Privacy Policy

1. Who we are

Tinifuni (“Tinifuni”, “we”, “us”, or “our”) provides casual browser games, quizzes, scores, and sharing features. This policy applies to the Tinifuni website and services that link to it.

2. Information we collect

Information you provide

• When you connect a Google account: your Google account identifier, name, email address, and profile picture, where available.
• Messages or information you voluntarily send when contacting us.

Information collected automatically

• Gameplay information such as scores, answers, selected level, series identifier, attempts, streaks, and progress.
• A random guest identifier and remaining free-play allowance stored in a signed token.
• Technical information commonly recorded by servers, such as IP address, browser type, device type, referring page, timestamps, and error logs.
• Cookie, local-storage, advertising, and analytics information described below.

3. How we use information

• Provide games, quizzes, authentication, scores, levels, and series.
• Remember guest allowance, preferences, progress, and best results.
• Secure the service, prevent abuse, diagnose errors, and measure performance.
• Understand aggregate usage and improve content.
• Display and measure advertising when advertising services are enabled.
• Comply with law and enforce our Terms of Service.

4. Cookies and local storage

We use necessary cookies for signed guest allowance, Google OAuth state, and signed login sessions. Guest and login tokens may remain for up to 30 days. They are protected with appropriate settings such as HttpOnly, Secure, and SameSite where applicable.

We also use browser local storage for scores, attempts, preferences, quiz-series manifests, and progress. You can remove this data through your browser settings, although doing so may reset local progress.

5. Google sign-in

Google sign-in is optional until the free guest allowance has been used. Authentication is handled through Google OAuth. We receive basic profile information authorized by you and never receive or store your Google password. Google processes information under its own privacy terms.

6. Advertising and analytics

We may use services such as Google AdSense and analytics tools. When enabled, these providers may use cookies, device identifiers, IP addresses, and activity information to deliver, limit, personalize, or measure advertising and understand service usage. Where required, Tinifuni asks for your choice before these purposes are enabled. The available choices may vary by location.

7. When information is shared

We do not sell your personal information. We may share limited information with hosting, authentication, analytics, advertising, security, and infrastructure providers that help operate Tinifuni; when required by law; to protect users or the service; or as part of a merger, financing, acquisition, or transfer of assets.

8. Retention and security

Login sessions expire after 30 days and revoked sessions are removed after a short security window. Inactive guest records are removed after 180 days. Completed moderation reports are retained for up to one year, and sent email jobs for up to 90 days. Gameplay attached to an account remains until the account is deleted. Browser data remains until you or the browser clears it. Encrypted database backups follow a limited rolling retention schedule.

No security method is perfect, but we use signed tokens, server-side revocation, secure cookies, access controls, encrypted backups, validation, and rate limits.

9. Your choices and rights

You may play as a guest within the available allowance, decline Google sign-in, clear browser data, disconnect your Google account, download a JSON copy of account data, or delete your account and associated progress from the Pencapaian page. Where the European consent message applies, use the “Privacy & cookie settings” control on any page to review, change, or withdraw your advertising choices. Depending on where you live, additional privacy rights may apply.

10. Children

Tinifuni is designed for a general audience. We do not knowingly collect personal information from children below the minimum age required to consent to online services in their location. A parent or guardian who believes a child provided personal information should contact us.

11. International processing

Our providers may process information in countries other than your own. Where required, we rely on appropriate legal safeguards for such transfers.

12. Changes to this policy

We may update this policy as the service changes. We will revise the “Last updated” date and provide additional notice when required by law.