Privacy Policy
Effective 20 June 2026 ยท CVPK Digital Studio LLC
Time Tussle is a free history card game. You can play as a guest without providing an email address or password. Guest play creates an anonymous account through Supabase, our authentication provider, and stores a profile and game data on our servers. Registering with an email address lets you sign in again and use your profile on another device. We use one crash-reporting service to fix bugs. We do not sell your data, we do not run ads, and we do not track you across other apps or websites.
What we collect
If you play as a guest: an anonymous account identifier, a display name (generated when you start), and your profile and gameplay data. These are stored on our servers, not just on your device. Guest play does not require your email address or real name.
If you register with an email address: your email address, a password (stored and hashed by our authentication provider, Supabase, we never see it in plain text), and a display name you choose.
Gameplay data: statistics such as games played, won, and lost, streaks, doubts made and called correctly, cards placed, and badges earned.
Diagnostics: crash reports and error traces through Sentry, configured to exclude personal identifying information.
Stored on your device: your language choice, your music and sound settings, a cached copy of the card deck, and your login session tokens. The app also stores pending practice results and account-deletion request information so interrupted operations can be retried.
What we do not collect
No location. No camera or photos. No microphone or audio recordings. No contacts. No health data. No advertising identifiers. There is no chat between players, so we do not collect message content.
How we use your data
- To run the game and match you into multiplayer rooms.
- To save and show your stats and badges.
- To find and fix crashes and bugs.
That is the full list. We do not use your data for advertising and we do not sell it.
Who processes data for us
| Provider | Purpose |
|---|---|
| Supabase | Account authentication and database |
| Railway | Backend server and game database hosting |
| Sentry | Crash and error reporting |
| Apple App Store, Google Play | App distribution |
Data retention and deletion
Both guest and email accounts can be deleted from Settings > Delete Account. You can also request deletion by email without installing the app. We need to verify that the account belongs to you before acting on an email request.
Once the server accepts a deletion request, access to that account is revoked. Removing the authentication account and its profile data may still be in progress. A return to the sign-in screen does not mean every deletion step has finished.
Deletion removes the authentication account, profile, personal statistics, and badges. Shared game records and other players' results remain; your account link is removed and your name in those records is replaced with Deleted player.
A temporary deletion record and status receipt remain to block old sign-ins and check the request. They become eligible for removal only once deletion is complete and at least 24 hours and 1 minute have passed since removal of the authentication account was confirmed. Pending requests are kept until resolved. This is not a retention period or deletion deadline for provider backups or diagnostic logs.
Uninstalling the app does not request server-side deletion and may leave you unable to access a guest account. In the app, confirming that you want to leave a guest account requests its deletion. Signing out of an email account does not delete it. See delete account for the steps and what to do if a request cannot be confirmed.
Your rights
You can ask us to access, correct, or delete your personal data. If you are in the EU, UK, or a US state with privacy laws, you have additional rights including deletion and objection. Contact us to exercise them.
Children
The game is suitable for a general audience and contains no violence, ads, or purchases. Creating an account requires you to be at least 13 years old. We do not knowingly collect personal data from children under 13.
International transfers
CVPK Digital Studio LLC is based in the United States. Our providers may process data in the US and other regions. Where required, we rely on appropriate safeguards for international transfers.
Changes
If we change this policy we will update the date above and, for significant changes, notify you in the app.
Contact
CVPK Digital Studio LLC, hello@cvpkdigitalstudio.com.