Privacy

Tolpa works without sign-up. We collect as little as possible — just enough to know whether the game works and which mini-games people like.

Stored in your browser

In localStorage: your nickname, a random player token (to bring you back to your room after a disconnect), the source tag if you came via a ?ref= link, and your sound setting. No cookies.

Stored on the server

• Rooms, nicknames and game state live in server memory. A room is deleted 30 minutes after the last player leaves. When the server restarts, rooms (codes, nicknames, tokens, settings) are saved to disk for a few minutes to bring players back to the same room, and then deleted.
• Events without a name: a page of the site or the game opened, room created, joined, main buttons pressed, the first action in a game, match and round started and finished, left the game, answers to questions after a match and about a game (a 1–5 star rating; we keep the game, the question and whether the player won the round). Room codes and tokens are stored as salted hashes. The token is random and not linked to you, but events from one browser are linked together — that is how we see whether someone reached the game and came back later — so by law such data is pseudonymous. Plus coarse signals: device type (touch or keyboard), system (iOS, Android, desktop), the in-app browser (for example TikTok or Instagram), page language, page group (home, game, blog), the source tag and the kind of site you came from (for example "Google search" — domain only, never a page address).
• Error reports: error text, location in code, page, version and browser name (User-Agent).
• Messages from the Contact form: the text and your email if you gave it.

IP addresses are not stored: the server only sees them during a request, to limit excessive requests. Nicknames and game content never go into events.

Who we share with

No ads and no third-party trackers. The developer receives notifications in Telegram: about new errors, about Contact form messages (with your email if you gave it), daily totals without any names, and a daily backup of the events database. Nobody else receives data.

How long we keep it

Events and error reports — up to 90 days. Contact messages — up to one year. Database backups — 7 days. Daily summary totals (how many people and rooms there were) carry no tokens, room codes or other identifiers, so a person cannot be recognised from them; we keep them indefinitely to see how the project grows.

Contact

Questions about your data — use the Contact form.

Updated: 20 October 2026.