Privacy

Who we are

This website and the Twin Drift app are run by Bot Hero, LLC, a Massachusetts limited liability company doing business as BotHeroGames. We are responsible for all of the data handling described on this page, and privacy questions go to our support email.

How this website actually works

Twin Drift's website has no visitor accounts and no forms — there is nowhere for you to submit personal data or content, because no such interface exists. Where we run diagnostics, they are identifier-free and are not tied back to you personally.

Cloudflare and edge security

Cloudflare protects this website at the network edge. Here is exactly what that means for your data, with no exceptions beyond what is listed below.

• Cloudflare acts solely as our contracted edge security processor — a security-only role, never an analytics or content vendor.
• Cloudflare's mandatory web-application-firewall and security-event data is IP-bearing and is retained for no more than 24 hours.
• Cloudflare's sampled security-analytics data is also IP-bearing and is retained for no more than 7 days.
• Both windows use the shortest retention plan/configuration Cloudflare offers for this purpose.
• This data is not exported — no ClientIP Logpush and no other full-IP export exists to us or to anyone else.
• We have no application access to this data.
• This data is never used for analytics of any kind.
• This data is never enriched with other identifiers or datasets.
• This data is never replayed or reprocessed for a later or different purpose.
• No copy of this data is retained beyond the 24-hour or 7-day windows described above.

The Twin Drift app

The Twin Drift game app has its own telemetry, separate from this website's diagnostics and from the edge-security processing described above. It is run by us, and here is all of it.

• With usage sharing on, the app records gameplay events — level started and completed, difficulty band, hint use, interstitial ads shown or suppressed, and the Remove Ads purchase-flow stage and ad-removal action (never a receipt, token or price) — alongside a session ID, a platform string and a build-channel label (release, profile, debug, internal or test harness).
• Each install is identified only by a random per-install UUID — never by a device identifier or an advertising identifier.
• No name, email address, physical address, IP address, or persistent device identifier appears anywhere in the app's telemetry schema.
• This data is used for analytics only.
• It is not shared with third parties beyond the processing vendors listed below.
• Event rows reach Google BigQuery through an ingest endpoint we operate; the raw event files are deleted automatically after 400 days, and the anonymous loaded rows are retained without a fixed deletion deadline.
• Crash reporting through Sentry is always on and separate from the usage-sharing choice; IP address storage is disabled at the Sentry project level, and performance tracing runs only with in-app consent.
• Usage sharing is controlled by the app's "Share anonymous usage data" toggle, which is on by default. Turning it off stops collection and transmission immediately, even offline. The random per-install identifier is created once and stays the same for as long as the app stays installed; the toggle controls only whether events are collected and sent.
• There is no account and no lookup key connecting telemetry to you, so no deletion-request flow exists and none is implied.

Ads in the app

Twin Drift shows interstitial ads served by Google AdMob, a third-party ad network run by Google. The app asks AdMob for non-personalized ads only: it does not request the advertising-identifier permission on Android and never asks for tracking permission on iOS, so Twin Drift does not hand AdMob your advertising identifier. To serve and measure those ads, AdMob's software in the app may still collect your IP address and device and app information under Google's own privacy policy — this is separate from our telemetry, which never uses an advertising identifier. Remove Ads, a one-time in-app purchase in the app's Settings, stops these ads; until you buy it, they are part of every install.

Vendors

• Cloudflare: Cloudflare is our contracted edge security processor, described in full above.
• Google Cloud: Google Cloud hosts this website and its backend, including App Engine, Cloud SQL, Cloud Storage, and Cloud Logging, and stores the Twin Drift app's anonymous telemetry events in BigQuery.
• GitHub Actions: GitHub Actions builds and deploys this website from our source code.
• Unleash: Unleash manages feature flags that control what this website shows.
• Email provider: An email provider delivers messages sent to our support and press addresses.
• Matomo (self-hosted): We run a self-hosted Matomo instance for browser diagnostics. With your consent it sets first-party _pk_id (13-month) and _pk_ses (30-minute) cookies and derives a daily-rotated config_id session hash. With your consent, tracking requests include your full IP address, which Matomo processes; Matomo's default configuration masks part of the address before storing it, and Matomo derives and stores a location_country value from that address before masking it. Matomo is configured to delete raw diagnostics data within 90 days and aggregated reports within 13 months. Declining consent means your browser never contacts the Matomo service at all; if you withdraw consent after granting it, from then on, your browser no longer contacts the Matomo service.
• Sentry: Sentry receives crash reports from the Twin Drift app so we can find and fix crashes; IP address storage is disabled at the project level, and performance tracing runs only with in-app consent.
• Google AdMob: Google AdMob serves the non-personalized ads shown in the Twin Drift app and processes device data for that purpose under Google's privacy policy; the one-time Remove Ads purchase stops those ads.

Purchases

Twin Drift's in-app purchases are made through the App Store or Google Play. Today that is Remove Ads, a one-time purchase in the app's Settings that stops the between-level ads and unlocks nothing else; additional level packs are planned and will be sold the same way. Apple or Google handles payment and keeps your payment details, and we never receive your card or bank information. The app learns only from the store that a purchase was made: at each launch it quietly asks your store account which purchases you own, so a reinstall or another device signed into the same store account keeps what you bought without any action on your part, and it keeps the store's purchase records on the device, tied to no account of ours. With usage sharing on, the purchase-flow stage and ad-removal action reach our telemetry as described above; no receipt, transaction token or price ever leaves the device.

If you email us

If you email our support or press address, we receive your email address and whatever you write. We use it only to reply and to fix what you reported, and we keep the correspondence only as long as that takes.

Under 13

Twin Drift and this website are not directed to anyone younger than 13, and we don't knowingly collect personal data from anyone that age. If you believe someone younger than 13 has sent us personal data, email us and we will delete it.

Your choices

You can decline or withdraw website analytics consent at any time and turn off usage sharing in the app's settings. Because nothing we hold is linked to an account or lookup key, there is no personal record for us to look up, correct, or delete — but if you have a question about your data, email us and we will answer it.

Changes to this page

We update this page whenever our vendors or data flows change, and we review it at least quarterly. The effective date at the top is the date of the current version.