Privacy Notice

The data controller for Tilt at tilt.zabinski.dev is Pawel Zabinski, an individual based in the United Kingdom. The controller is responsible for deciding how the service uses your personal information.

Contact [email protected] for privacy enquiries and requests about your information. For support or reports of misuse, email [email protected]. This notice explains the public Tilt service.

Tilt is for people aged 13 and over. AI features are optional and disabled by default. You can rank things on your device without creating an account. An account adds online storage and social features. We do not sell your information or run advertising or third-party analytics trackers.

AI needs your separate opt-in. Tilt does not send rankings for AI generation while the site feature is disabled or your account has not opted in.

Use a nickname rather than your real name. Do not put private information about yourself or anyone else in handles, lists or shared links.

On your device: votes, rankings, custom lists, personality quiz answers and drafts, cached results and preferences are saved in browser storage. Quiz answers are not automatically uploaded or published. Website requests still pass through our hosting and security providers, even without an account.

Accounts: your email, handle, chosen profile picture, account dates, verification status, AI preferences, shared AI permission and other settings. Uploaded pictures are resized and re-encoded before storage. If you choose a password, we store a password hash, not the password itself. A Google-only account does not give us your Google password.

Google sign-in: Google supplies an account identifier, email and verification status. Tilt requests the profile permission to obtain a picture when available, and uses it only if you have not chosen a Tilt picture. Google may also supply profile claims such as a name; Tilt does not save or publish that name. New accounts choose a handle before using account features. A verified email matching an existing Tilt account can link the Google identity to that account. We do not request Gmail, contacts or Drive access.

Online features: synced votes and rankings, custom lists, friends and blocks, invitations, games, notifications and any previously saved shared results. Joining a shared game can create a temporary guest account, even if you have not registered an email.

Groups: group names and descriptions, ownership, invitations, membership status and membership names: your handle for a full account, or a name you choose as a guest. Joining a group can also create a temporary guest account.

Security and support: session records, browser information and IP addresses where supplied, request paths, timestamps, errors, and messages you send us. Our infrastructure providers also process technical connection data.

List extensions: list definitions can contain code, configuration and custom fields. Extensions run in an isolated browser frame with the list context and temporary state provided by Tilt. Their sandbox blocks direct network requests and access to Tilt’s cookies and browser storage. Code submitted for review is stored with its review status.

We use account, sign-in and game information to provide the features you request and fulfil our agreement with you. Account emails support confirmation, recovery and security; they are not marketing.

We rely on legitimate interests to protect accounts, prevent abuse, investigate faults and answer support requests. These interests are running a safe, reliable service; they must be balanced against your rights, with particular care for younger users. We may also keep information when necessary to meet a legal obligation.

Acknowledging this notice is not blanket consent. If a future optional feature needs consent, we will ask separately and explain how to withdraw it. Optional AI profiling is not enabled. Rankings are calculated from your choices; they are not used to make decisions about employment, credit or other legal entitlements.

Your handle can be found by other signed-in users. Your email is not shown to them. Personal rankings are shared with accepted friends; an invitation can also show the relevant game information to whoever has its link. Treat invitation links as something you choose to share, and avoid posting them publicly if you want a private game.

Public live rankings are separate from your personal lists. Their combined scores and participation counts are public. Your contributions are linked to your account, but individual ballots and voter names are not published. Changes in a small crowd may still make choices inferable. Personal votes are never submitted automatically. You can revise or withdraw contributions; requesting account deletion removes them from the results, and cancelling deletion restores them during the grace period.

Personal Insights can compare your ranking with aggregate synced rankings from other active accounts for the same published list version. Each account counts once. Small samples are withheld, and the comparison does not expose anyone’s identity or individual ranking. This statistical comparison works without AI. Your profile hub and earned badges are for your own account; accepted friends can see your chosen picture.

Store publishing is restricted to site administrators. Published lists are visible with the publisher’s handle. A list link lets anyone with that link preview and add it; sending to a friend lets them accept or decline. Sharing a list shares its definition, including its name, items, images, custom fields, player options and extension code. It does not share your personal votes. Each person keeps their own rankings and personal edits. You can disable a link or remove a list from the store, but lists already added by other people remain in their libraries.

