Privacy policy
Who we are
Tilehit (tilehit.com) is run by Appslinger, 77 Camden Street Lower, Dublin, D02 XE80, Ireland ("we", "us"). We are the data controller for the information described here. Contact: the Contact us form at tilehit.com/#contact. Common questions are answered in the FAQ.
The short version
- You don't need an account to play, and we don't ask for your name or email. Buyers can choose to sign in with their purchase email to find their keys and manage devices.
- Your progress (streaks, stats, settings) is stored in your own browser, not on our servers.
- If you buy an unlock, Stripe (Managed Payments) handles the payment. We only see your license key, your order details and the email address it was sold to.
- Tilehit may show a banner ad from Adsterra, and optional rewarded ads from Google. Tilehit Club members do not see ads.
What is stored in your browser
Tilehit uses your browser's local storage to remember your game. It does not keep your license key.
| What | Why |
|---|---|
| Streak, stats and results of past puzzles | To show your streak, stats and archive |
| Today's and this week's finished puzzle | So a finished puzzle stays finished when you come back |
| Chosen tile theme, and whether you've seen the help screen | To remember your settings |
| A random seat id for this device's unlock, and a random device ID | To keep a paid unlock working here without storing the license key |
Clearing your browsing data deletes all of it. Your paid unlock can be restored by signing in at Your purchases with the email you paid with.
Free Practice rounds are counted on our server so the daily allowance works across private windows. For this we store, for two days, a one-way hash of your random device ID and a one-way hash of your IP address, each with a count of rounds played that day. We can't turn these hashes back into your device ID or IP address.
Payments and license keys
Purchases are sold by Stripe through its Managed Payments service, which acts as the merchant of record: it takes your payment, handles sales tax and VAT, and our server issues your license key on the page after payment. Stripe's privacy policy covers the details you give at checkout. When this device is unlocked, from the page after payment or from Your purchases, Tilehit sends the key and a random device ID to our server (hosted by Cloudflare) once, to activate this device. The browser then keeps a random seat id, not the license key, and re-checks that seat about once a week. We keep a copy of each license key with its product, status, order reference, purchase email and the devices it's activated on. Stripe shares with us your email address and order details so we can provide support. We keep these for as long as needed for support, refunds and our legal and tax obligations (usually 6 years under Irish tax rules).
Advertising
Tilehit may show a banner ad in the game, and optional rewarded ads when you tap a button (a hint, an extra Practice round, or a streak save). The banner is provided by Adsterra. Rewarded ads, and any full-screen ad between Practice rounds, are provided by Google (AdSense and H5 Games Ads). Adsterra and Google may use cookies and similar technology, and may receive your IP address and device information, to choose and measure ads. The banner can use cookies when it loads. For Google ads in the EU and UK, a consent message asks before personalised ad cookies where the law requires it. You can change that choice from the message. If you decline, you may still see ads that are not personalised. See Adsterra's privacy policy and how Google uses information from sites that use its services. Tilehit Club members do not see ads.
Signing in
Signing in is optional and only for buyers. If you open Your purchases and sign in, Clerk (Clerk, Inc.) keeps a sign-in account with your email address and password (and may email a one-time code to verify a new account), plus when you signed in and technical data such as your IP address and browser, which it uses to keep sign-in secure. Clerk sets a cookie in your browser so you stay signed in until you sign out. That cookie is sent to Clerk, not stored with your game progress. Sign-in is protected by Cloudflare Turnstile. Our server uses your verified email only to list the purchases sold to that email, unlock this device, and let you remove a device. Clerk's privacy policy covers its part.
Visitor statistics
We may use Cloudflare Web Analytics to count visits and see which pages are used. It does not use cookies or track you across sites. Our site is hosted by Cloudflare, which processes technical data such as IP addresses to deliver the site and protect it from abuse.
Moving progress to another device
If you use "Move to another device", your streak, stats, archive results and theme choice are stored on our server under a one-time code for up to 24 hours, then deleted. The code works once, and the data is deleted as soon as it's used. License keys are not part of that transfer. A purchase moves by signing in at Your purchases. You don't type a key.
Security
Requests to our server are rate-limited and sent over HTTPS. Admin access is protected by Cloudflare Access. License data is kept in a Cloudflare D1 database, which is encrypted at rest.
Contact form and email
If you contact us, we use your message and email address only to reply and to keep a record of support requests. Contact form messages are kept for up to 180 days. The form uses Cloudflare Turnstile to block spam, which checks your browser without tracking cookies.
