Privacy

Draft for the closed playtest, October 2026. [CONFIRM: have a privacy reviewer check this before launch, especially the EU section.]

Tiltmate collects as little as it can. There are no advertising pixels, no tracking cookies and no sign-up. To count visits we use Umami, a privacy-friendly analytics service that doesn't use cookies (see "Visit statistics" below).

What we collect

What	Why
A guest id, in a cookie	To know it's you between visits and keep your streaks. The cookie is needed for the game to work.
Your nickname	Other players see it in games. Share cards never show it; they say "Opponent".
Your games: moves, cards, sabotages, clocks and results	To run the game, settle streaks, replay games when there's a report, and balance the cards and handicaps.
Streak records (Tilt and heater), and your bot level	They're part of the game.
Your country, worked out from your IP address	To understand where players are and choose server locations. We throw the IP address away straight after.
Device type: phone, tablet or desktop	To make the game work well on each.
Reports you make or that are made about you	To keep the game safe.
Buttons and screens you use, such as Revenge and Share	To see which parts of the game work. Stored with your guest id, never sold.
Your visits: the page you arrived on, the site or tagged link that sent you, and how long the page was on screen	To see how people find Tiltmate and whether they stay. Joined to a random id for that browser tab, not to you.

Visit statistics (Umami)

We count visits with Umami Cloud, a cookieless analytics service. It sees the page, the site that sent you, your browser, device, screen size, language and country. It doesn't use cookies, doesn't follow you to other sites, and doesn't keep your IP address: it uses it for a moment to tell visits apart and find your country. The data goes through our own server on its way to Umami, and we remove challenge codes and game ids from page addresses before sending. If your browser sends "Do Not Track", Umami doesn't count you.

What we don't collect

Emails, real names, phone numbers or birth dates.
IP addresses (beyond the moment we look up your country).
Precise location, contacts or device fingerprints.
Anything for advertisers. When ads arrive, they'll be non-personalised.

Where it's kept, and for how long

On our server and database, hosted by Railway [CONFIRM: region, for example the EU or the US].
Detailed records are kept for 13 months, then only daily totals.
Games that are part of a report are kept until the report is closed.

Your choices

Delete your data: email [CONFIRM: contact email] with your nickname and, if you can, a game link. We'll delete your guest and its records, or strip your guest id from them.
Stop all collection: clear this site's data in your browser. You'll start again as a new guest.
Not be counted in visit statistics: turn on "Do Not Track" in your browser settings.

Children

Tiltmate is for players 13 and older. If you think a child under 13 is playing, email us and we'll delete that guest.

The EU and UK

[CONFIRM: the privacy reviewer decides whether using the guest cookie for the "buttons and screens" statistics needs consent. If it does, we'll add an "allow anonymous stats" switch and default it to their answer.]

Changes

We'll update this page when our practices change, with the date at the top.