Privacy Policy

Last updated: October 1, 2026

2play.lol (“2play”, “we”, “us”) lets two people play short games together online, on the web and in our mobile apps. This policy explains what we collect, why, and the choices you have. By using 2play you agree to it.

Advertising and privacy choices

When enabled, adult players may see Google AdMob ads in our apps and Google AdSense H5 Games ads on the web between completed matches. Google may process IP addresses, device and browser information, advertising identifiers where permitted, ad interactions, diagnostics and consent choices to deliver, measure, secure and limit ads. We request non-personalized mobile ads; these can still use storage and personal data. Ads are disabled for unknown ages and under-18 players.

We collect consent before requesting ads where required. You can decline, withdraw consent or disable advertising below or in mobile Settings. Google explains its processing at How Google uses information from sites and apps. Consent choices affect which ads can be served; refusing ads does not prevent play. We do not request iOS tracking permission or use cross-app tracking in this release.

Advertising is optional and disabled for unknown ages and under-18 players.

Information we collect

Account information

Username and avatar. Both are shown to other players.
Email address and password if you create an account. The email is never shown to other players. We store only a salted hash of your password, never the password itself.
Guest players. You can play without an email or password. We create a guest profile with a generated or chosen username so your matches are linked to it. You can later turn a guest profile into a full account. A guest profile unused for 3 days is deleted with its sessions; matches between guests are not kept, and a match against an account holder stays in their history under the guest name.

Gameplay information

Rooms you create or join, match results, moves and game state needed to run a match, your match history, ratings and leaderboard position.
Your friends list and friend or game invitations you send and receive.
Your online and in-match status, so friends can see whether you are available and your opponent can see whether you are connected.
Content you create in a game, such as drawings, words or answers that your opponent sees during the match.

Reports and blocking

If you report a player we keep the report: who reported, who was reported, the match it happened in, the reason and any note you add, so our team can review it and act. If you block a player we keep that block on your account so it keeps working. Reports are kept for safety even after either account is deleted, and contain no more than those identifiers and your note.

Voice chat

Some games offer optional voice chat. Audio travels directly between the two players (peer-to-peer). Our servers only relay the connection setup messages and do not receive, record or store your audio. Your device asks for microphone permission only when you use voice chat, and you can revoke it in your device settings at any time.

Technical information

Your IP address, device and browser type, app version and basic request logs. We use them to keep the service running, limit abuse and investigate problems.
On the web, a bot-protection check (Cloudflare Turnstile) may run when you sign in or register. It processes information about your browser to tell people from bots, under Cloudflare’s own privacy policy.

What we do not collect

We do not ask for your real name, contacts, precise location or photos. We do not sell your personal information. Advertising data practices and choices are described above.

Matchmaking and bots

If no human opponent is found within a short time, you may be matched with a computer-controlled bot. Bots are not people and collect nothing; matches against them are unrated.

How we use information

To create your account, sign you in and keep you signed in.
To run matches, matchmaking, friends, invitations, ratings and leaderboards.
To keep the service secure, fair and free from cheating and abuse.
To fix bugs, measure reliability and improve the games.
To send you account-related messages, such as security notices, if needed.
To comply with the law.

Cookies and device storage

On the web we use necessary cookies and similar storage: they keep you signed in and protect against fraud, and we store preferences such as sound settings. The mobile app keeps your sign-in credentials in the device’s secure storage. When advertising is enabled, Google may use advertising storage subject to your consent choices. We also store your advertising age preference and frequency limits on your device.

Notifications

The mobile app can schedule optional reminders on your device. They are created locally on your phone, and you can turn them off in the app or in your device settings.

What other players can see

Other players can see your username, avatar, public match history, ratings and (for friends) your online status. Choose a username that does not reveal personal information.

Sharing

We share information only with service providers that host and run 2play for us (for example cloud hosting, database and bot-protection providers), who may use it only to provide those services to us. We may also disclose information if required by law, to protect the safety of players or our service, or as part of a merger or sale of the business. We do not sell personal information.

Retention

We keep account and gameplay information for as long as your account exists, and guest profiles until 3 days after their last use. Technical logs are kept for a limited period. When you delete your account (see below) we delete or anonymise your personal information, except where we must keep some of it to meet legal obligations or to prevent abuse.

Your choices and rights

You can change your username, avatar, email and password in the app or on the website.
Delete your account yourself, at any time, from Account settings in the app or on the website (you confirm with your password). We erase your email, password hash, username and avatar, sign you out everywhere and remove you from friend lists and leaderboards. Matches you played stay in your opponents’ history with your name replaced by “Deleted player”.
You can ask us to access, correct or export your personal information, or to delete your account if you cannot sign in, by emailing [email protected] from the address on the account. Depending on where you live (for example the EU, UK or California) you may have additional legal rights, and we will honour them. You may also complain to your local data protection authority.

Children

2play is not directed to children under 13 (or under 16 in the EU/UK), and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Security and international transfers

We protect your information with encryption in transit, hashed passwords and access controls, but no system is perfectly secure. Our service providers may process information in countries other than yours; where required we rely on appropriate safeguards.

Changes

We may update this policy. When we do, we will change the date above and, for significant changes, tell you in the app or by email.

Contact

Questions about privacy: [email protected]

Support: [email protected]