← Tiptoe Safari

Privacy policy

Tiptoe Safari · last updated 5 November 2026

Tiptoe Safari is a puzzle game that runs in your browser and as an app for iPhone and Android. This page covers all of them and says exactly what it stores, what it sends away, and what you can do about it. It is short because the game collects very little.

Who is responsible

The developer of Tiptoe Safari (“we”). Contact: support@tiptoesafari.com.

What stays on your device

Your progress (stars, scores, saved games, treasures, hats, stickers, daily streak), your settings and, if you choose one, your display name are kept in your browser’s local storage (on the web) or in the app’s own private storage (in the iPhone and Android apps). A random device ID is created the first time you open the game. Nothing here is sent anywhere unless the online leaderboard is on (next section). We do not use cookies. The game also keeps a copy of its own files in your browser so it can work offline.

What is sent to our server

Only after you win a level or the daily challenge, and only while Online leaderboard is on in Settings (it is on by default). The server then receives:

Your random device IDUsed to tell players apart. The server keeps only a one-way, salted fingerprint of it (12 characters), never the ID itself, so the stored value cannot be turned back into your device ID.
Your display nameOnly if you typed one in Settings. It is shown publicly on the leaderboard. Please do not use your real name.
Your resultWhich level or day, your score, stars, time, mistakes and hints, and when it happened. Your best result per level or day is kept. From your results the server also keeps a few counters for the rankings: your best finishing time for each level as a share of its par time (only runs without mistakes or hints), how many levels in a row you cleared with 3 stars, and how many days in a row you won the daily challenge. They are shown with your display name on the leaderboard and are deleted with the rest of your data.
Which days you playedThe days on which you won at least once, and how many wins on each (days are counted in Vietnam time, UTC+7). We use this to count how many people play per day, week and month and how far players get. It is shown to us only as totals, never as a list of people. The exact time of each win is not kept.
Your movesThe list of moves of that game, with timings, is sent so the server can replay it and check that the score is genuine. It is used for that check and not stored.

Like every website, our server also sees your IP address when your browser or the app contacts it. We do not store it. It is held briefly in memory to limit abuse (for example, too many requests in a minute) and then forgotten.

Campaign links. Some links we share, such as tiptoesafari.com/r/tiktok, pass through our server on the way to the game. The server adds one to a counter for that link and that day, then sends you on. That counter is all it keeps: no IP address, no device ID, no cookie. It only tells us which of our own posts brought people to the game.

What we do not do

Who else handles data

The website and the leaderboard run on Cloudflare (web hosting, network delivery and database). Cloudflare processes technical data such as IP addresses to deliver the service, under its own privacy policy. We do not share the data with anyone else.

Sharing and backup codes

The Share button builds a short text (stars, hearts, time, a strip of coloured squares; no board positions) and hands it to the sharing feature of your device or copies it. Where it goes is your choice. A backup code is made on your device and contains your progress and display name; it does not contain your device ID. Whoever has the code can restore your progress, so keep it as private as you like.

Your choices

How long we keep it

Leaderboard entries and the per-day counts are kept until you delete them or ask us to. “Delete my online data” removes both. Data on your device stays until you erase it.

Children

The game is made to be enjoyable for all ages and asks for no age and no personal details. The only free-text field is the optional display name, which is shown publicly, so parents and guardians should make sure children use a nickname and not a real name. A parent or guardian can use the Delete button or write to us at any time to have a child’s entries removed.

Security

Everything travels over HTTPS. The device ID is stored only as a salted one-way fingerprint. No system is perfectly secure, but we keep the amount of data small so there is little to lose.

Changes

If this policy changes, the date at the top changes too and the change is described here. For a significant change to what we collect, we will also tell you in the game.