Privacy Policy
Last updated: 21 July 2026
Translations of this policy are provided for convenience. The English version is the authoritative one.
The short version
Tomospire has no accounts and collects no personal data from players. Worlds live under random codes that identify a world — never a person. No ads, no trackers, nothing is sold to anyone.
1. Our approach
Tomospire is built for children, so we chose the strongest form of privacy protection there is: not collecting personal data in the first place. The game works without accounts, names or email addresses. This data-minimisation-by-design approach is how we honour COPPA, the GDPR (including its rules for children) and the UK Age-Appropriate Design Code.
2. What we store
To make the game work we store: world contents (blocks and edits), world names and build tags, the text typed into Workshop challenges, game progress (XP and unlocks), and the random codes that identify worlds, saves and rooms. All of it is keyed to those random codes — not to any person. On your device, the browser keeps local progress and your codes; that data stays on the device.
3. What we never collect
No names, no email addresses, no dates of birth, no photos, no contact lists, no precise location, no voice. No advertising identifiers and no behavioural profiles. We show no third-party ads, we run no third-party analytics trackers, and we never sell or rent data.
4. Technical data
Our hosting provider (Cloudflare) briefly processes IP addresses and connection logs as every website's infrastructure must — to deliver the service and defend it against attacks. We do not use this information to identify players.
5. Text your child types
Workshop prompts and other in-game text are stored with the world and may be reviewed by moderators for safety. Please teach your child never to type personal information into the game. If a cloud AI service is used to grade Workshop text in the future, the text will be sent without any identity attached to it.
6. Payments (future)
The alpha is free. If an optional family plan launches later, checkout will be for adults and handled by a payment provider (such as Stripe), which processes the parent's payment details under its own privacy policy. Children's play data stays keyed to codes and is never joined with payment identity.
7. Legal bases
Where the GDPR or UK GDPR applies, we process the data described above on the basis of our legitimate interest in operating, securing and moderating a service deliberately designed to hold no personal data — and on consent where the law requires it. Because we do not knowingly collect personal information from children, the parental-consent mechanisms of COPPA and GDPR-K are not triggered in normal play.
8. Retention and deletion
Worlds are kept while they are in use. You can delete a world from within the game, or ask us to delete it by sending us its code. Short-lived backup snapshots used for safety rewinds are deleted as they age out. Data on your device can be cleared through your browser settings at any time.
9. Security
All traffic is encrypted in transit. Moderation tools sit behind access-controlled credentials. And the most effective safeguard of all: there is no database of personal information to steal.
10. Your rights
Depending on where you live, you have rights to access, correct, delete and object to the processing of personal data. Because our data is keyed to random codes rather than identities, include the relevant code when you contact us so we can find the data the request concerns. You can also complain to your data-protection authority.
11. Changes
If we change this policy, we will update the date at the top. If a change ever means we would start collecting personal data, we will say so prominently before it takes effect.
12. Contact
Tomospire is operated by [OPERATOR NAME]. Parents and anyone else can reach us at [email protected] with any privacy question or request.