Last updated 20 October 2026

Privacy

What the Tumbleway game stores about you, why, who handles it and how to have it deleted. You can play without an account: nothing here needs your name or email unless you choose to create one or sign in.

Who is responsible

Lozikit, Kathmandu, Nepal. Write to hello@lozikit.com about anything on this page.

What we store

Only what is in this table, and only because you played.

Data	When	Why	Deleted
A hash of a random code your phone made (your guest identity)	You first play with the game online	So your scores and progress belong to you without an account. The code itself is never stored here, only its hash.	When you delete your data, or after 180 days without playing
Your email address, first and last name, username, and your password as a one-way hash (never the password itself)	You create an account	So you can sign in and keep your account on a new phone. Other players only ever see your username, never your real name or email.	When you delete your data
The same details while you confirm your email	You start creating an account	We email you a 6-digit code; the account is only made once you enter it	When you confirm, or after 30 minutes
Your email address and name from Google	You sign in with Google	To keep your account on a new phone	When you delete your data
Your username (shown on the ranks), your country (worked out once from your connection when you first play; you can change it in settings), your friend code, who you have added as a friend	You set them, or add a friend	To show you on the ranks and to make country and friends boards	When you delete your data
Each run: score, how long it lasted, extra lives used, gems, level reached, your country, when it ended	A run ends (or is sent later if you were offline)	To rank you, and to catch impossible scores	Runs after 1 year; your best score on the boards when you delete your data
Your totals (runs, dominoes toppled, gems, best score)	You play online	So a new phone gets your progress back	When you delete your data
That you are signed in: the time you last played and the game version	You play online	To keep you signed in and to ask old versions to update	Sessions expire after a year; the rest when you delete your data
Your IP address	Any request to our server	The server's log and request limits, to find faults and attacks and to slow down password guessing. When you first play, it is also looked up in a file on our own server to find your country, and then forgotten: the address itself is not kept with your profile and is not sent to anyone.	When the log is rotated; request limits after at most 15 minutes

Tumbleway has no analytics of its own and sells nothing. Nothing you do in the game is used for marketing.

What stays on your phone

Your settings, your best score, your totals, the random code behind your guest identity, and any runs not yet sent because you were offline. Uninstalling the game removes them. A run that was waiting to be sent is lost with it.

Tumbleway offers an optional video ad in exchange for an extra life, and may show an ad between runs (never during one). Google AdMob shows them, and Google collects what it needs to do that (such as your device's advertising ID) under its own privacy policy. In the European Economic Area and the UK you are asked for consent first, and you can change your answer in the game's settings.

Services that handle it

Our server runs the game's API and the database that holds the data above. We rent it and run it ourselves.
Google if you sign in with Google (it tells us your email and name), and for AdMob ads.
Resend delivers the emails with your 6-digit codes (confirming your email, resetting your password).
Country lookup uses the free IP to Country Lite database by DB-IP.com (CC BY 4.0), a file on our own server: no address is sent to DB-IP.
Backblaze B2 stores backups of the database. The oldest backup is replaced after 8 weeks, so deleted data is gone from backups within 8 weeks.

No one else receives your data unless the law requires it.

Copies and deletion

In the game: Settings, then Privacy & data, then Delete my data. It removes your account details, scores, runs, friends and settings from our server at once, and your Lozikit account too if Tumbleway was the only Lozikit game you used. You can also do it from this page without the game, or write to hello@lozikit.com from the address you signed in with. To get a copy of everything we hold about you, write to us.

Children

Tumbleway is not aimed at children under 13 and we do not knowingly collect their data. If you think a child has given us theirs, write to hello@lozikit.com and we will delete it.

Changes

When any of this changes, we update this page and the date at the top.