Plasta Privacy Policy

Effective: 31 July 2026 · Last updated: 16 October 2026 · Applies to Plasta for iPhone, version 1.0 and later

This policy explains what information Plasta collects, why, who else processes it, and what you can do about it. It describes what the app actually does — not what a game like it might do.

1. Who operates Plasta and how to contact us

Plasta is an independent iPhone game published on the App Store. It is operated by Chaz Mitchell, an individual developer based in California, United States, who is responsible for the information described in this policy.

For any privacy question, request or complaint — including access and deletion requests — write to realplastaapp@gmail.com. This is the same address used for general support, and it is the only contact channel for Plasta.

2. What information we collect

2.1 Account identity

• An account identifier. Plasta signs you in automatically the first time you open the app, before you choose anything, so the game works straight away. This creates an account with a random identifier. Every other record described here is linked to that identifier.
• Your email address, if you sign in with Apple or Google. It is stored in a private record that only your own account can read; it is not part of your public profile and other players cannot see it. If you use Apple’s Hide My Email, we receive and store the private relay address Apple gives us instead of your real one.
• Which sign-in methods are linked to your account — that is, whether the account uses Apple, Google, or neither.
• Your name from Apple, if you sign in with Apple and choose to share it. If your profile does not already have a name, the name Apple provides may be used as your starting display name, which is visible to other players. You can change it at any time.

2.2 Profile you create

• A display name, or a unique username if you are signed in with Apple or Google.
• Avatar initials derived from your name.
• A short player code used so friends can find you.
• The date your account was created, and a last-seen timestamp refreshed while you have the app open, which is how the game shows whether a player is online.

2.3 Gameplay and progress

• Your level, XP and lifetime XP.
• Your balances of the two in-game currencies, Bucks and Diamonds, and lifetime totals earned and spent.
• Match statistics — games played, wins and losses, win rate, streaks, and a range of Plasta-specific counters such as cards and clubs captured and highest match score.
• Achievements you have unlocked and your progress towards them.
• Ranked play data — your rating, rank, wins and losses, and a short history of your most recent ranked results.
• Cosmetics you own and the items you have equipped.

2.4 Friends and social

• Friendships and friend requests you send or receive, stored as links between account identifiers.
• Match invitations you send or receive, which include the sender’s display name and the lobby code.

2.5 Online match data

While you are in an online lobby or match, the state of that game is stored so it can be shared with the other players in it. This includes the lobby code, the players seated in it and their display names, and the live state of the game — the board, the deck, moves, scores and each player’s hand. It exists so the match can be played, and is removed when the match ends and the players leave. The lobby also records each player’s app platform, app version and build number, and the version of the online-play protocol the app uses, which our server uses to check whether that version of the app may join online play.

When a Ranked match ends, our server keeps a separate record of its outcome, so that the same match can never be settled twice. It holds the lobby code, the account identifiers of both players, the result, each player’s rating and rank before and after the match and how the change was worked out, the final scores when the match was played to the end, when and why the match ended, and whether either player’s app reported a different result. It also keeps each player’s app platform, version, build and online-play protocol version, to help diagnose problems between app versions. No player can read that record.

2.6 Purchases

If you buy Diamonds, we record which pack was purchased, how many Diamonds were granted, the quantity, Apple’s transaction references, whether the purchase came from Apple’s live or test environment, the purchase date, when it was fulfilled, and whether you were signed in or playing as a guest at the time. Your profile also holds a running total of Diamonds purchased and the date of your most recent purchase. This information is linked to your account.

In Plasta 1.0.4 and later, if you buy a Deck Design or a Face Style with Bucks, our server records which item it was, its price in Bucks, your Bucks balance immediately before and after the purchase, and when it happened. It creates that record in the same step that takes the Bucks and adds the design to your account: either all three happen or none does, and each design can be bought only once per account. This record is linked to your account and cannot be read by any player, including you.

If you bought as a guest, the account it is linked to is a guest account — a random identifier with no email address, name or Apple ID attached (see section 9). We do not ask you to identify yourself in order to buy, and we do not learn who you are by your buying.

We never receive your payment card details, your billing address, or your Apple ID. See section 10.

