Privacy Policy

TileSlide by Witzora · Last updated: 2026-07-05

1. Who we are

TileSlide is developed and operated by Witzora (“we”, “us”), based in Sweden. We are the data controller for the processing of your personal data under the EU General Data Protection Regulation (GDPR). We have not appointed a data protection officer, as our processing does not require one under Article 37 GDPR. Contact us at contact@witzora.com for any data protection matter.

2. Scope

This policy covers the TileSlide web app and future mobile versions, including all features provided through them. You can play as a guest without an account — in that case we process essentially no personal data at all; your statistics are stored only locally on your device.

3. Data we collect

Account data: the email address from your sign-in method (Google, Apple or email/password) — used solely for signing in and never shown to others; your display name; country and continent if you have chosen one.

Game data: results (time, move count, when played, puzzle size and per-move timestamps), Daily challenge results and streak, duel invitations and duel results, and your rating.

Your photos: images you use for photo puzzles are stored privately on your account (max 10) and are never shown to others.

Preferences: language and timezone are stored on your profile; other settings (theme, sound, etc.) only locally on the device.

Presence: a transient online signal is used during duels.

4. Public data

The leaderboards are public: your display name, country, time and move count can be seen by anyone, including signed-out visitors. Your email address is never public and cannot be derived from the leaderboards. If you choose a display name that cannot be linked to you as a person, your results are effectively pseudonymous.

5. Legal basis

We process data to perform our contract with you (providing the game, accounts and leaderboards), based on legitimate interest (fair leaderboards, protection against cheating and abuse, display-name moderation) and, where applicable, consent (future usage statistics — see Consent management in the app).

6. How we use the data

We use the data to run the game: saving and showing results, computing leaderboards, statistics and rating, matching duel players, maintaining your streak and checking that display names are appropriate. We do not use your data for advertising and never sell it.

7. Sharing with third parties

We never sell your data. We use Google Firebase (authentication, database, hosting) as a data processor; data is stored in the EU region (europe-west1). New display names are checked automatically with an AI service (Google Vertex AI in the EU) — only the name itself is sent, no other data.

8. Transfers outside the EU/EEA

The data is stored in the EU. To the extent Google, as a processor, processes data outside the EU/EEA, it does so under the EU Commission's standard contractual clauses and Google's data processing terms.

9. Retention

Account data is kept for as long as the account exists. If you delete your account, your profile, results, photos, duels and invitations are removed after the 7-day grace period. Anonymous aggregated statistics (such as solve-time histograms) and historical daily-win records (with no link to a name) are unaffected — they contain no personal data. Guest data exists only on your device and disappears when you clear your browser data.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, the right to object to processing, and the right to withdraw consent at any time. Exporting your data and deleting your account are built into the app under Consent management. For other requests: contact@witzora.com.

11. Children's privacy

TileSlide is intended for users aged 13 or older. In countries where the age of consent for data processing is higher (for example 16 in Germany), a guardian's consent is required. We do not knowingly collect data from children under 13.

12. Automated processing

Two automatic checks are used: new display names are reviewed by an AI model (inappropriate names are rejected — you can then pick another), and solves are automatically validated against cheating (invalid results can be removed from the leaderboards). Neither check has legal effects for you, and you can contact us if you believe a decision was wrong.

13. Cookies and local storage

The app uses the browser's local storage for the sign-in session (Firebase Auth) and your settings. We use no advertising or tracking cookies and no analytics service today. If anonymous usage statistics are introduced later, they can be turned off in the app under Consent management.

14. Security

All traffic is encrypted (HTTPS). Database access is governed by security rules — for example, your photos can only be read by you, and saved results cannot be changed afterwards. Only authorized administration has access to account data.

15. Changes to this policy

We may update this policy when needed, for example when new features are added. The date at the top shows the latest version; material changes are announced in the app.

16. Complaints

If you believe we process your personal data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se, or the corresponding supervisory authority in your country.

17. Contact

Questions about this policy or your personal data: contact@witzora.com.