Legal basis
We process data to provide the game and your purchases (contract), to show a signed-in buyer the keys sold to their email (contract), to keep the service secure and working (legitimate interests), for personalised ads where you have agreed (consent), and to meet tax and accounting rules (legal obligation).
Children and families
Tilehit is a number puzzle for a general audience, including families. Nobody needs to give their age, name or email to play, and progress stays on your own device. When ads are shown, we ask the ad networks for ads suitable for a general audience, not adult ads.
If you're under 18, ask a parent or guardian before buying anything. The Daily puzzle is free. Buying confirms you are 18 or older, or that a parent or guardian has said you may buy. If you think a child has sent us personal data (for example through the Contact form), tell us and we'll delete it.
Deleting your data
Use Delete my data on this device in the stats screen (the chart button at the top of the game) to remove everything Tilehit keeps in your browser: streak, stats, settings and the unlock on this device. Sign in at Your purchases to restore a purchase. Sign out is on that same screen. To delete the sign-in account itself, use the Contact form.
Data on our server deletes itself: Practice counters after two days, progress-transfer codes after 24 hours, contact messages after 180 days. To have your purchase records or a contact message deleted sooner, use the Contact us form. We have to keep basic order records for tax for as long as the law requires.
International transfers
Some providers (for example Stripe, Clerk, Google and Adsterra) may process data outside the European Economic Area. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Your rights
Under the GDPR you can ask to access, correct or delete your personal data, object to or restrict how it's used, and withdraw consent at any time. Use Contact us and choose "Other". You can also complain to the Irish Data Protection Commission at dataprotection.ie.
Changes
If we change this policy we'll update the date above. Significant changes will be shown in the game.
Terms of use
The game
The Daily puzzle is free to play. We may change, pause or retire features, puzzles or prices at any time. Please don't try to bypass paid features, copy the game, or disrupt the service.
Paid unlocks
- Unlimited Practice (one-off payment, up to 2 devices) and the Theme Pack (one-off payment, up to 3 devices) unlock their features for as long as Tilehit is offered. A new browser counts as a new device.
- Tilehit Club (up to 3 devices) is a subscription, billed monthly or yearly, and renews automatically until you cancel. Payment is taken by Stripe. You can cancel any time at app.link.com, the Link login for that Stripe checkout, where you see your orders and manage subscriptions, or by contacting us with the email you paid with. Access continues until the end of the period you've paid for, then stops. Steps are in the FAQ. Cancelling there is separate from signing in to Tilehit.
- Signing in at Your purchases uses the email you paid with. It unlocks this device and lets you remove a device you no longer use. Removing a device frees its place, and that device stops being unlocked. The page after payment unlocks the device you paid on, so that device does not need a sign-in.
- Features included in each plan are described in the game at the time of purchase. We don't promise future features.
- License keys are for your own use. Keys that are shared publicly may be disabled.
Refunds
Purchases are sold by Stripe as the merchant of record, under the buyer terms shown at checkout. Those terms include any cooling-off or cancellation rights that apply where you live. Your license key is delivered on the next page after payment, and that page unlocks the device you paid on. Another device unlocks by signing in. You don't type the key. Before checkout you confirm you are 18 or older, or that a parent or guardian has said you may buy, and that you understand the key is delivered at once.
If we can't get your unlock working after you contact us, we'll refund you. Change of mind after the key is shown is not a refund reason. Cancelling Tilehit Club stops the next renewal; it does not refund the period you've already paid for. This doesn't affect your statutory rights.
If you're under 18, you need a parent or guardian's permission to buy. Parents who believe a purchase was made without that permission can contact us; we'll review the order. A claim alone is not an automatic refund.
Ads
We may show a banner ad in the game. It comes from Adsterra. You do not have to watch it, and it does not pay a reward. Rewarded ads are optional: you tap a clear button (for example "Watch a short ad for 1 more round") before any rewarded ad starts. The reward is an in-game benefit only (extra Practice round, hint or streak save), not money, and is given when the ad completes. Between Practice rounds we may show a full-screen ad at a natural pause ("Play another"). We don't control the content of third-party ads. We ask for ads suitable for a general audience, and you can report an unsuitable ad through the Contact form. Tilehit Club members do not see ads.
Liability
Tilehit is provided as is. We aim to keep it running but can't guarantee it will always be available or error-free. Nothing in these terms limits liability that cannot be limited under Irish law.
Governing law
These terms are governed by the laws of Ireland. If you're a consumer, you also keep the protection of the mandatory laws of the country where you live.
Contact
Appslinger (Tilehit), 77 Camden Street Lower, Dublin, D02 XE80, Ireland. Contact: the Contact us form at tilehit.com/#contact.