2.7 Technical and diagnostic information

• Server logs. Our server functions record operational events — for example a granted or duplicate Diamond purchase, a Deck Design or Face Style purchase (Plasta 1.0.4 and later), a Daily Rewards claim or a refused claim, Diamonds moved from a guest account, or how a Ranked match was settled. An entry can include your account identifier (or its first few characters), the pack or item involved, the number of Diamonds or the price in Bucks, the Daily Rewards month and day claimed, a lobby code, and Apple’s transaction reference. These logs are held by our hosting provider for 30 days.
• Network information seen by our providers. When the app connects to a service described in section 6, that provider necessarily sees your device’s IP address and request details in order to answer. When the app calls our server functions — for example for a purchase, a Ranked result or Daily Rewards — our hosting provider’s request logs record the IP address, the app’s user-agent string and the time of each request, and keep them for 30 days. We do not otherwise store IP addresses, and we do not use them to identify or profile players.
• Local diagnostic snapshots. The app keeps a small technical snapshot of recent online-play activity on the device to help diagnose connection problems. It stays on your device — the app does not transmit it anywhere.

2.8 Usage analytics

From version 1.0.2, Plasta uses Firebase Analytics so we can see how many people are using the game and which parts of it they play. This is our own measurement of our own app. It is not advertising, and it is not shared with anyone for advertising.

Two kinds of record are involved:

• Collected automatically by Firebase — that the app was opened, when a session started, and roughly how long it was in use. Firebase also generates a random app-instance identifier for the installation, which is reset if you delete and reinstall the app. It is not the device advertising identifier, and it is not your Plasta account identifier.
• Sent by Plasta — a small, fixed set of events. Match events: one when a match starts and one when it ends. Each carries only: the mode (against the computer, Quick Match, a private game, or Ranked), whether it was a classic or team table, whether it was online, whether it was ranked, how many seats were at the table, and — when the match ends — whether you won, lost or tied, or the match ended with no result, and why it ended. Daily Rewards screen events: if Daily Rewards is available in the app, opening or using that screen sends events recording that it was viewed and whether it opened by itself or from the menu; that a claim was started, succeeded or failed; and that a milestone was reached. These carry only: coarse bands for which part of the month it is (for example days 1–5) and roughly how many days have been claimed (for example 5–9); the kind of reward (such as Bucks or Diamonds), never its amount; the milestone reached; the version number of the reward schedule; and a short error code if a claim failed.

What is never sent. Your display name, username, email address, account identifier, guest identifier, lobby code, match identifier, Bucks or Diamond balances, the amount of any reward, rating or rank, the cards you held, your friends and anything you type. We do not set an analytics user identifier, so these records are not joined to your Plasta account.

Firebase Analytics necessarily sees your device’s IP address in order to receive the events, and Google derives a coarse, country-level location from it. We do not receive or store your IP address.

2.9 Daily Rewards

From 1 October 2026, Plasta 1.0.4 and later offers Daily Rewards: once each reward day you can claim that day’s reward, and logging enough days in a month earns extra milestone rewards. When you claim, our server records the following, all of it linked to your account identifier:

• Your attendance for the current month — which days of the month your account has claimed and when each was claimed, how many days are logged, which milestone rewards you have received, your most recent claim, and the version of the reward schedule. It is replaced by a fresh one the first time you claim in a new month.
• A record of each individual claim — your account identifier, the month and day claimed, the date and our server’s time of the claim, the version of the reward schedule, and what the claim gave you: the Bucks, Diamonds, XP or items, and any milestone reward. It holds no name, email address or balance. There is at most one per account per reward day, it cannot be changed once written, and these records are kept for every month you claim in, not only the current one.
• The time of your latest claim, on your profile. Like the rest of your profile, other signed-in players can read it (see section 5). The rewards themselves are added to your Bucks, Diamonds, XP, level and cosmetics described in 2.3.

Why the claim records exist. They are how our server makes sure each day is paid only once — however many times a claim is retried, on however many devices at once, and whatever your device’s clock says — and how we detect and investigate duplicate or fraudulent claims. No player can read the attendance or claim records, including you: only our server reads and writes them, and the app shows your calendar from what the server tells it.

Server time, not your device’s. Whether you can claim, which day of the month it is, when each reward day begins (12:00 PM Pacific Time) and when a new month starts are all decided by our server’s clock. The app sends no date, time or time zone when it checks or claims, and changing your device’s date, time or time zone has no effect on them.

Deleting your account deletes all of these records — see section 11.

2.10 Lobby chat, voice messages and reports

From Plasta 1.0.5, players in the same private lobby — one you join with its code or an invitation — can chat by text and send short hold-to-talk voice messages, from the lobby through the match and its results. There is no chat in Quick Match, Ranked or games against the computer, and no chat with players outside your lobby.

