Privacy policy

1Who runs Tiltanic

Tiltanic is a free browser game at tiltanic.com. SawannaMicroHolding - Piotr Lewandowski runs it from Poland and decides how your data is used. This makes SawannaMicroHolding - Piotr Lewandowski the “controller” under the GDPR (the EU data protection law).

Contact: privacy@tiltanic.com

2What Tiltanic stores on your device

Tiltanic sets no cookies. It uses these browser features:

• Local storage: your best score, runs, streak, name, sound and language choices, the tag of the link that first brought you, and today’s ranking code.
• Cache: a service worker keeps game files, so the game starts fast and works offline.
• iPhone and iPad: “Add to Home Screen” copies your save into the part of the app link after the # sign. Browsers never send that part to a server. The game may also copy the save code to your clipboard.

Clear the site data in your browser to delete all of this.

3What our servers receive and keep

• Server logs. Our host, Amazon CloudFront, logs each request: time, IP address, page address, browser type, referring page and result.
• Analytics. The game sends small events with no cookie and no stored ID. Each page load makes a random session ID that lives only in memory. An event can carry device type, operating system, browser, language, input mode, tilt readings, scores, play time, load time, errors, days since your first visit and the link tag or site that sent you. We work out your country from your IP address and keep only the country code.
• Daily ranking. If you beat your best on today’s voyage, the game sends the run: a random code for today, your inputs, your score and a captain name from the game’s own lists. A name that you typed is never sent. The public board shows the top 10 names with scores. The ranking database stores no IP address.
• Share and clip links. A link holds a code in its address: the name you typed or the game chose, the score, the sea and a random number. A clip link holds the last seconds of your run. Our logs record the address when someone opens a link. A clip video stays on your device.
• Dashboard. stats.tiltanic.com is protected by a password and is not public. Its records hold no IP address and no stored ID.
• Email. If you write to privacy@tiltanic.com, Amazon Web Services (SES) receives the mail and keeps a copy for 30 days. It is forwarded to our mailbox at Google (Gmail). We use it only to answer you.

4Advertising (Google AdSense)

Tiltanic shows ads from Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site or other sites.
• Google’s advertising cookies let Google and its partners serve ads to you based on your visits to this site and other sites on the internet.
• You can opt out of personalised advertising at myadcenter.google.com or adssettings.google.com.
• You can opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info/choices.
• How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites

In the EEA, the UK and Switzerland, Tiltanic shows no consent popup. Google therefore shows only “limited ads” there: no personal data is used to personalise ads. Google may use cookies or local storage only to detect invalid traffic and fraud.

5Who processes data for us

• Amazon Web Services (AWS) hosts the site, the logs, the ranking database and the dashboard in the USA (us-east-1).
• Google provides the ads (section 4) and our mailbox (Gmail). Google decides for itself how it uses ad data.

Your data may be processed in the USA, under safeguards that AWS and Google offer, such as standard contractual clauses.

6Why we use data, and the legal basis

We use data to run the game, keep it secure, learn how people play, show the daily ranking and pay for the game with ads. The legal basis is our legitimate interest (GDPR Article 6(1)(f)). You can object (section 8).

7How long we keep data

• Server logs with IP addresses: 90 days, then automatic deletion.
• Ranking entries: they expire 4 days after your run. The daily totals and the top 10: 400 days.
• Error logs of the ranking service: 7 days.
• Emails to us: the copy at AWS, 30 days.
• Dashboard records: no automatic deletion date.
• On your device: until you clear it.
• Google’s cookies and data: see Google’s policies.

8Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction and a portable copy, and you can object to its use. Write to privacy@tiltanic.com.

Tiltanic has no accounts and no stored ID, so we often cannot tell which records are yours. To find IP-based records, send us your IP address and the time of your visit.

You can complain to your data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO): uodo.gov.pl

9Children

Tiltanic is for a general audience. It is not directed at children under 13, and we do not knowingly collect their personal data. If a child sent us personal data, write to privacy@tiltanic.com and we will delete it.

10Changes to this policy

We may change this policy. The new version will appear on this page with a new date.