Privacy

Effective

Who we are

This website and the Twin Drift app are run by Bot Hero, LLC, a Massachusetts limited liability company doing business as BotHeroGames. We are responsible for all of the data handling described on this page, and privacy questions go to our support email.

How this website actually works

Twin Drift's website has no visitor accounts and no forms — there is nowhere for you to submit personal data or content, because no such interface exists. Where we run diagnostics, they are identifier-free and are not tied back to you personally.

Cloudflare and edge security

Cloudflare protects this website at the network edge. Here is exactly what that means for your data, with no exceptions beyond what is listed below.

  • Cloudflare acts solely as our contracted edge security processor — a security-only role, never an analytics or content vendor.
  • Cloudflare's mandatory web-application-firewall and security-event data is IP-bearing and is retained for no more than 24 hours.
  • Cloudflare's sampled security-analytics data is also IP-bearing and is retained for no more than 7 days.
  • Both windows use the shortest retention plan/configuration Cloudflare offers for this purpose.
  • This data is not exported — no ClientIP Logpush and no other full-IP export exists to us or to anyone else.
  • We have no application access to this data.
  • This data is never used for analytics of any kind.
  • This data is never enriched with other identifiers or datasets.
  • This data is never replayed or reprocessed for a later or different purpose.
  • No copy of this data is retained beyond the 24-hour or 7-day windows described above.

The Twin Drift app

The Twin Drift game app has its own telemetry, separate from this website's diagnostics and from the edge-security processing described above. It is run by us, and here is all of it.

  • With usage sharing on, the app records gameplay events — level started and completed, difficulty band, hint use, and interstitial ads shown or suppressed — alongside a session ID and a platform string.
  • Each install is identified only by a random per-install UUID — never by a device identifier or an advertising identifier.
  • No name, email address, physical address, IP address, or persistent device identifier appears anywhere in the app's telemetry schema.
  • This data is used for analytics only.
  • It is not shared with third parties beyond the processing vendors listed below.
  • Event rows reach Google BigQuery through an ingest endpoint we operate; the raw event files are deleted automatically after 400 days, and the anonymous loaded rows are retained without a fixed deletion deadline.
  • Crash reporting through Sentry is always on and separate from the usage-sharing choice; IP address storage is disabled at the Sentry project level, and performance tracing runs only with in-app consent.
  • Usage sharing is controlled by the app's "Share anonymous usage data" toggle, which is on by default. Turning it off stops collection and transmission immediately, even offline. The random per-install identifier is created once and stays the same for as long as the app stays installed; the toggle controls only whether events are collected and sent.
  • There is no account and no lookup key connecting telemetry to you, so no deletion-request flow exists and none is implied.

Ads in the app

Twin Drift shows interstitial ads served by Google AdMob, a third-party ad network run by Google. The app asks AdMob for non-personalized ads only: it does not request the advertising-identifier permission on Android and never asks for tracking permission on iOS, so Twin Drift does not hand AdMob your advertising identifier. To serve and measure those ads, AdMob's software in the app may still collect your IP address and device and app information under Google's own privacy policy — this is separate from our telemetry, which never uses an advertising identifier. A one-time purchase that removes ads is planned but not yet offered; until it is, these ads are part of every install.

Vendors

  • Cloudflare: Cloudflare is our contracted edge security processor, described in full above.
  • Google Cloud: Google Cloud hosts this website and its backend, including App Engine, Cloud SQL, Cloud Storage, and Cloud Logging, and stores the Twin Drift app's anonymous telemetry events in BigQuery.
  • GitHub Actions: GitHub Actions builds and deploys this website from our source code.
  • Unleash: Unleash manages feature flags that control what this website shows.
  • Email provider: An email provider delivers messages sent to our support and press addresses.
  • Matomo (self-hosted): We run a self-hosted Matomo instance for browser diagnostics. With your consent it sets first-party _pk_id (13-month) and _pk_ses (30-minute) cookies and derives a daily-rotated config_id session hash. With your consent, tracking requests include your full IP address, which Matomo processes; Matomo's default configuration masks part of the address before storing it, and Matomo derives and stores a location_country value from that address before masking it. Matomo is configured to delete raw diagnostics data within 90 days and aggregated reports within 13 months. Declining consent means your browser never contacts the Matomo service at all; if you withdraw consent after granting it, from then on, your browser no longer contacts the Matomo service.
  • Sentry: Sentry receives crash reports from the Twin Drift app so we can find and fix crashes; IP address storage is disabled at the project level, and performance tracing runs only with in-app consent.
  • Google AdMob: Google AdMob serves the non-personalized ads shown in the Twin Drift app and processes device data for that purpose under Google's privacy policy; a one-time purchase that removes ads is planned but not yet offered.

Purchases

Twin Drift currently has no in-app purchases. A one-time purchase that removes ads is planned; when it is offered, it will be made through the App Store or Google Play, Apple or Google will handle payment and keep your payment details, we will never receive your card or bank information, and the app will learn only from the store that the purchase was made so it can stop showing ads. This page will change when that happens.

If you email us

If you email our support or press address, we receive your email address and whatever you write. We use it only to reply and to fix what you reported, and we keep the correspondence only as long as that takes.

Under 13

Twin Drift and this website are not directed to anyone younger than 13, and we don't knowingly collect personal data from anyone that age. If you believe someone younger than 13 has sent us personal data, email us and we will delete it.

Your choices

You can decline or withdraw website analytics consent at any time and turn off usage sharing in the app's settings. Because nothing we hold is linked to an account or lookup key, there is no personal record for us to look up, correct, or delete — but if you have a question about your data, email us and we will answer it.

Changes to this page

We update this page whenever our vendors or data flows change, and we review it at least quarterly. The effective date at the top is the date of the current version.

Privacy questions go to [email protected].