• Text messages. What you type (up to 200 characters), your account identifier and display name, and the time. Our chat service, run on Cloudflare (section 6), checks each message against a list of offensive words and refuses a message that contains one — it is never changed, and a refused message reaches nobody. It sends accepted messages to the players connected to that lobby and keeps the last 10 in its memory, so that players who join or reconnect can see them. They are lost when the lobby’s chat goes idle, and are never written to storage or to logs.
• Voice messages. Recorded on your device only while you hold the talk button, for up to 30 seconds, and kept in the app’s temporary folder only until they are sent or cancelled, then deleted. Our chat service checks that the recording is valid audio and passes it straight to the players connected to the lobby at that moment, you included. It does not store, log or replay voice messages, and players who join later do not receive them. So that voice messages play one at a time in order, the service briefly keeps which account sent each one and when it plays — no audio — and deletes that when its turn ends. Voice messages are not transcribed or analysed.
• Reports. If you report a player, we store your account identifier, the reported player’s account identifier, the lobby code, the reason and the kind of report you chose (text, voice or general), and the time. If you choose Include recent chat, the report also holds up to the last 10 messages in your chat, with each sender’s display name and account identifier (at most 4,000 characters). No audio is ever attached — we do not have it. You can file one report about each player per lobby. No player can read reports, including you; only we can, and we use them to review what happened and act on it (see section 11 for how long we keep them).
• Mute and block lists stay on your device, linked to your account; nothing about them is sent to us or to the other player.
• The microphone. Plasta asks for microphone access the first time you press the talk button, and uses it only while you hold that button. You can refuse, or turn it off later in iOS Settings › Plasta; text chat still works.

3. How the information reaches us

• Automatically, when you first open the app — the account identifier described in 2.1.
• From you — the name you choose, the friends you add, the matches you play, and, in private lobbies, the messages you type, the voice messages you record and the reports you file (2.10).
• From Apple or Google, if you choose to sign in with them — your email address, and from Apple your name if you share it. We only ever receive what that sign-in provides; Plasta cannot read anything else in your Apple or Google account.
• From Apple, when you make a purchase — the signed confirmation of the transaction, which we check to decide how many Diamonds to grant.
• Generated by playing — your statistics, achievements, level and match results, and, if you use Daily Rewards, the attendance and claim records described in 2.9.
• Automatically, by the analytics software in the app — the opening, session and match-mode records described in 2.8, and, if Daily Rewards is available in the app, the Daily Rewards screen records described there.

4. Why we use each kind of information

We do not use any of this for advertising, for profiling, or to track you across other apps or websites.

5. What other players can see

Plasta has friends, leaderboards and online play, so parts of your profile are readable by other people using the app. We would rather be specific about this than leave you to assume.

Any signed-in Plasta player can see the following about your account, whether or not they are your friend:

• your display name or username, and your avatar initials;
• your player code;
• your level and XP;
• your match statistics and your ranked rating, rank and recent ranked results;
• your achievements;
• your cosmetics and equipped items;
• your Bucks and Diamonds balances, and the total number of Diamonds the account has purchased and when it last made a purchase;
• whether the account signs in with Apple or Google, or is a guest account;
• when the account was created, and when it was last online;
• when the account last claimed a Daily Reward (Plasta 1.0.4 and later).

Your email address is not visible to other players. It is held in a private record that only your own account can read. Neither are your Daily Rewards attendance and claim records, nor anything else not listed above.

Players in the same online match additionally see the match itself — the display names of everyone seated, and the state of the game as it is played.

In a private lobby (Plasta 1.0.5 and later), the other players in that lobby also see the text messages you send and hear the voice messages you send, with your display name. We cannot stop another player from recording their own screen or sound.

If you would prefer not to have this information visible, do not sign in and do not use the online features, or delete your account.

