Account deletion

What an account is in Palmo

1. Delete your account and cloud save

This is the route that deletes the record on our side.

1. Open Settings in the game.
2. Scroll down to Account.
3. Tap Delete account.
4. The confirmation reads Your account and its cloud save will be deleted. Progress on this device stays. Tap Delete account again to confirm.

The game deletes the document at /users/{your identity} first, then deletes the authentication record itself, then signs you in with a fresh anonymous identity so you can keep playing. If a step fails, the settings screen says so instead of pretending it worked; try again, and write to us if it keeps failing.

This works whether or not you ever signed in. An anonymous identity is an account too: it has a document in the cloud, so it has something to delete. Making you create an account before you are allowed to delete one would mean handing us more about yourself in order to get rid of what we already hold, so the row is there from the start. The Account section appears as soon as the cloud is running; if the game cannot reach it, the section is not drawn at all and there is nothing stored on our side to remove.

2. Clear your progress on this device

1. Open Settings in the game.
2. Scroll down to Data.
3. Tap Reset progress.
4. The confirmation reads All levels and stars will be deleted. Are you sure? Tap Reset progress again to confirm.

This clears the levels you cleared, your stars, the lifetime counters and the record of which lessons you were taught. The next time the game syncs, it writes that cleared state over your cloud document, so the progress in the cloud copy goes too.

What it does not do: it does not delete the cloud document or the identity, and it leaves your jokers, settings, lives and ad-free purchase alone. To remove the record itself, use step 1.

3. Ask us by e-mail

Write to [email protected] from the address linked to your Google or Apple account, with the subject Palmo deletion request. That address is what lets us find the right save; we reply to the same address and delete the correspondence along with it if you ask.

An anonymous save carries no e-mail address, no name and nothing else that could be matched to a message, which is exactly why it holds so little. If you never linked an account, an e-mail cannot identify your save and the in-app routes above are the only ones that work.

What is deleted, and what is not

• Deleted: the document at /users/{your identity} with everything listed in the privacy policy, and the authentication record for that identity.
• Kept, at the store: if you bought the ad-free version, that receipt belongs to Google Play or the App Store. We have no access to it, and deleting it there would also remove your right to restore the purchase. Deleting your account here does not take the purchase away.
• Kept, as counts: the analytics events described in the privacy policy arrive without your identity attached, so there is nothing in them to pick out and delete afterwards.
• Crash reports already sent: these carry the identity string, and they age out on Firebase Crashlytics' own schedule. Once the authentication record is deleted, that string no longer points at anything of ours.
• What the ad network received: Google's handling of the advertising identifier is covered by its own documentation. You can reset or switch off that identifier in your device settings at any time.

Uninstalling

Uninstalling removes the copy on the phone, including the anonymous session that identifies you. It does not delete the cloud document, and afterwards there is no way to reach it. If you want the cloud copy gone, do step 1 before you uninstall.

Contact

[email protected] · com.bardino.palmo