Home

PingoMe Privacy Policy

Last updated: July 18, 2026

PingoMe is a People-Bingo party game at pingome.com, operated by Stellarus Intelligence, Inc., a Delaware public benefit corporation ("Stellarus," "we," or "us"). This policy explains what information PingoMe collects, why, who can see it, and what your choices are.

The short version:

  • Guests still play with just a first name and fun-fact answers — no tracking, no ads, no analytics.
  • Hosts sign in with Google to create and manage games. We receive your email, name, and profile picture — nothing more — and PingoMe has no passwords of its own.
  • Payments are handled by Stripe. We never see or store your full card number.
  • Games auto-delete on their plan's schedule (30/90/365 days; games from before plans keep their original 60 days).
  • You can ask us to access, correct, or delete your data anytime through the contact form.

1. Information we collect

Game data

From hosts: the game name, questions, filler prompts, a secret organizer code, the game's plan-based guest limit and retention window, and the creation time. From guests: the first name or nickname entered and free-text answers, plus when they joined. Names and answers are free text — please don't enter anything you wouldn't want the other guests in your game to see, because answers become bingo squares on their printed cards. That in-game sharing is the whole point of People Bingo.

Account data (hosts)

Creating and managing games requires signing in with Google. We receive your email address, name, and profile picture — that's everything we request — and we store which games belong to your account and your membership status. PingoMe never sees or stores a password. See Section 3 for our Google commitments.

Payment and contribution data

Payments are processed by Stripe, Inc. Your card number goes directly to Stripe; we never receive or store full card numbers. We keep what's needed to run your membership — subscription status, plan, billing history, a Stripe customer reference — and, for support contributions, the amount and status. Contributions made without an account are recorded without any account identity; Stripe collects an email for the receipt.

Contact form, code-backup email, and error reports

The contact form collects a topic, your message, and — only if you choose — a name and email for a reply. Organizers may optionally enter an email at game creation to receive a backup copy of their organizer code; the address is used to send that message. If the app hits a technical error, a client-side error report (technical diagnostics, not marketing data) may be sent to Lovable, our hosting platform.

Stored in your browser (our cookie policy)

PingoMe uses no tracking cookies, no analytics, no advertising, and no third-party trackers. It stores these functional items in your browser's localStorage: pingome:code:{gameId} (organizer codes for your games), pingo:joined:{gameId} (a flag discouraging duplicate joins), pingome:shuffle:{gameId} (your card-reshuffle preference), and — when you sign in — your session token, so you stay signed in. These are functional only, never used to track you across sites, and clearable through your browser settings. This section serves as PingoMe's cookie policy.

What we do NOT collect

No passwords, no phone numbers, no precise location, no advertising identifiers, no browsing history, no contact lists. Guests never need an email address to play.

2. How we use information

To run your games (store questions and answers, build and print cards, enforce game limits); to run your account (sign you in, show My Games, apply your plan); to process payments and contributions through Stripe; to send transactional email (code backups, receipts, subscription and security notices); to respond to you; and to keep PingoMe working and safe. We do not sell personal information, share it for cross-context behavioral advertising, or build advertising profiles — and we never will with game answers.

3. Google sign-in and the Google API Services User Data Policy

PingoMe's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google profile information (email, name, profile picture) only to create and operate your PingoMe account; we don't transfer it except to processors operating the Service, for legal compliance, or in a corporate transaction with notice; we don't use it for advertising; we don't let humans read it except with your consent, for security, or as required by law; and we don't use it to train AI or machine-learning models.

4. Email

Transactional email (organizer-code backups, purchase receipts, subscription and security notices) comes with using the Service — sent from our sending domain via our email provider. Marketing email doesn't exist at PingoMe today; if that ever changes it will be strictly opt-in with a working unsubscribe, per our Email & Communications Policy. Guests are never emailed — we don't have their addresses.