6. Service providers who process data

Plasta has no servers of its own. It relies on these providers, which act as processors for us:

Google (Firebase and Google Cloud)

• Firebase Authentication — creates and manages your account and sign-in, and holds the email address associated with your Apple or Google sign-in.
• Cloud Firestore — the database holding your profile, progress, friends, match data, Daily Rewards records and purchase records.
• Cloud Functions and Cloud Logging — verifies Apple purchase confirmations and grants Diamonds, processes Deck Design and Face Style purchases made with Bucks (Plasta 1.0.4 and later), runs Daily Rewards claims and deletes an account’s Daily Rewards records when the account is deleted, settles Ranked matches, checks whether your app version can join online play, and records the operational logs described in 2.7.
• Google’s content network. The app loads the Firebase software libraries and its fonts from Google-operated addresses each time it starts. This means Google receives your device’s IP address and basic request information when you open Plasta, before you do anything in the game. We do not receive that information, and it is not used by us for any purpose.
• Google Sign-In — only if you choose to sign in with Google.
• Firebase Analytics — receives the usage records described in section 2.8, so we can measure how many people use Plasta. Google processes them on our behalf and, as with every other connection, sees your device’s IP address in order to do so.

See Firebase’s privacy information and the Google Privacy Policy. Google retains technical information such as request logs according to its own practices, which we do not control.

Cloudflare

• Cloudflare Workers and Durable Objects (Plasta 1.0.5 and later) — run our lobby chat service, which relays text and voice messages between the players in a private lobby as described in section 2.10. To do so Cloudflare necessarily processes your device’s IP address and connection details. Our own logging on this service is turned off; Cloudflare keeps its own technical records of requests under its privacy policy.

Apple

• Sign in with Apple — only if you choose it. Apple tells us your account identifier and, depending on your choice, your email (real or private relay) and name.
• The App Store and StoreKit — distributes the app and processes every purchase. Apple, not Plasta, handles your payment. Apple keeps its own transaction and billing records, which it controls and which are governed by Apple’s Privacy Policy.

We do not sell your personal information, and we do not share it with anyone other than the providers above and the other players described in section 5. We may disclose information if we are legally required to.

7. What Plasta does not do

All of the following are true of the app as published:

• No advertising. There are no ads and no advertising software in the app.
• No tracking. Plasta does not track you across other companies’ apps or websites, does not use the device advertising identifier, and never asks for tracking permission. The usage analytics described in section 2.8 measure this app only; they are not linked to your account, are not combined with data from anyone else, and are not shared for advertising.
• No analytics that identifies you. The analytics records carry no name, email, account identifier, balance, rank, match or lobby code, and no analytics user identifier is set.
• No crash-reporting or monitoring service.
• No cookies.
• No location, contacts, photos, camera, health or calendar access. The app requests none of these permissions. The microphone is used only for voice messages in private lobbies (Plasta 1.0.5 and later), only while you hold the talk button, and only if you allow it.
• No selling or renting of personal information, and no sharing for advertising purposes.

8. Information stored on your device

Plasta stores the following in the app’s own storage on your device, so the game works and starts quickly:

• Your sign-in record, kept by Firebase Authentication so that you stay signed in between sessions. It holds your account identifier, the tokens that keep you signed in, and — for accounts signed in with Apple or Google — the email address and name that provider gave us. It is removed when you sign out.
• A cached copy of your own profile — name, level, currencies, avatar initials and ranked record — so the game can display it before it has reloaded from the network.
• Your settings, such as volume.
• Progress that is only kept on the device: daily challenge progress, tutorial and onboarding state, and unclaimed match rewards.
• A copy of the cosmetics you own and have selected, and of your achievement progress, so they appear straight away. The record that counts is the one on your account — in Plasta 1.0.4 and later, Deck Designs and Face Styles in particular are recorded on your account by our server when you buy them.
• A note of a purchase that has been made but not yet credited, so that it can be recovered.
• The local diagnostic snapshot described in 2.7, which holds recent online-play events, connection state and any error messages from the last session.
• In Plasta 1.0.5 and later, the players you have muted or blocked in lobby chat, linked to your account identifier, and — only while it is being recorded and sent — a voice message in the app’s temporary folder, deleted once it is sent or cancelled.
• If Daily Rewards is available, a note of the account identifier and the reward day for which the Daily Rewards screen last opened by itself, so that it opens by itself at most once a day. It is not removed when you sign out or delete your account.

None of this is transmitted other than as described elsewhere in this policy. Deleting the app removes it from the device.

Note that signing out clears the progress that is only kept on the device — daily challenge progress in particular is not stored in the cloud and is not restored when you sign back in.

