Twiddle Play

Legal · Twiddle Play app for Android

Privacy policy

Twiddle Play is a free game store: install HTML5 games and play them offline. This page explains exactly what the app sends us, why, and how to have it deleted.

Last updated 3 November 2026

The short version

  • No accounts. The app never asks for your name, email, phone number, contacts, photos or location.
  • It makes up a random device ID, and sends play and ad events with it, so we can count players, pay game makers their share of ad money, and stop fraud.
  • When you search the store, the words you type go to our server to find games. They aren't stored with your device ID.
  • Ads come from Google AdMob, whose SDK uses your phone's advertising ID and collects ad interactions, diagnostics (including crash data) and an approximate location from your IP address. In the EEA, the UK and Switzerland the app asks for your consent first; change it any time in Settings › Privacy options.
  • To stop ad fraud, the app asks Google Play whether it is a genuine copy on a genuine device (Play Integrity). We keep only the answer.
  • If you report a game, we get the game, your reason and any note you write, linked only to the random device ID. Game makers never see reports.
  • Everything is sent encrypted (HTTPS). Raw events are deleted automatically after 180 days. Email us your device ID and we delete everything linked to it, reports included.
  • We don't sell your data, and game makers only ever see totals.

Who we are

Twiddle Play (Android package com.twiddlelabs.play) is run by TwiddleLabs. This policy covers the app; the rules for using it are in the terms of use. Questions, requests and complaints: noreply@twiddlelabs.com.

What the app sends us, and why

A random device ID

On first launch the app registers with our server and gets a random ID (a UUID) plus a secret token. It is not your phone's serial number, IMEI or Google account. We store it with the platform (Android), the app version, when it registered and was last seen, and when it first installed each game. The token is stored only as a hash.

WhyTo tell devices apart, so installs and players are counted once and fake traffic can be spotted.

Install and play events

Which games you install, update and uninstall, and when a play session starts and ends (with its length), each with the game, its version, a random session ID and a timestamp. The app also tells us which games and versions are installed, so it can offer updates.

WhyInstall counts, player numbers and play time for each game's maker, update checks, and fraud detection.

Ad events

When an ad is shown, tapped or earns you a reward inside a game: the ad type (full-screen, rewarded or banner), the game, and the estimated value of that ad as reported by Google AdMob.

WhyTo pay each game's maker their share of that game's ad revenue, and to reject invalid ad traffic.

Store searches

When you search the store, the words you type are sent to our server, which answers with matching games. Searches are sent without your device ID and we don't store them with your events or anywhere else; like any web request they can appear for a short time in our web server's access logs (see below). Your recent searches are kept on your phone only.

WhyTo find the games you're looking for.

A Play Integrity check

Now and then the app asks Google Play for an integrity verdict: whether this is the genuine Twiddle Play app installed from Google Play, whether it runs on a genuine Android device, and its licensing status. The request is bound to a hash of the random device ID, so the answer can't be reused on another device. The app passes Google's signed answer to our server, Google decodes it for us, and we store only the verdict (pass or fail, and those three parts of it) and when it was checked. Google processes signals from your device to produce the verdict, under the Google Privacy Policy.

WhyTo stop ad fraud: ad views from fake, modified or emulated copies of the app shouldn't earn anyone money.

Reports you send

If you tap Report on a game, the app sends the game, the reason you picked, the note you type (if any), the game version and the app version, with the device ID. Game makers never see reports: not who sent them, and not what you wrote.

WhySo our team can review a game that may break the rules, and remove it if it does.

All of this goes over an encrypted (HTTPS) connection to our servers. Like any website, our server also sees the IP address of each request. We use it to limit abuse, for example too many registrations from one address. When a device first registers, our internal activity log records that registration with the device ID, the IP address and the Android version. When you send a report, the log notes it the same way: the device ID, the game, the reason and the IP address, never your note. Our web server's access logs also keep IP addresses for a short time, for security and troubleshooting. IP addresses are never stored with your play or ad events.

What we don't collect

  • Your name, email address, phone number or any account: there are no accounts.
  • Contacts, photos, files, microphone, camera or precise location (we never ask for those permissions). Google AdMob may estimate an approximate location from your IP address; see Ads.
  • Payment details: there are no purchases in the app.
  • What you do inside a game. Games run offline in a sandbox on your phone and keep their own saved progress there. They can't read your other data or the store app's data.

Ads (Google AdMob)

Game makers choose whether their game shows ads. Games marked No ads never show any. In the others, ads are served by Google AdMob, inside the app only.

The Google Mobile Ads SDK collects data from your phone for Google: the advertising ID (and app set ID), how you interact with ads (ads shown and tapped), diagnostics such as crash logs and performance data about the SDK and its ads, device and app information, and your IP address, from which Google estimates an approximate location (never your precise location). Google uses it to show and measure ads, to prevent fraud, for analytics and, where allowed, to personalise ads. The app itself sends us no crash reports. Google's use is covered by the Google Privacy Policy and How Google uses information from sites or apps that use its services.

You can reset your advertising ID or delete it (which also turns off personalised ads) in your phone's Settings, under Privacy › Ads or Google › Ads.

Who we share it with

  • Google, as the ad network and for Play Integrity checks (above). Google sees a hash of the device ID inside an integrity request, never your events or reports.
  • Our hosting provider (Amazon Web Services, servers in Stockholm, Sweden), which stores the data for us.
  • Game makers see only totals for their own games (installs, players, play time, ad views, earnings), never device IDs or reports.
  • Anyone else only if the law requires it. We never sell your data.

How long we keep it

  • Install, play and ad events: deleted automatically 180 days after we receive them.
  • Daily totals per game (counts, with no device IDs): kept for the game makers' stats and payments.
  • The device record (ID, app version, dates, first install of each game, and the latest Play Integrity verdict): kept while the app is in use, until you ask us to delete it.
  • Reports: kept while our team reviews them, then deleted automatically 365 days after they are resolved (dismissed or acted on).
  • Activity log entries for the registration and for each report (device ID, IP address, Android version or the report's reason): deleted automatically after 365 days.
  • Fraud checks: when a game's ad traffic looks suspicious, the warning our team reviews can name the device that produced most of it. It is kept while that game's earnings are settled.
  • Store searches: not stored, apart from our web server's short-lived access logs.
  • Backups of the database are kept for 30 days, so deleted data disappears from them within 30 days.

Delete your data

Your device ID is shown in the app:

  1. Open Twiddle Play and go to Settings.
  2. Under Support, tap Copy next to Device ID.
  3. Email it to noreply@twiddlelabs.com with the subject “Delete my Twiddle Play data”.

Within 30 days we delete the device record (with its Play Integrity verdict), every event, report and log entry linked to it, and the device ID from any fraud warning, then reply to confirm. If you keep using the app afterwards, it simply registers again as a new device.

Uninstalling the app removes the device ID, your installed games and their saved progress from your phone. It doesn't remove what we already received, so email us for that. Data that Google AdMob collected is held by Google: you can reset or delete your advertising ID in your phone's settings, and manage it at My Ad Center.

Children

Twiddle Play is a general-audience app and is not directed at children under 13. We don't knowingly collect personal information from children. If you believe a child's data reached us, email us and we'll delete it.

Changes

If this policy changes, we update this page and the date at the top. Important changes are also noted in the app's release notes on Google Play.