Privacy

Privacy information

Last updated: September 23, 2026.

This notice applies to the Tiliyo website and the Tiliyo mobile app. The website and app can be used without creating an account.

Operator and privacy contact

Tiliyo is operated by the Google Play developer SW_hello. Privacy questions and requests can be sent through the durable public contact form; a public personal email address is not displayed.

Information stored on your device

The website uses browser local storage for preferences, theme choice and personal best scores. The mobile app stores language, sound settings, puzzle progress and personal best scores locally on the device. These gameplay records are not sent to Tiliyo. The app also stores a random installation wallet identifier and a cached Hint Ticket balance; the identifier is sent to the Hint Ticket service as described below. Clearing or uninstalling the app removes these local records.

Mobile app data and permissions

The mobile app does not ask for camera, microphone, contacts, precise location, photo or general file access. Language, sound and best-score data remain on the device. Google Mobile Ads may access the Android advertising identifier as described below.

Hint Tickets and security checks

When the mobile app starts, it creates a random installation identifier for the free Hint Ticket wallet. Tiliyo's service, hosted by Cloudflare, stores that identifier with the current balance, daily grants, Hint Ticket uses, verified rewarded-ad credits, transaction identifiers and server timestamps. The wallet is not linked to a Tiliyo account, name or email, and the service does not receive puzzle boards or scores.

Wallet-changing requests are checked with Google Play Integrity to confirm the app package and recognized Play installation and to prevent abuse. Tiliyo stores limited integrity events containing the opaque wallet identifier, endpoint, app version, integrity verdict, device-verdict labels and server timestamp. These checks protect Hint Tickets and do not block the core offline puzzles.

Uninstalling or clearing the app can remove the local wallet identifier, so an unspent balance cannot currently be restored on another installation. Uninstalling does not automatically delete the server ledger or security records.

Optional Google Play Games cloud backup

Cloud Backup is optional. When you enable it, Tiliyo signs in to Google Play Games Services and stores a Saved Game associated with your Play Games gamer identity. Tiliyo remains fully usable without Cloud Backup.

The cloud save contains puzzle and stage completion, current puzzle attempts, personal records, Daily Challenge history, and selected tutorial, accessibility, audio, screen-orientation and language settings. It does not contain the Hint Ticket wallet or installation identifier, Play Integrity data, rewarded-ad transactions, temporary tokens, local diagnostics or advertising data.

You can turn off Cloud Backup or delete Tiliyo's cloud save in the app's Settings screen. After uninstalling the app, you can delete Tiliyo's per-game data through your Google Play Games profile. This deletes Tiliyo game data, not your Google account.

• Google Privacy Policy
• Google Play Games profile and game-data controls

Mobile app advertising

The mobile app uses Google Mobile Ads (AdMob) to show a banner in a reserved area on non-game navigation screens, such as Home, Guide and Settings. It does not request or show the banner on game or result screens and does not use app-open or interstitial ads. A rewarded ad is loaded only after you choose the Hint Ticket reward; after server verification, a completed reward grants one Hint Ticket.

Google Mobile Ads automatically collects and shares IP address (which may estimate approximate location), app interactions, diagnostic information and device or account identifiers for advertising, analytics and fraud-prevention purposes. Google states that this data is encrypted in transit.

Where required, Google's User Messaging Platform asks for consent before ads load. Required privacy choices can be reopened from the app's Settings screen.

• How Google uses information from partner apps
• Manage Google ad preferences

Mobile app analytics and crash reports

In Android app versions that include Google Analytics for Firebase, usage analytics is off by default. You can opt in or out at any time in the app's Settings. Only when enabled, Google receives app-open, screen-view and session events and an app-instance ID; it may derive approximate location from a masked IP address. Tiliyo disables Android advertising ID and SSAID collection in Firebase Analytics. Turning analytics off stops future collection and resets its local analytics data, but does not immediately erase earlier reports held by Google.

Firebase Crashlytics operates separately from the optional analytics setting. It automatically sends crash stack traces, relevant app state, app and device metadata, and installation identifiers to diagnose failures and measure affected installations. AdMob's advertising privacy choices are also separate.

We do not intentionally attach puzzle boards, scores, Hint Ticket wallet identifiers, Play Games gamer IDs, names or email addresses to these reports. The data is encrypted in transit. Uninstalling the app does not immediately erase reports already collected; Google retains them under the configured Firebase and Analytics settings. For questions or data requests, use the contact form above.

Sharing a score

Sharing is optional. When you tap the app's share button, the score and game name are included in a Tiliyo challenge link and passed to your device's standard share sheet. The app does not upload the score while composing the share, but the recipient, the external app you select and Tiliyo's website hosting provider may process the link and its score parameter when it is sent or opened. Tiliyo does not learn which external app or person you choose. The selected external app's privacy practices apply after you choose it.

Contact messages

If you submit the website contact form, the name, reply address, category and message you provide are processed by our form delivery provider solely so the message can be delivered and answered. Do not include sensitive information that is not needed to answer your request.

Website advertising and analytics

The website may use third-party advertising or audience measurement services. Those providers may use cookies or similar technologies subject to their own policies and available consent controls. Website advertising and mobile-app advertising are configured separately.

Retention, deletion and security

Device-only gameplay records remain until you clear them or remove the app. An optional Play Games cloud save remains until you delete it in Tiliyo Settings or through your Play Games profile. Wallet, ledger, reward-verification and integrity records are retained while reasonably needed to provide Hint Tickets, prevent abuse, resolve transaction issues and meet legal obligations; there is currently no fixed automatic deletion period or self-service deletion tool. Tiliyo does not create user accounts, so account deletion does not apply. Contact messages are kept only as long as reasonably needed to answer, prevent abuse and meet legal obligations. We use reasonable safeguards and encrypted transport, but no internet transmission or storage system can be guaranteed completely secure.

Children

Tiliyo is a general-audience puzzle service and is not directed specifically to children under 13. The games do not require an account and do not knowingly ask children to provide personal information.

Changes and contact

We may update this notice when features or service providers change. The date above identifies the current version. For a privacy question or deletion request concerning a contact message, use the public contact form.