Terrazzo privacy policy

1. Who is responsible

The data controller is:

We are a one-person business. There is no data team, no marketing database and no analytics warehouse. We have not appointed a data protection officer, because we are not required to.

2. The short version

• No accounts. You never give us an email address or a password. The game makes up a random player id on your phone, and that is all our server knows you by.
• Your progress lives on your phone: levels, times, Dailies, settings, the worlds you own and your profile.
• Boards and friends are the one thing that leaves your phone for our own server: the player card the boards show (the name you pick, your emblem and title) and your scores. See section 4.1.
• No analytics, no tracking. The game sends us no usage statistics, session recordings or crash reports, and asks for no advertising identifier.
• Ads come from Google AdMob between Endless levels, from level 11. In Europe Google asks for your consent first, and any Epic or Legendary skin removes ads for good. See section 4.4.
• Purchases go through the App Store. Apple handles the payment; we never see your card or your billing details.
• We never sell or rent personal data, and we don’t use it for profiling.
• This website sets no cookies. It counts visits with Umami, which we host ourselves and which keeps no profile of you. See section 7.

3. What stays on your phone

The game keeps all of this in its own storage on your phone, and none of it is sent to us unless section 4 says so:

• your progress: solved levels, times, hints used, Daily results and season tiles;
• your settings: sound, music, dice style, Color assist, colour vision, language, app icon and reminders;
• the worlds you own, and which looks you have picked;
• your profile: player name, emblem, title, banner, inlays and stamps;
• your friends list (their friend codes and names) and the token that lets the game talk to its server.

Deleting the app deletes all of it. Reset progress in Settings clears your progress but keeps your purchases. Neither deletes what our server holds; section 11 explains how to do that.

4. When the game talks to the internet, and what it sends

4.1 Our game server (api.playterrazzo.com)

Terrazzo runs its leaderboards, player cards and friends on a server we run ourselves. Once per install, the game signs up with a random eight-character player id (also the friend code you can share, like TZ-…) and gets a token back. After that, it sends:

• your player card: the name you pick (it starts as “you”), your emblem, banner, title, pinned inlays and stamps, and play counts such as your level, Dailies played and best run;
• your scores: your time on today’s Daily, your season score and your floor size;
• friends: the friend codes you add or remove.

It asks the server for boards, friends’ cards and a small settings file. The server stores your player id, a scrambled copy of your token, your name and card, your scores with the time they arrived, and who your friends are. If a Daily time looks too fast to be real, the server marks it for us to look at by hand; nothing is removed automatically. That’s all. Your name and card appear on the boards for other players to see; that is what the boards are for.

The game never sends your real name, email address, contacts, location, photos, device identifiers or advertising identifier, and it sends nothing about your purchases. As with any internet request, the server sees your IP address. It uses it only to slow down floods of requests, holds it in memory for up to an hour, and never writes it to the database.

The server runs in Germany (Hetzner, Falkenstein), and its database is backed up to a Hetzner storage box in the EU.

4.2 Game Center (iPhone)

If you are signed in to Game Center, the game reports your achievements to Apple, and Game Center shows them to you and your Game Center friends. Leaderboards, including the Daily, run on our own server (4.1), not on Game Center. Apple’s privacy policy governs that. Terrazzo does not store your Game Center id or name.

4.3 Buying worlds

Purchases are made in the App Store. Apple processes the payment, collects any tax and sends the receipt. On your phone, the game learns only which worlds you own (so it can unlock them and restore them). Nothing about your purchases is sent to our server.

4.4 Ads

From level 11, Terrazzo shows a full-screen ad between Endless levels, one every three or four levels. There are never ads in the Daily or the tutorial, and buying any Epic or Legendary skin (or the Founder bundle) removes them for good.