9. Guest accounts

Plasta signs you in automatically as a guest the first time you open the app, so you can play without creating anything. Please note what that does and does not mean:

• A guest account is a real account with a random identifier and a profile stored in the cloud, not purely local play. Its name, level, statistics and other profile fields are visible to other players in the same way as any other account — see section 5.
• A guest account has no email address attached, and we hold no contact information for it.
• Guest accounts cannot claim a unique username. They can buy Diamonds — we do not ask you to register, or to give us a name or an email address, in order to make a purchase.
• Guest progress cannot be recovered. The only thing that identifies a guest account is the sign-in state stored in the app on that device. If you delete Plasta, move to another device, or the app’s stored data is cleared, that account becomes unreachable — by you and by us. We cannot restore it, and we do not promise otherwise. This applies to Diamonds bought as a guest as well as to progress.
• A purchase made on a guest account is recorded against that account’s random identifier, and against no other identity: there is no email address, name or Apple ID attached to it, and we have no way to connect it to you as a person.
• You can turn a guest account into a permanent one by signing in with Apple or Google from your Player Profile, which keeps your existing progress. If you sign in to a Plasta account you already had, the Diamonds remaining on the guest account are added to it once, and the guest account’s balance is emptied. Only Diamonds move. The guest account’s Bucks and any cosmetics it obtained — including table felts, Deck Designs and Face Styles — stay with the guest account.

Guest accounts can be deleted in the app in the same way as any other account.

10. Purchases

• Apple processes all payments. Purchases are made through your App Store account using Apple’s purchase sheet, inside Apple’s system.
• Plasta never receives your full payment card details, your billing address, or your Apple ID, and cannot see them.
• What we receive is Apple’s cryptographically signed confirmation that a specific purchase took place. We check it and record the fields listed in 2.6.
• Your account is identified to Apple only by a one-way scrambled reference, not by your Plasta identifier.
• Purchase records are linked to your Plasta account — a registered one if you are signed in, or a guest one if you are not — and are used to grant what you bought and to make sure the same purchase is never credited twice.
• If you later sign in to a Plasta account you already had, we record that the guest account’s Diamonds were moved to it, so that they can never be moved a second time. That record holds the two account identifiers and the amount, and nothing else.
• Apple keeps its own separate record of your transaction and billing history, which it controls. Deleting your Plasta account does not change Apple’s records.
• We cannot see the price you paid — it is not recorded in our records. Refunds are handled by Apple, as explained under Purchases on the Plasta support site.
• In Plasta 1.0.4 and later, Deck Designs and Face Styles are bought with Bucks, not real money. Apple is not involved in those purchases. The record described in 2.6 is created by our server in the same step that takes the Bucks.

11. How long we keep information

We keep your account information for as long as your account exists. When you delete your account, the information described in Account and Data Deletion is removed from our database immediately. Our database also keeps automatic recovery copies — a rolling seven-day history of changes and a daily backup kept for seven days — which exist to recover the database after a fault. Deleted information can remain in those copies for up to seven days, after which it is gone.

Some records are kept beyond that point:

• Records of Diamond purchases are retained after account deletion. They are what prevents a purchase being credited twice, and are the kind of financial record ordinarily kept for tax and fraud-prevention purposes. They contain an account reference, product and transaction identifiers, and dates — no payment details.
• Records of Deck Design and Face Style purchases (Plasta 1.0.4 and later) are kept after account deletion as well. Each contains an account reference, the item, its price in Bucks, the Bucks balance before and after the purchase, and when it happened. The design itself is removed with your account.
• Ranked match outcome records are kept after account deletion. Each contains the details described in 2.5, including both players’ account references, the lobby code and each player’s app platform, version and build. These records exist so that a finished match can never be settled a second time.
• A claimed username may remain reserved, so it does not become available to someone else.
• Server logs are held by our hosting provider for 30 days and then deleted automatically. Daily Rewards log entries identify the account by only the first six characters of its identifier.
• Online lobby and invitation records that include your name are cleared as matches finish and invitations lapse, rather than at the moment you delete your account.
• Reports (section 2.10) are reviewed by hand by the developer, normally within 48 hours. A report is deleted within 30 days after its review is finished, unless it is needed for a safety or legal matter that is still unresolved, in which case it is kept until that matter is resolved. Deleting your account does not delete reports you filed or reports about you; they are deleted on this schedule.

Lobby chat and voice messages (section 2.10) are not kept: the last 10 text messages exist only in our chat service’s memory while the lobby’s chat is active, and voice messages are never stored.

Daily Rewards records (section 2.9) are not among them. They are kept while your account exists, including claim records from earlier months, because they are what stops the same day being paid twice. When your account is deleted, our server automatically deletes your attendance record and every claim record, and the time of your latest claim goes with your profile. None of them is kept afterwards, in identifiable or de-identified form, other than in the seven-day recovery copies and the server logs described here. (Our server deletes them when the account’s sign-in record is removed, which is part of deleting the account; if the app tells you the sign-in record could not be removed, they are deleted when it is.)

