Privacy policy.

Who is responsible?

Twentycraft Limited, registered in England and Wales, company number 06663733. Registered office: 10 Gramwell, Shenley Church End, Milton Keynes, MK5 6DF, United Kingdom. Contact: [email protected].

The short version

Read our privacy explanation for young players.

We do not use advertising trackers, sell personal information, run public chat or publish player profiles. Offline gameplay can stay on the device. Cloud accounts, when enabled for an eligible user, store the information needed to save progress and provide private support.

Data we use

Cloud account: a chosen username, random account identifier, an encoded one-way hash of the recovery code, session-token hashes and account creation time. We do not ask for a real name, date of birth, phone number or child’s email.

Game sync: level/attempt identifiers, scores, round duration and remaining lives for completion checks, coins earned/spent, owned items and account save revisions. Submitted offline scores are not independently verified gameplay. Support: the subject, message, ticket identifier, status and replies you choose to send. Do not include sensitive information in reports.

Security: hosting and proxy services process IP addresses, request paths, timestamps and response codes. Request bodies and recovery codes are not intended to appear in application logs.

Purposes and legal bases

We use necessary account, save and support information to provide the requested service and manage that relationship. We use limited security records for legitimate interests in preventing abuse and protecting the service, subject to applicable rights and children’s best interests. Optional tracking would require a separate assessment and consent where required; no optional advertising or behavioural analytics is configured.

When a child’s data relies on consent, the required parental authorisation must be obtained. Under-13 cloud registration remains disabled until verified parental approval is available. Our age and consent approach requires review before a wider family launch.

Children and parents

ODDLOOP is intended for ages 5+. A local username and offline play are available without creating a cloud account. We use high privacy settings for everyone. We do not request exact birth dates or collect identity documents in the game. Under-13 cloud registration is currently unavailable pending a verified parental-consent process. Parents can contact [email protected] to ask about access or deletion.

Offline storage and synchronisation

On Android, pending uploads and account credentials are stored in app-private SQLite with encrypted payloads protected by Android Keystore keys. Game rendering and local saves remain on the device. The sync queue is retried when connected, and acknowledged events are cleared from that queue. Server save records remain until deleted under this policy. Encryption is not a guarantee against a compromised or unlocked device.

Providers and international access

The web and database infrastructure is hosted with Hetzner in Germany. Cloudflare provides DNS/proxy and security services when enabled. Its processing locations can be international; relevant contractual safeguards and provider settings need to be maintained by Twentycraft. Optional live BTC candles come from Binance’s public market-data services through our shared relay; the relay does not send a player’s account details to Binance.

No merchandise payment or fulfilment provider is connected while checkout is disabled. We will update this notice before introducing one.

Retention

Account, latest game-save and virtual-coin ledger data is retained while the account is active, until you request deletion. Detailed round history is retained for 90 days; aggregate service counts contain no account identifier. Support records are retained for up to 12 months after their last update unless needed for a specific unresolved issue, and are deleted with the account. Routine security logs are rotated with a target retention of seven days. Temporary deletion receipts contain a token hash without an account identifier and expire after seven days so a lost deletion response can be retried. A separate minimal erasure journal keeps only a random account identifier and deletion time for 35 days to prevent delayed uploads or backup restoration from recreating deleted accounts.

Rolling database backups are retained for up to 30 days. Deleted data may remain in restricted backups until expiry. Restoring a backup must include reapplying deletion records so erased accounts are not returned to service. Backup recovery and off-site storage must be maintained and tested by the operator.

Deletion and your rights

Use Settings → Account → Delete All My Data for authenticated account deletion. The app explains that progress, coins, inventory and support tickets will be removed. If offline, deletion remains pending until the server acknowledges it. A local reset is not the same as deleting a cloud account.

You may also request access, correction, erasure, restriction, objection and portability where applicable by contacting [email protected]. We may need proportionate proof that the account is yours. Keep your recovery code private. UK users can complain to the Information Commissioner’s Office; users elsewhere may have a local supervisory authority.

Changes

We will update this notice if the service or providers change. Material new data uses will be explained before activation. Contact [email protected] with privacy questions.