The ads come from Google AdMob (Google Ireland Limited in the EEA, the UK and Switzerland). Where the law asks for it, Google’s consent form appears before the first ad, and you can change your answer at any time in Settings → More → Privacy choices. The game never shows Apple’s tracking prompt, so Google does not get your phone’s advertising identifier.

To show and count ads, Google’s software in the game receives your IP address (and the rough location it implies), details of your phone and the game (model, iOS version, language, app version), an identifier for the game on your phone, and how you interact with the ads. With your consent ads may be personalised; without it Google shows non-personalised or limited ads. Google decides how it uses this data: see how Google uses information from apps that use its services and Google’s privacy policy. The game itself sends us nothing about the ads you see.

4.5 Sharing and links

When you share a result or your friend code, your phone’s share sheet sends exactly the text you see, to the app you choose. Links in Settings (support, rating the game, this policy) open in your browser, your mail app or the App Store.

5. Reminders

The Daily reminder is a notification your phone schedules for itself, at the hour you pick, and only if you turn it on. There are no push notifications: we cannot send you anything.

6. Motion

Some worlds tilt their scenery a little as you move your phone. The motion readings are used on the spot and never stored or sent.

7. This website (playterrazzo.com)

The website sets no cookies and stores nothing on your device. It loads no ad networks, no social pixels, no web fonts from elsewhere and no third-party embeds. The little puzzle on the front page runs entirely in your browser.

To see which pages people read, the site loads Umami, an open-source analytics tool we host ourselves at umami.admox.xyz. It runs without cookies and stores nothing on your device. It records the page, the site that sent you, and coarse browser, operating system, device type, screen size and country. It builds no profile across sites, and the numbers are not shared with anyone or used for advertising.

The site is hosted by Cloudflare (Cloudflare Pages). To deliver and protect it, Cloudflare handles each request, which includes your IP address, the page you asked for and your browser’s user agent. We don’t receive or keep access logs from it.

8. Legal bases for processing (GDPR Article 6)

We do not process special-category data, and we make no automated decisions that have a legal effect on you.

9. What we never collect

• your email address, real name or phone number (unless you write to us, or choose your real name as your player name);
• your contacts, location, photos or microphone;
• analytics, usage statistics, session recordings or crash reports from the game (the website only counts visits, section 7);
• a device fingerprint or advertising identifier;
• your card number or billing address;
• anything to sell, rent or trade.

If we ever want to add something to this list of things the game sends, this policy will say so before that version ships.

10. Who else is involved

11. How long things are kept, and how to delete them

• On your phone: until you delete the app or reset your progress.
• On our server: for as long as you play. In the game, Settings → More → Delete my data deletes your player, your scores and your friendships straight away; the game then starts over with a new friend code. You can also write to [email protected] with your friend code (Profile shows it). Backups roll over within seven days.
• Emails to us: while we help you, and for a while after in case you come back to the same thing.
• Website visit counts: kept in our Umami as page totals; Cloudflare keeps its request records under its own policy.

12. Your rights

Under the GDPR you can ask us for a copy of your personal data, and to correct it, delete it, restrict how we use it, or move it, and you can object to what we do on the basis of legitimate interests. Write to [email protected] and we will answer within one month. Since there is no account, include your friend code so we can find your player.

You can also complain to a supervisory authority: in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or the authority in your own EU country.

13. Children

Terrazzo is made for everyone. It has no accounts and asks for no personal details, and we don’t knowingly collect personal information from children. If a child has used their real name as their player name, write to us and we will change it.

14. Security

The game talks to its server only over HTTPS. The server keeps a scrambled (hashed) copy of each player’s token, not the token itself. Your phone keeps the game’s data in the game’s own storage, protected by your phone’s lock.

15. Changes to this policy

We may update this policy. The date at the top changes when we do, and material changes are announced on this website and, where it matters, in the game. The current version is always on this page.

16. Contact

ADMOX (Adam Havlíček), Czech Republic
Privacy and legal: [email protected]
Support: [email protected]

Related: Terms of use · Help