5. Who can see what

  • The game link (random, unguessable; games aren't listed or searchable) lets anyone who holds it view the questions and join.
  • The organizer code gates everything sensitive: viewing guest answers, editing questions and answers, removing guests, and printing cards.
  • Within a game, answers are shared by design — they become squares on other guests' cards.
  • Your account adds the My Games dashboard (only you, signed in) and automatic recovery of your organizer codes across devices. Games whose codes your browser holds are claimed into your account when you sign in.

6. Service providers (processors)

Provider What they do What they handle
Lovable App build and hosting; client-side error reports App traffic; technical diagnostics
Supabase (via Lovable Cloud) Database and authentication infrastructure Stored game, guest, account, subscription, and contact-form data
Stripe Payment processing Card details (never stored by us); billing records
Google Sign-in Authenticates you; provides your basic profile info
Resend Sends transactional email (from send.pingome.com) Email addresses and message content for those sends
Cloudflare DNS, email routing and delivery infrastructure Contact-form alert delivery; inbound contact mail routing

Data is stored and processed in the United States. We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a corporate transaction (with notice, and this policy continues to apply).

7. How long we keep data

  • Games auto-delete shortly after their retention window: 30 days (Free), 90 (Basic), 365 (Enterprise) — stamped when the game is created and honored even if the plan later changes. Games created before plan-based retention keep their original 60-day window. Each game's My Games card shows its countdown.
  • Account data is kept while your account is active; ask us to close your account via the contact form and we'll delete account data, except records we're legally required to keep (for example, billing records for tax and accounting).
  • Contact-form submissions are kept as long as needed to handle the request, then deleted.
  • Earlier deletion: any guest can request removal of their submission and any organizer deletion of their game, anytime, via the contact form.

8. Your rights and choices

Whether or not a particular privacy law applies to you, we extend these to everyone: access, correction, deletion, and — for account holders — export on request. Ask through the contact form; we may verify a request (for example, by confirming you hold a game's organizer code) before acting on it, and we don't discriminate against anyone for exercising these rights. Hosts can correct guest answers directly from the manage page; guests can also ask their host or us.

CCPA/CPRA and GDPR — our honest posture: we expect PingoMe to be below the thresholds that make the CCPA/CPRA apply, and Stellarus is a U.S. company that doesn't currently target the European market, so the GDPR may not apply to our processing. We state this honestly rather than pretending otherwise — and we honor access, correction, deletion, and export requests from everyone anyway. If PingoMe grows to where these laws squarely apply, we'll update this policy with the required disclosures.

9. Children's privacy

PingoMe is for people ages 13 and up; accounts require 13+, and purchasing requires 18+. Children under 13 must not use the Service directly — a parent, guardian, or the game host enters answers on a child's behalf. The design stays COPPA-conscious regardless: minimal data, no tracking, no ads, automatic deletion, and removal of any child's information on request via the contact form. Full details: Children & Age Policy.

10. Security

Every data access goes through restricted database functions scoped to a single game or account — the underlying tables can't be read or dumped with the app's public credentials, guest answers are gated behind organizer codes, creating games requires an authenticated account, and payment card data never touches our systems. No system is perfectly secure, but minimal collection is itself our best safeguard: we can't lose what we never collected.

11. Changes to this policy

If we change this policy, we'll post the updated version here and update the "Last updated" date; for material changes affecting account holders we'll also give notice by email or in-app before the change takes effect. If a future version of PingoMe collects meaningfully more than described here, we'll update this policy before those features go live.

12. Contact

Privacy questions and requests — access, correction, deletion, export, children's-privacy concerns — go through the contact form. This policy is governed by the laws of the State of Delaware, consistent with our Terms of Service.


Changelog. July 18, 2026: v2 — Google sign-in accounts, Stripe payments and support contributions, plan-based retention (pre-existing games keep 60 days), organizer-code recovery via accounts, host editing of questions/answers, expanded localStorage list, processors updated (Google, Resend, Cloudflare added). v1 (no accounts, no payments) in effect July 9–18, 2026.

Questions about any of this? Contact us.