We have not adopted a single fixed retention period for every category. Where information is no longer needed for the purpose it was collected for, we remove it or it is removed by the process that created it. If you want to know what is held about you, write to realplastaapp@gmail.com.

12. Deleting your account and data

You can delete your account and its data yourself, from inside the app, at any time:

Player Profile (tap your player name or level badge at the top of any menu screen) › ACCOUNT › Delete Account › type DELETE › Delete Forever.

This is available for guest accounts as well as signed-in ones, and you do not need to contact us first. Deletion is immediate and permanent.

If you signed in with Apple or Google, you will be asked to confirm with that same service first — before anything is removed, so cancelling costs you nothing. For Sign in with Apple, that confirmation also lets Plasta release your Apple authorization, so the app is disconnected from your Apple Account as part of the deletion rather than being left attached.

If you cannot complete it in the app, email realplastaapp@gmail.com and we will do it for you.

Reports filed in lobby chat are not removed by deleting an account; they are kept and deleted as described in section 11.

Our Account and Data Deletion page on the Plasta support site sets out exactly what is removed and what is kept.

13. Your choices

• Play without signing in. If you do not sign in with Apple or Google, we never receive an email address or a name from a provider.
• Change your name at any time from your Player Profile.
• Do not use the online features. Plasta can be played against the computer; if you never enter an online lobby, no match data about you is shared with other players.
• In lobby chat, you can simply not send messages, mute or block a player, refuse microphone access (text chat still works), and report a player.
• Use Apple’s Hide My Email when signing in with Apple, so we never receive your real address.
• Delete your account, which removes the information described above.

Plasta has no advertising or cross-app tracking to consent to. The usage analytics described in section 2.8 have no in-app switch: they carry nothing that identifies you and are what tell us whether anyone is playing. Deleting the app resets the random app-instance identifier they use. Everything else described in this policy is what the game needs in order to work.

14. Your privacy rights

Depending on where you live, you may have rights to access the personal information we hold about you, to have it corrected, to have it deleted, to object to or restrict certain processing, and to receive a copy of it. Residents of the European Economic Area and the United Kingdom, and residents of certain US states including California, have rights of this kind under their local law.

You can exercise deletion directly in the app. For anything else, write to realplastaapp@gmail.com and tell us what you would like. We will need enough information to identify your account — normally your username and the sign-in method you used. Please do not send passwords or payment details.

We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing for you to opt out of in that respect. If you believe we have not handled your information properly, please contact us first; you also have the right to complain to your local data protection authority.

15. Where information is processed

Plasta is operated from California, United States. Its data is stored and processed on infrastructure operated by Google, lobby chat is relayed by Cloudflare’s global network (which may handle it in a data centre outside your country), and purchases are processed by Apple. Both operate internationally, so your information may be processed in countries other than your own, including the United States. Those transfers are governed by the safeguards those providers put in place, described in their own privacy documentation linked in section 6.

If you are outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection law may differ from that of your own country.

16. Children

Plasta is not directed to children. You must be at least 13 years old to use Plasta, or older if the law where you live sets a higher minimum age for using an online service of this kind.

We do not knowingly collect personal information from anyone below that age. If you believe a child has created a Plasta account, write to realplastaapp@gmail.com and we will delete the account and its information.

17. Security

Access to account data is controlled by server-enforced database rules, so that a player can only modify their own account, and can only read match data for a game they are part of. Your email address is held in a private record that only your own account can read. Sign-in is handled by Apple, Google and Firebase Authentication — Plasta never sees or stores a password. Purchase confirmations are cryptographically verified against Apple’s certificate before any purchase is granted, and connections to our providers use encrypted transport.

No service can promise perfect security, and we do not. If you become aware of a security problem in Plasta, please tell us at realplastaapp@gmail.com.

18. Changes to this policy

We may update this policy as Plasta changes. The date at the top always reflects the current version. If a change materially affects how we handle your information, we will make that clear rather than relying on the date alone. Continuing to use Plasta after a change means the updated policy applies to you.

Plasta is operated by Chaz Mitchell, California, United States.

Questions about this policy: realplastaapp@gmail.com

See also the Terms of Service and Account and Data Deletion.

Plasta © 2026 Chaz Mitchell. All rights reserved.