Privacy and data
Privacy at Where's Tiny
This page explains what data the game uses, why it is needed, and the choices available to you.
The short version
You can play without an account. We do not sell personal data, run advertising trackers, or use your gameplay for targeted advertising. Accounts are optional and exist to keep your results across devices.
Data we process
If you create an account, we process your email address, public alias, optional display name and optional avatar. Authentication is handled with Supabase and linked to a local player record.
A game record can include the puzzle played, start and completion times, elapsed time, mistakes, clues used, guess coordinates, zoom use and whether Tiny was found. Anonymous play uses a random local player token instead of an account.
For reliability and security, the service may keep essential session data, audit and error logs, and coarse Core Web Vitals measurements such as route group, language, device class and release version. Performance samples do not include email, account ID, IP address or free-form text in their application payload.
Why we use it
We use this information to run the daily puzzle, save your history when requested, calculate game results, protect accounts, investigate errors and improve loading and interaction performance.
Services and sharing
Where’s Tiny uses its application server and Postgres database for product data, private storage for source puzzle assets, and Supabase for authentication. Infrastructure providers process only the data needed to deliver those services. We do not sell personal data.
Retention and your choices
Account and game history are kept while they are needed to provide your profile and saved results. Operational logs and performance samples are kept only for troubleshooting, security and product measurement. You can play anonymously, clear local browser data, or request correction or deletion of your account data.
Cookies and local storage
Essential HttpOnly cookies keep player and admin sessions signed in. Local storage remembers language preference, anonymous progress and other game state. These are functional technologies, not advertising cookies.
Contact and rights
Depending on where you live, you may have rights to access, correct, delete, restrict or export your personal data, or object to certain processing. Contact privacy@wherestiny.app with the email linked to your account and a clear description of the request.