Pengame app privacy
Who is responsible
CHATBOO PTY LTD operates the Pengame iPhone, iPad and Android apps covered by this notice. Contact admin@chatboo.app for privacy questions or requests. Pengame’s existing website and any later Pengame-operated service have their own notices. Last updated 28 October 2026.
Information kept on your device
The apps store saved battle identifiers, lyric moments, theme and playback positions in local app storage. These choices are not uploaded to a Pengame account or preference service. The catalogue, lyrics and explanations are bundled with the app and search runs locally. Version 0.1.1 caches up to 64 thumbnail images for up to 24 hours and reuses them on battle pages; the operating system can clear the cache earlier. Optional accounts and votes use the separate service described below. Version 0.1.1 has no public-posting feature. Later versions can offer moderated comments and profiles, as described below. The apps have no payment service or app-owned analytics/advertising SDK. Your operating system may separately handle backups or device transfers.
Accounts and community votes
If you create an account, AWS Cognito processes your email address, password, verification/recovery codes and sign-in information. CHATBOO does not retain your plaintext password in the app. Account identifiers link your private ballots to public aggregate counts. Individual votes and email addresses are not public. Public catalogue and results requests disclose network/device information to AWS; signed-in requests also carry an authentication token. Browsing and video remain available without creating an account.
Account deletion and retention
Active accounts and votes remain until you request deletion or withdraw a vote. Use Settings → Account → Delete account, or visit the account-deletion page below for help. Deletion first blocks further account changes, then removes your profile, linked comments/reports and votes, updates even closed totals and deletes the Cognito account. Request records and deletion tombstones expire after seven days; database expiry can take longer to complete. Database recovery copies may retain deleted data for seven days and are not used to restore deleted accounts to the service. Service logs expire after seven days; failed deletion-delivery records can remain for 14 days while investigated. If deletion is requested directly through AWS instead, daily reconciliation normally starts cleanup within 24–48 hours. Unverified signups older than 30 days are removed by the daily job. Contact admin@chatboo.app if a deletion request is delayed.
Account processing and security
The account/voting service runs on AWS in us-east-1. CHATBOO uses email/password accounts to provide the voting feature you request, verification/recovery messages to maintain access, and limited operational records to protect the service and process deletion. App sign-in tokens stay in memory and are cleared on sign-out or process exit; passwords are not saved by the app. Your device or password manager may offer its own password saving. No account email, ballot or authentication token is intentionally written to application logs. Only the operator can publish or close community polls.
YouTube and thumbnails
The iOS 0.1.1 (36) app asks for system tracking permission before loading YouTube’s embedded player or downloading new thumbnails from YouTube. Bundled and cached artwork can display locally. Refusal or restricted tracking uses an external link to YouTube or your browser; lyrics, saved moments, accounts and voting remain available. Android and earlier iOS 0.1.1 builds load YouTube when a battle opens and can download catalogue thumbnails. Earlier 0.1.0 builds ask before loading the player. Provider requests send your IP address, browser/device information and selected image or video. Google/YouTube may use cookies or similar storage, identifiers and viewing activity for playback, personalised advertising, measurement and security, under Google’s Privacy Policy. The apps do not request your Google password or Google account permissions. YouTube may show ads.
Player controls
You can read the prepared lyrics and explanations, use an available embedded player or open the original video on YouTube. On iOS 0.1.1 (36), the embedded player uses non-persistent web storage and current tracking permission is checked when the app returns to the foreground. Without permission, a lyric selection updates the external video link without loading an embedded player. Close player removes the embedded player and leaves local artwork. An embedded player is also removed when the iOS app becomes inactive. Loading again requires current permission; you can use external playback without granting it. Closing a player or changing permission does not delete information already held by Google or recall requests already sent. Other Android/earlier iOS player behavior follows the loading choices described above.
Support and published content
If you email CHATBOO, we receive your address, message and voluntary attachments to answer you. We retain app enquiries until the related enquiry and review are complete, then delete them unless a legal obligation or dispute requires longer. Email recovery and backup systems may keep copies beyond mailbox deletion. The apps also display authorised stage names, lyrics, notes and media references; contact CHATBOO about corrections or rights concerns.
When you open these pages
These support, privacy and terms pages use AWS Amplify, with the app configured in us-east-1 and global delivery. Visiting a page discloses your IP address, path/query, time and browser/network information to AWS. CHATBOO’s initial administrator accesses hosting and logs from Australia. AWS documents access-log retention until the hosting app is deleted, potentially years while it stays available. Do not put private information in URLs. The native apps do not send their bookmarks or playback positions to this host.
Processing and purposes
CHATBOO uses information to provide and maintain the apps, answer enquiries, protect the service and address corrections or legal obligations. AWS delivery, processing and support can involve locations outside the UK, including Australia and the United States; the hosting region does not confine all processing. We use AWS’s applicable data-processing terms and transfer safeguards. Google’s separate processing can also be international. Contact CHATBOO about arrangements relevant to your information.
Choices and applicable rights
Where UK data-protection law applies, CHATBOO relies on legitimate interests for service provision, support, security and corrections, legal obligations for required records. You can ask admin@chatboo.app to access, correct, erase or restrict information CHATBOO holds, or exercise applicable objection and portability rights. We may need proportionate information to locate it. Manage local app data through your device and Google-held information through Google. Backups may retain copies. You may complain to the ICO or another applicable authority. Ages 18 and over only.
Comments and reports
If you choose to comment, we store your text, submission time, account link, accepted rules version and review state. Approved comments show publicly under your approved username, or a generated Fan label if you have no approved profile, never your email address. Pending comments are visible to you and the moderation team. Reports store the reporting account link, comment reference, reason and time for moderation. Account deletion removes your comments and reports. Deleted comment text is removed; an account-linked retry record remains until account deletion. Backups may retain removed data for up to seven days. Blocked author identifiers stay on this device until unblocked or app/site data is cleared.
Profiles
Profiles are optional. Your approved username and photo appear beside comments; your email remains private. Photos are cropped and reduced on your device before upload, without the original file or its location metadata. New names and photos stay private to you and the operator until reviewed. Removing your photo removes its public copy immediately. Account deletion removes your profile and releases its username, subject to the recovery-copy retention described above.