STOMP Privacy Policy

• STOMP works fully offline. Online features are optional and can be switched off in SETTINGS · ONLINE.
• We never ask for your real name, email address, age, location, contacts or photos.
• No ads, no tracking, no analytics or advertising software, and we do not sell or share your data for advertising.
• Deleting a profile in the game erases that profile's online data.
• The game asks before your name and scores are first shown to other players.

Your profiles, statistics, unlocks, settings, local leaderboards and saved progress are stored only on your device (or in your platform's cloud saves, if you use them). We never receive them. Whether you own the full game is remembered on your device and checked with the store you bought it from; we never receive it.

Only while online features are on:

Your name is "not published" until you choose SHOW MY NAME when the game asks, and whenever Publish name & scores is off. While it is not published, no name or score is sent to the leaderboards, a game you host is called "STOMP GAME", and the players in your game see a plain name such as "Player 2".

Please do not use your real name as a display name. Names are checked against a list of offensive words before they are shown.

You do not have to give us any of this. Nothing here is required by law or by a contract; without it the online feature that needs it does not work, and the rest of the game does.

Multiplayer. When you play online or on a local network, your device connects directly to the other players (or, where needed, through our relay service). The players in your game can see your IP address, your display name (or the plain name above), the look you chose for your elephant and how you play. Their devices also receive a random ID for your profile, which a host's device uses to keep a removed player out for the rest of that session. This goes between the players' devices, through the relay when needed; we do not store it. This version of the game has no text or voice chat. Hosts can remove players from their game.

Local network. To find nearby games, STOMP sends a small discovery message on your local network. It contains the game's name (your display name, or "STOMP GAME" when your name is not published) and the game version. Local network play works with online features switched off.

Relay service. If your network can't accept direct connections, game traffic may pass through a relay we run. It forwards traffic without reading or storing it, keeps IP addresses in memory only while your game is running, and writes no logs that contain them.

Purchases. If you buy STOMP or its FULL GAME unlock, the store you use (Steam, Apple, Google, Microsoft or Sony) handles the payment under its own privacy policy. We never see your payment details, and the game sends us nothing about your purchase.

Where the GDPR or UK GDPR applies, we rely on:

• Providing the service you asked for (a contract with you): showing your name and scores on leaderboards, listing and joining online games.
• Our legitimate interests in keeping the service safe and fair: checking scores, filtering names, limiting abuse, keeping short security logs, and acting on reports.

We do not use your data for advertising, profiling or automated decisions that have a legal effect on you.

• Supabase hosts our online database and the anonymous accounts.
• Cloudflare carries traffic to that database and protects it from attacks.
• Our relay host (a rented server), only when a game needs the relay.

These companies act on our instructions. They are based in the United States and may process data there and in other countries where they operate; where the law requires it, the transfer is covered by standard contractual clauses or an equivalent. You can ask us for a copy of those safeguards.

• Display names: while you use them. A name unused for 180 days is released so that someone else can take it. A score keeps the name it was set with until the score is removed.
• Scores and the anonymous account: until you delete the profile in the game, or ask us to delete them. Daily-board scores are removed once they are 14 days old (the clean-up runs at least every six hours).
• Hosted game listings: no longer shown within about 90 seconds after the game ends, and deleted from our database within about six hours.
• Abuse-prevention logs: 24 hours, then removed by the same clean-up (within about six hours). Counts of rejected scores contain no personal data and are kept for 90 days.
• Name reports: deleted after 180 days. That includes reports other players sent about your name, which are kept for that time even if you delete your profile.
• Moderation records: if we block a name or suspend an account for breaking the rules, we keep the blocked name, the anonymous account ID and the reason for as long as the block is needed.
• Server request logs and backups: kept by our hosting providers for a short period for security, troubleshooting and recovery, then deleted on their schedule.

• Switch it off: SETTINGS · ONLINE lets you turn online features off entirely, or stop publishing your name and scores. Switching off stops anything new being sent; scores already on the boards stay there until you delete the profile or ask us.
• Delete it: deleting a profile in the game erases its name, scores, hosted games, any reports it made and its anonymous account from our servers. If you're offline, the deletion happens the next time the game connects. Three things are not erased this way: moderation records, reports other players sent about your name, and copies in our providers' backups, each kept only for the time given above.
• Hide or report a name: REPORT A NAME on a leaderboard, in the list of online games or in a lobby.
• Ask us: contact us at https://htmlguy.com/contact to see, correct, delete or receive a copy of your data, to object to how we use it or ask us to restrict it, or with any question. Tell us your display name and, if you can, the PLAYER ID shown in SETTINGS. We answer within one month and never charge for it. If a request is unusually complex the law lets us take up to two more months; if we need that, we tell you within the first month.
• Complain: you can complain to your data protection authority. In the United States, some states give you further rights; we do not sell personal information and we treat every request the same way wherever you live.
• Do Not Track: STOMP is not a website and does not follow you across apps or websites, so there is no tracking for a Do Not Track or similar signal to switch off.

STOMP is not directed to children under 13, and we do not knowingly collect personal information from them. The game asks for no personal information, has no chat, and its online features can be switched off. If you believe a child has shared personal information with us (for example in a display name), contact us and we will delete it.

If we change this policy we'll update the date above and, for significant changes, mention it in the game's release notes.