Privacy Policy

Last updated 2026-11-03.

This game asks for almost nothing, and this page is short because there is almost nothing to say. If anything below stops being true, this page is wrong and should be fixed before it is trusted.

Playing on one device

Playing locally — one device, two players or against the computer — sends nothing anywhere, unless you have said yes to anonymous reports (see Anonymous reports below; the answer is No until you give it). Your settings (sound, camera, accessibility options), match history between two named players, and an in-progress match you can "Continue" are all stored only in your browser's own local storage, on your own device. Nothing is uploaded, and nothing is shared with us or anyone else. Clearing your browser's site data for this game erases it.

Playing online

Online play works by connecting your browser and your opponent's browser through a relay server so the two of you can play the same match. To do that, the server necessarily sees:

• The name you type in when you create or join an online game, so your opponent can see who they are playing. It is held in the server's memory only for as long as your match's room exists, and is passed to the other player in that room. It is never written to disk and never shared with anyone outside that one match. If you are signed in to an online account, your opponent sees that account's display name, tag and picture instead.
• Your IP address, which any server sees from any connection made to it — the same as visiting any website. It is not logged alongside your name, not stored with any account, and not used for anything beyond running the connection.
• Shots, aims and turn results — the moves of the match itself — so both browsers can keep the same table in step. These are relayed live and are not stored once the match ends.

The server does not run the game and does not analyse matches. Online matches are not written to disk: a room and everything in it disappears once it has been empty a while. The exception is anonymous reports: when both players have said yes to them, the relay keeps an anonymous log of the match (no names, no account, no room code). The one exception: when both players are signed in to online accounts, the result (the mode, the map, the score, who won and when) is saved to both players' match history. The game does not match you with strangers: you only ever play someone who has your room's four-letter code.

Online accounts (optional)

Only if you create one under Account, the game makes an online account so you can keep your progress safe, sign in on another device and play friends online under your own name. Creating one yourself is for players aged 16 or older; a younger player's account is made by a parent (see Children below). You do not give a phone number or real name, and you do not sign in with Google, Apple or anyone else. An email address is optional: an adult account with a password can add a recovery email (see below). The server then stores, on our server in Germany:

• A display name you choose, with a random four-digit tag, and the picture and colour you pick for it.
• A username and password to sign in with. The username is never shown to other players. The password is stored only as a one-way hash (scrypt) and cannot be read back, by us or anyone.
• A random key for each device you are signed in on, stored only as a one-way hash, which is how a device stays signed in. Signing out of a device deletes its key.
• A recovery email, only if you add one (adult accounts with a password only; never a child account, and only once the game's host has switched email on). It is used only to confirm that the address is yours and to send you a link to reset a forgotten password. It is never shown to anyone, never used for marketing and never given to a third party. Until you open the confirming link it is held as unconfirmed and deleted after seven days; the links we send work once and expire after 24 hours (confirming) or 30 minutes (password reset), and are stored only as one-way hashes. You can remove the address at any time under Account; it is also deleted with the account. Asking for a reset never tells anyone whether an address has an account.
• Your age group (16 or older, or a child account), never a date of birth.
• Your game settings and progress: aim line and other game-setup choices, the names you entered, solo challenge results, and which hints and hazard explanations you have seen. Sound, graphics, controls and accessibility settings stay on your device.
• When the account, its devices and its saves were created and last used.

If you use the online extras, the account also holds:

• The daily challenge: when you finish a daily while signed in, the record of that match (where each shot was aimed and how hard) is sent so the server can replay it and put the score it worked out on the leaderboard under your display name and tag. It is kept with the score. The same goes for Lane Tour lanes and the Table of the Month once you are signed in: each try is replayed and the best one counts; your extra tries are deleted after a week, keeping your best and your three newest.
• Progress: the Lane Tour stars, achievements, solo puzzles, the collection you unlocked and chose (pin themes, name plates) and the weekly family goals (how many strikes, matches and so on were counted, and which goals were done), so a second phone picks up where the first stopped.
• Shared highlight clips (only if the game host has switched this on): a short video of a replay that an adult account uploads to get a link, with the table and mode, who uploaded it, and the comments and reports on it. It is deleted after 90 days, or when you delete it or your account. The video shows the table, never names.
• Challenges: a challenge you make (the table, the score you set and when) and the scores other people post on it, which the server replays and ranks. They are deleted after 90 days, or when you delete the challenge or your account. A child's name is shown on a challenge only to the child's family and friends; everyone else sees "A player".
• Friends: a friend code, the players you added with theirs (or who added you with yours), friend requests waiting for an answer, players you blocked, game invites (deleted after ten minutes), and roughly when you were last online so friends can see you are around. Nobody can find you by name.
• Match history: the results of online matches played while both players were signed in, as described above.
• Country, only if you pick one, for the country leaderboard; and whether you said you are 16 or older.
• Your leaderboard choice: boards show you only to your family and friends unless you are an adult and switch on Show me on public leaderboards in your account; it is off until you do, and you can switch it off again at any time.
• Comments and reactions you post on the daily challenge. Only players who said they are 16 or older can write; anyone can react. If someone reports a comment, the comment, the comments around it, both players' account numbers and the reason are e-mailed to the moderation address, read by our moderator, who can hide or delete the comment or suspend the account.

