Privacy Policy
The short version: your game progress stays on your device. You don't need an account. We don't sell your data. Ads come from Google, and you can say no to personalised ads.
Who we are
Tiny Thinks is a one-person studio run by Alyona Din. In this policy, “we” and “us” mean Tiny Thinks (Alyona Din). We are responsible for your data as described here.
Contact: hello@tinythinks.app
What this policy covers
It covers this website (tinythinks.app) and all our apps, on the web, iOS and Android. Today that is Tanglaway (tanglaway.com and the Tanglaway apps). When we add an app that works differently, we will add a section for it here.
This website
- No cookies, no analytics, no trackers, no fonts or scripts from other companies.
- The site is hosted by Cloudflare. To deliver pages and stop attacks, Cloudflare handles technical data like your IP address and browser type. We don't use that data to find out who you are. [CHECK]
Tanglaway
Your progress stays on your device
Levels, stars, coins, streaks, boosters, hats and settings are saved on your phone or in your browser. You don't need an account, and we never ask for your name or email. If you delete the app or clear your browser's site data, this progress is deleted too.
Moving progress to a new phone
This is optional. Only when you tap Get a transfer code (Settings → Move progress to a new phone), the app sends a copy of your game progress to our server, which runs on Cloudflare. The copy holds levels, stars, times, coins, streak, boosters and hats. It does not hold your name, email, device ID or purchases.
- We keep the copy until the code is used on the other phone, or for at most 24 hours. Then it is deleted.
- To stop abuse, we limit how often codes can be made. For this we keep a one-way scrambled form (a hash) of your IP address, never the IP address itself, for about one hour. [CHECK]
Ads
Tanglaway is free and shows ads. The ads come from Google: Google AdSense on the web and Google AdMob in the phone apps. [CHECK] Google may use cookies or device identifiers (like the advertising ID on your phone), your rough location based on your IP address, and how you interact with ads. It uses these to show and measure ads and to prevent fraud.
- In the EU, the UK and Switzerland, you see a consent prompt first. You can choose whether ads may be personalised. You can change your choice any time in Settings → Privacy options.
- On iPhone and iPad, Apple's tracking prompt asks if apps may track you. If you say no, your advertising identifier is not shared.
- Some ads are optional. For example, you can watch an ad to get an extra booster.
Learn how Google uses this data: How Google uses information from sites or apps that use its services. You can manage Google ads at My Ad Center.
Purchases
Purchases, like removing ads, go through Apple's App Store or Google Play. They handle your payment. We never see your card or bank details. [CHECK]
We use RevenueCat to keep track of what you have bought, so it works across reinstalls and Restore purchases. RevenueCat receives the purchase receipt and a random app user ID that is not tied to your name. See RevenueCat's privacy policy. [CHECK]
Reminders
If you turn on reminders, your phone plans them itself (local notifications). We don't run a push server, and nothing about your reminders leaves your device. You can turn them off in the game's settings or your phone's settings.
Ratings
If we ask for a rating, the rating window is Apple's or Google's own. We don't receive anything personal from it.
No analytics of our own
We don't use our own analytics or crash reporting tools. [CHECK] If this changes, we will update this policy first.
When you email us
If you write to us, we get your email address and what you send. We use it only to answer you. Our email runs through Cloudflare Email Routing and Gmail (Google). We delete emails when they are no longer needed, or sooner if you ask.
What we don't do
- We don't sell your personal data.
- We don't share it for money.
- We don't build profiles about you ourselves.
Who else handles data
- Cloudflare: hosting, the transfer-code server, email forwarding.
- Google: ads (AdSense, AdMob) and our email (Gmail).
- RevenueCat: purchase status.
- Apple and Google: app stores and payments.
These companies may process data outside your country, for example in the United States. They use their own safeguards for this, such as the EU Standard Contractual Clauses. [CHECK]
Children
Our apps are made for a general audience and are not directed at children under 13. [CHECK] We don't knowingly collect personal data from children. If you are a parent and think your child has sent us personal data, email us and we will delete it.
Your choices and deleting your data
- Game progress: use Settings → Reset progress, or delete the app. On the web, clear the site data for tanglaway.com in your browser.
- Transfer copy: it is deleted by itself when used or after 24 hours. If you want it gone sooner, email us the code.
- Ads: change your choice in Settings → Privacy options. On your phone you can also reset or delete your advertising ID, or turn off tracking in your phone's settings.
- Emails: ask us and we will delete them.
Depending on where you live (for example in the EU, the UK or California), you may have the right to see, correct or delete your data, to object to how we use it, and to complain to your data protection authority. Email hello@tinythinks.app and we will answer within 30 days. [CHECK]
Why we may use data (EU and UK)
- Personalised ads: your consent.
- Transfer codes: because you asked for them.
- Keeping the games and servers safe and working, and non-personalised ads: our legitimate interests.
[CHECK]
Changes
If we change this policy, we will update the date at the top. If a change is important, we will also tell you in the app.
Contact
Tiny Thinks (Alyona Din)
hello@tinythinks.app