier held on it, and with it the only link between you and anything on our servers — the remaining game data becomes an orphaned record that deletes itself on the schedule above. If you would rather we deleted it immediately, write to support@parkbrawl.com from the device in question and we will help.
Notifications
Turn them off in iOS Settings at any time. The game carries on working; you simply see alerts inside the app instead.
Subscription
Manage or cancel ParkBrawl Plus in your App Store subscription settings. Cancelling stops the renewal; it does not delete anything by itself.
Access, correction and complaints
Depending on where you live you may have the right to ask what information we hold, to have it corrected or deleted, or to complain to a data protection regulator. Write to support@parkbrawl.com and we will do our best to help. Be aware that because there is no account, we may not be able to connect a request to a particular installation without something from you that identifies it, such as a room code from a game you played.
Children
ParkBrawl is a family game and plenty of the people holding the phone will be children. That is exactly why it collects so little: there is no profile to build, no name to give, no message to send to a stranger, and no advertising anywhere in it.
ParkBrawl is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. The only thing a player can type that anybody else sees is a team name and a custom challenge, so please make sure a young player knows not to put a real name or anything personal there. If you believe a child has given us information they should not have, write to support@parkbrawl.com and we will delete it.
Security
Your anonymous session is held in your device's secure storage. Traffic between the app and our servers is encrypted in transit, and the database enforces at the row level which player may read or change what — a client cannot read another game's board or claim a square on somebody else's behalf. No system is perfectly secure, and we will not pretend otherwise, but there is also remarkably little here worth stealing.
Where information is held
Our providers operate internationally, so information may be processed in a country other than your own, including the United States. Wherever it goes, this policy applies to it.
Changes to this policy
If we change what ParkBrawl collects, we will update this page and change the effective date at the top. If a change is significant, we will say so in the app rather than hope you noticed.
Contact
Questions, corrections, deletion requests, or a suspicion that something here is wrong: support@parkbrawl.com. See also the support page and the terms of use.