A backup code you make, or a sign-in code a parent makes for a child's device, works once, for 24 hours, and is stored only as a hash. Your IP address is used to limit how fast requests can be made and is not stored with the account. Nothing is shared with anyone, and nothing is used for advertising. Your account is never connected to anonymous reports (see below).

How long it is kept. Everything above stays until you delete your account, except where it says otherwise: shared clips and challenges after 90 days, extra tries at the lanes and the month after a week, game invites after ten minutes, an unconfirmed recovery email after seven days. That means your daily challenge scores (with the record of the match they were worked out from), your comments (a comment you delete, or a moderator removes, is marked removed and its text is no longer shown) and your match history are kept until you delete your account. The game no longer has ratings or a ranked mode: the ratings and match checks it once stored were deleted in November 2026.

You can download everything stored about your account (Download my data) and delete it (Delete account) at any time under Account; deleting removes it from the server immediately, together with any child accounts you made. You can also delete it from a web page, without opening the game, if you are signed in in that browser: Delete your account. Backups of the account database are kept for up to 30 days, on the server and in one off-site copy, and then deleted. Progress on your device stays. Accounts not used for 24 months are deleted automatically (the server checks every hour). Use means signing in or playing while signed in; a parent's account and its child accounts count as one family, so none of them is deleted while any of them is still in use.

Anonymous reports (only if you say yes)

After your first game it asks one question: Help make the game better? Both answers are the same size and the game plays exactly the same either way. If you say No, or never answer, nothing in this section happens: the game collects nothing and sends nothing. If you say Yes, the game sends anonymous reports to our own server in Germany, and you can turn that off at any time in Settings > Account > Send anonymous reports; turning it off stops it at once and throws away whatever was waiting to be sent. The question is never asked on a child account, and a child account never sends reports. Under 16? Ask a parent.

What is sent. Nothing in it is your name, your account, your IP address, a room code, anything you typed, or an id that stays the same from one visit to the next.

• Your device, once per visit: the game's version, whether it runs in a browser, as an installed web app or as the Android or iOS app, the operating system and browser with their major version numbers, whether it is a phone, tablet or computer, the phone model where the browser tells us (Android only; iPhones never do), the graphics chip's name (for example "Adreno 740"), the screen size (rounded to ten pixels), the pixel ratio, the number of processor cores and the amount of memory the browser reports, whether it has a touch screen, the language (for example "de"), and the graphics quality the game picked.
• What you use: which buttons are pressed (the name the game gave the button, like "map:castle", never what is written on it and never what you typed), which screens and sheets are opened and closed, and which settings you change (the setting and its new value: on, off, a number or a choice). While the game is still showing a new player how to play: which of its steps you reach (for example "pull back to aim"), how long after opening the game, and whether a match is your first, second or third. Which weekly goals you finish (the goal, never who finished it). When you reach a new level (the level number and whether a match, a star, a boss, the daily or a goal got you there), never who. Whether a clip was saved and how long it was (never the clip). Which challenge steps you take (made, opened, played, sent, beaten), never the challenge itself. Whether you turn on the weekly reminders (asked, yes, no, off), never when. Which sharing features you use (a score card, a clip, a challenge link, a friend code), by which route, and whether the grown-up check came first: never what you shared, with whom, or any link.
• How matches go: the mode, table, number of cars, which Lane Tour lane or solo puzzle, co-op scenario, boss or Tower level it is, whether it is the Bowling warm-up or a guided first match (fixed content names and yes/no flags, never anything about you) and opponent (computer, two players on one device, or online) when a match starts, and when it ends: how it ended (for example cleared, won, lost, or left early) and how many stars it earned, the number of turns and shots, how long it took, how much of that time the table could not be shot in (a shot still rolling, a hazard at work), whether a new match began straight after one that had finished (the Rematch button), how the match ended, how long the computer took on its turns and on the pauses between turns, the score and who won. How smoothly it ran (frames per second, slow frames, the lowest drawing resolution, the graphics setting and how much the game drew each frame, and how long the table took to load). For online matches also how many times the other player left, reconnected or the two screens fell out of step.
• Problems: errors the game runs into (the message and the names of the game's own files and functions where it happened, with web addresses, e-mail addresses and anything that looks like a code or token removed before it is sent), the last thirty buttons and screens before the error, files that could not load, and a graphics failure. If the game does not start at all, it sends a single report saying so.
• The match itself: every match played on this device (against the computer, two players on one device, or the daily challenge) is sent as a log of the shots and where every car was, so we can learn from how the game is played. Online matches are recorded by the relay server, and only when both players have said yes; the player names, colours and cards are left out of that recording.

