Privacy policy

Effective 8 November 2026

Pawnch is made by William Visser (the Netherlands). This policy says what the app and its game server store about you. Contact: info@thewillonline.nl.

The short version

What the server stores

• Your Profile: the name you type (1 to 24 characters), a random player id, the date it was made, the drawn avatar you pick from the ones in the app, and your pose and colour.
• Sign-in tokens: a random secret is kept on your phone. The server keeps only a one-way hash of it, the kind of device (for example "iPhone"), and when it was made and last used.
• Friends: your friend code, your friends and since when, the friend requests you sent and got (with how you know each other, for example the game form you played together), and when you were last online, so your friends can see it. "Recently played" is made from the results of finished games; nothing extra is stored for it. While you search for a game, your search is kept in memory only.
• Safety: the players you blocked, and the reports players made (who reported whom, the reason, the time and the names then), so we can act on abuse.
• Games: the state of games that are running, so you can continue them after a lost connection, the results of finished games (who won, the ranking, how many people played and who gave up), and dice statistics per player.
• Coins: Pawnch coins are play money. You only earn them by playing; they cannot be bought, sold or exchanged for money or anything outside the game. The server keeps a ledger of your coins (your start coins, stakes, rewards, refunds and what you got in the prize stand), the items you own, the dice you chose, and the version of the app you last used (a stake only goes to an app that knows coins).

Emoji, preset chat phrases and stickers during a game are only passed on to the other players and are not stored. Pawnch has no free-text chat and no voice chat.

Technical data

The server sees your IP address while you are connected. It keeps it in memory only, to limit abuse (for example too many new Profiles from one address), and does not write it to its database or logs. The game server runs on Cloudflare (Cloudflare, Inc.) as our hosting provider: its database is kept in the European Union, and Cloudflare carries the network traffic and may process your IP address to protect its network, under its own privacy policy and data processing terms.

On your phone the app stores your token, name, player id, settings and a copy of your home screen. That data stays on your phone until you delete your Profile or the app.

Who sees what

Other players in your games see your name, avatar, pose, colour, dice and results, and in a game with a stake what everyone put in and won. Your friends also see whether you are online, what you are playing and when you were last online. Someone who has your friend code sees your name, avatar, pose and colour, and can send you a friend request. The ranking shows your name, avatar, pose, wins and games played to your friends, and, once you finished a game with at least two people, to every player (under "Everyone"). Nobody sees your coins. We do not sell or share your data and we do not use it for advertising.

Keeping and deleting data

We keep your Profile as long as you use it. You can delete it in the app (Settings, About & safety, Delete profile). Then we remove your name, friend code, avatar, sign-in tokens, blocks, friends and friend requests, statistics, coins and their ledger, and the items you own from the server, and you leave your running games (a computer player takes your seat as "Deleted player"; a stake you put in stays in that game's pot). Finished games stay in the results of the other players as "Deleted player". Reports about you stay, without your name, so we keep our evidence of abuse. If you cannot use the app, email us and we delete it for you. Stopped games are removed at once. Games nobody played in for 24 hours stop by themselves.

Children

Pawnch is not made for children under 13. We do not ask for or knowingly collect personal data from them. If you think a child made a Profile, email us and we remove it.

Your rights

You can ask what we store about you, ask us to correct or delete it, or complain to a data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens). Write to info@thewillonline.nl.

Changes

If this policy changes, the new text and date appear on this page.