Last updated: 13 August 2026.

1. Data controller

The Custom Pinball application and the website www.pinballcustom.com are operated by Agence BOOM!, 167 chemin de la Bessoune, 31620 Villeneuve-lès-Bouloc, France — SIREN and Toulouse Trade and Companies Register: 813 947 363 — SIRET: 813 947 363 00020 — VAT: FR88813947363.

Contact for any question or request concerning personal data: pinballcustom@gmail.com.

2. Data processed

Account and profile

First name, surname, email address, public username, optional profile photo, language, preferences, technical identifier and a password protected by WordPress, never stored in plain text.

Orders and customer relationship

Products, variations, quantities, history, addresses, telephone number, payment status and method, delivery, invoices, refunds, customer service, loyalty progress and benefits. Full bank details are entered with the payment provider offered at WooCommerce checkout and are not stored by the application.

Use without an account

Random installation identifier, guest session, basket, temporary favourites, language and local settings. The guest session and server basket expire after 30 days. Local preferences remain on the iPhone until deleted or the application is uninstalled.

Gameroom and compatibility

Owned, dream or former pinball machines, optional machine information, planned, purchased or installed products, searches and reports of missing machines. General information may come from Open Pinball Database; the full customer profile is not sent to OPDB.

Creation requests and community

Product type, pinball model, description, tracking, interests, notifications, selected photos, title, text, linked products, username, profile photo, likes, reports and consent. Posts are reviewed by a person before publication. Inappropriate, unlawful or unrelated content may be rejected or removed.

Technical data and security

Session and installation identifiers, login and synchronisation dates, logs necessary for security and preventing duplicate orders, and the notification token if this feature is enabled. The application contains no advertising and does not track users across other companies’ applications or websites.

3. Purposes and legal bases

Data is used to provide the account and requested features, display the catalogue, manage favourites and the Gameroom, calculate the basket, enable payment and fulfil orders, arrange delivery and invoicing, manage loyalty, handle creation requests, moderate the community, send selected notifications, secure the service and meet legal obligations.

Depending on the processing, the legal bases are performance of a contract or pre-contractual measures, consent, legitimate interests in securing and improving the service, and legal obligations.

4. Recipients and service providers

Data is accessible only to people and providers necessary for the service: Charlotte and Johan, WordPress and WooCommerce, hosting provider OVH, payment, email and delivery providers, and OPDB for general pinball information. Custom Pinball does not sell personal data or send it to advertising networks.

Where providers process data outside the European Economic Area, the safeguards required by regulations and their contractual commitments must be applied.

5. Retention periods

• Guest session, basket and temporary favourites on the server: up to 30 days after their validity;
• Access token: 15 minutes; refresh token: 30 days, unless revoked;
• Account, Gameroom, permanent favourites, preferences and requests: while the account is used, then until its deletion is processed;
• Community content: until withdrawn, removed by an administrator or the account is deleted;
• Orders, invoices and accounting documents: for the applicable statutory periods;
• Customer service, rights requests and technical logs: for the period necessary for handling, evidence or security.

Data that is no longer needed is deleted or anonymised, unless a statutory retention obligation applies.

6. Security

Custom Pinball uses, among other measures, HTTPS, WordPress password protection, time-limited tokens, secure iPhone storage, API authorisations, duplicate-order protection, photo compression and validation, and moderation before publication.

7. Your rights and account deletion

You can request access, rectification, erasure, restriction, objection and portability where applicable, or withdraw consent. Some information can be changed in the application.

Account deletion can be initiated in My Profile > Privacy and account > Delete my account. After password verification, an email allows you to confirm the request. Application-specific data and the account are deleted once processing is complete; only information subject to a legal obligation, including certain order and invoicing data, may be retained or anonymised for the required period.

You can also write to pinballcustom@gmail.com. Proportionate identity verification may be requested. If you believe your rights have not been respected, you can contact the CNIL at www.cnil.fr.

8. Photo library and camera

Access is requested only after an explicit action, for example for a profile, Gameroom, request or post photo. Only images selected or taken for that action are prepared and sent; the application does not freely browse the photo library.

9. Minors

The application is not specifically intended for children. Content submitted without authorisation or that is clearly inappropriate may be removed.

10. Changes

This policy may change as the application, website or regulations evolve. The update date appears at the top of the page, and any significant change may be announced in the application or on the website.