How it is kept apart from you. Each visit gets a new random number that exists only in the page's memory and is never saved on your device, so one visit cannot be connected to the next. Times are kept to the hour. The reports are stored in separate tables that have no account number, name, IP address or room code in them, and nothing links them to your account, your online match history or the daily leaderboard. Our server receives your IP address in order to answer the request, as any server does, and the game's code does not write it down. The game never sends reports from a test copy or from any web address other than the game's own.

How long. Individual reports and visits are deleted after 90 days, full match logs after 180 days, and the summary of a match (mode, table, score, length) after two years. Counts that contain nothing per person (for example how often a button was pressed per day) may be kept longer.

Because it is anonymous, it cannot be looked up. We cannot tell which reports are yours, so we cannot show you "your" reports or delete only yours. Switching it off stops any new ones, and the old ones disappear on the schedule above. The legal basis is your consent (Art. 6(1)(a) GDPR, and section 25 TDDDG for reading your device's details); you can withdraw it at any time with the switch. No third party receives any of it: there is no analytics service and no advertising.

Counts that need no consent. Separately from the above, the online relay server counts its own work, per hour and with nothing about any player: how many rooms were made, joined or expired, how often someone left or reconnected, and how many connections it had to refuse. This is the server counting itself, not you.

The mobile app downloads game files

The Android and iPhone/iPad app comes with a small core of the game and can download the rest (more car models, map scenery and music) from our server in Germany, the same files the web game loads. It asks you first, and you can remove them again in Settings under Account → Game files. To do that the app asks our server for the files and the server necessarily sees your IP address, which any server sees from any connection made to it, the same as visiting any website. It is not stored with any account and is not connected to any anonymous report. The app sends no name, account, device identifier or gameplay data with these requests, and the downloaded files are stored on your device only. Without a connection the app keeps working with what it already has.

No tracking, no ads

You never need to sign up or log in to play. The only lasting identifier is the optional online account above, which exists only if you create it. The game does not use advertising or any third-party tracking script or analytics service. Unless you have said yes to anonymous reports, nothing here reports back to us or anyone else about how you play. The game connects to our server only when you choose to play online, have chosen to save your progress online, or have said yes to anonymous reports, and, in the mobile app, to download game files.

Children

The game is intended for general audiences, including children playing with a parent, exactly as it started. Playing locally needs no account at all. Online play without an account only shows the name you type in — do not use your real name if you would rather not share it with a stranger. In a match, players can only send preset phrases and stickers, never their own text, and either player can mute the other. Nobody can be searched for by name, and the game has no matching with strangers at all: a child only plays someone who has the room's code.

Child accounts. Players under 16 cannot create an account themselves. A parent with their own account makes one from Account > Family, which is how they give consent, and then gives the child a one-time code to sign in on their device. A child account stores the same things as any account except a username and password, plus which parent manages it. Its name is picked at random from friendly word pairs (like "Turbo Badger"), never typed, because names can appear on leaderboards. A child's name is shown only to that child's family and friends, never on a public leaderboard. The parent decides whether the child can play online (not at all, only with friends and family, or with anyone who has the game's code), whether new friends need the parent's approval or are switched off, whether quick chat is on, and whether sharing a score or a clip from the child's phone first asks a grown-up (a question on the phone, never stored or sent) or is switched off. Children cannot write comments. The parent can see the child's friends and recent matches, sign the child out everywhere and delete the child's account at any time; deleting the parent's account deletes the child's too.

Turning 16. When a young person turns 16 their parent can hand the account over (the parent says so; no date of birth is stored). The young person then chooses their own username and password on their own device, the account becomes an ordinary account with no parent, and the family become friends. It is never switched to public leaderboards by this.

Changes to this policy

If what the game collects or sends ever changes, this page will change with it and the date at the top will be updated.

Contact

See the Imprint page for how to reach the person responsible for this site.