Privacy
What we collect, where it lives, what we do with it.
Last updated 8 May 2026
The short version
We collect the minimum needed to make the game work, plus the ad-interaction data Google needs to keep the app free. We don't sell your data. This website doesn't use cookies or third-party trackers; the mobile app shows banner ads via Google AdMob, with proper consent prompts in the EEA/UK and on iOS.
What we collect
From this website
Aggregate page-view counts via Vercel Analytics, which doesn't use cookies and doesn't fingerprint individual visitors.
From the feedback form
Whatever you type — your message, the type you picked (bug / feedback / feature), and your email only if you provide one. We also log your browser's user-agent string for debugging.
From the mobile app
A randomly-generated device ID (so your scores stay attached to your device), a display name you choose, and your scores plus minimal gameplay metadata (max tile reached, chain count, run duration). That's what reaches our backend.
From in-app ads (Google AdMob)
Google's Mobile Ads SDK serves the banner ads you see outside gameplay. It transmits your IP address, device model and OS version, ad-interaction events (impressions, clicks), and — only with consent — your platform advertising identifier (IDFA on iOS via the App Tracking Transparency prompt; GAID on Android). EEA/UK/Switzerland users see Google's GDPR consent form on first launch; iOS users see Apple's tracking prompt. Decline either and ads are served non-personalised. We don't see this data ourselves — Google does, on its own infrastructure.
What we don't collect
- Your real name, address, or phone number
- Your location, contacts, photos, or microphone
- Anything from the gameplay screen — that screen is ad-free by design
Where it lives
Site hosting — Vercel.
Backend & database — Supabase, accessed from a Node service hosted on Vercel.
Feedback delivery — Resend forwards new feedback to our inbox.
Ad serving (mobile app only) — Google AdMob. Ad-interaction data and consent state live on Google's infrastructure, not ours.
Who we share it with
We don't sell, trade, or rent it. The third parties that see anything are the operational ones above (Vercel, Supabase, Resend) plus Google AdMob in the mobile app, which receives ad-request and ad-interaction data so it can serve banners. Personalised ads, and the advertising identifier behind them, only flow to Google when you've consented in the on-device prompt.
Cookies
This website doesn't set first-party cookies. We don't load any third-party advertising or analytics scripts that would. Vercel Analytics counts page views without cookies and without identifying individual visitors.
Your rights
Want a copy of what we have on you, or want it deleted? Email hello@webist.agency. We'll act within 30 days.
Children
Tilt. is rated for general audiences but isn't directed at children under 13. We don't knowingly collect data from children under 13, and the AdMob ads served inside the app are not configured for child-directed treatment. If you believe a child has submitted feedback to us, email us and we'll delete it.
Changes
If we materially change this policy, we'll bump the date at the top and post a banner on the home page for at least a week. Continuing to use the game or site after that means you accept the changes.
Contact
hello@webist.agency — operated by WEBIST LLC.