Group members can see account handles, guests’ chosen names and guest or owner labels. Full accounts appear under their current handle; only guests can edit a name within the group. Anyone with a group invitation can preview its name, description, guest policy and member count. Membership does not share your personal rankings or add people as friends. Owners can invite accepted friends, replace or disable invitation links and remove members. Friend invitations show the group’s name and description to the recipient; joining requires acceptance.

Ideas and group rankings: members can see boards, suggestions, images, shortlists, decisions and shared results. Idea authors are shown unless the board uses anonymous ideas. Group ranking details show individual answers, with names unless the list is anonymous. Anonymous mode hides attribution from other members; Tilt still associates contributions with accounts, and choices may be guessable in small groups. Leaving or removal excludes your ranking contributions from the combined result.

Group prediction games store participants, choices and predictions. Other members see progress counts before the reveal, then the answers and scores. The organiser can reveal partial results; otherwise everyone finishing or the deadline ends the game. Leaving or being removed withdraws your game answers. Group games do not use AI or change personal rankings.

Group scheduling stores event details, invited and required attendees, proposed times, availability answers and confirmed times. These are visible to current group members. Leaving or removal ends your access and excludes your responses from recommendations; deleting the group deletes its events and availability. Calendar files are separate copies and do not update automatically.

You can decline requests, unfriend and block people. Site administrators handle support requests, moderate content and suspend accounts. Superadministrators can also inspect private account data, including votes and rankings, and permanently delete records. Administrative changes are recorded with the staff identity, action, target, reason and time. We may disclose information when required by law or to address abuse, but do not sell it.

Support: signed-in users can send requests and replies through the Support page. Staff can read these conversations and add internal notes that are not shown in your inbox. Requests, replies, status and staff notes are stored to handle the issue.

Linked images: list items and ideas can use images hosted on other websites. Your browser contacts those hosts to display them, which exposes connection information such as your IP address. Those hosts have their own privacy practices.

Oracle Cloud hosts the service and database. Cloudflare routes and protects website traffic. Google handles Google sign-in when you choose it. When email delivery is enabled, Resend processes recipient addresses and account emails. Your email provider also receives messages delivered to you.

These suppliers may process information outside the UK, including through international support or infrastructure. You can ask us which locations and transfer safeguards apply to your information. Google also processes information under its own privacy policy when you use its sign-in service.

Tilt is for ages 13 and over. Email signup and guest entry ask you to confirm that you are 13 or older, agree to the Terms and acknowledge this notice. Google sign-in displays the same age requirement and links before you continue. We check the signup acknowledgement when you submit it, but do not save an age or acknowledgement record. We do not ask for or store birthdays or request an age range from Google. New Google accounts choose a public handle before using account features.

Creating an account does not verify your age and is not consent to optional AI processing. Existing users are not asked to complete another age or agreement step. Account access does not depend on a stored age classification.

The site starts with AI disabled. Account settings show its current availability and your saved choices. Turning the site feature on never opts you in. Personal AI and shared comparisons have separate switches, and you can withdraw permission even while the site feature is paused.

Previously collected birthdays, Google age decisions and signup declaration records are removed from the active database as part of this update. Older backups may retain them until those backups expire; any restoration must repeat the erasure before the service reopens. The browser also stores a timestamp to tell your other open Tilt tabs to refresh account settings; it contains no age or preference value.

AI features are optional. Ordinary rankings, statistics, friend comparisons and group games work without them. Enabling personal AI in account settings permits the processing described here when you explicitly request a generated result. Shared comparisons need a separate permission from each participant.

Personal insights send the relevant list name, item labels and captions, rankings and vote statistics. Taste snapshots use favourites and lower-ranked picks from selected lists. Surprise Tilt uses your synced list, ranking scores and recent choices to prepare predictions. Friend and challenge explanations include the participants’ handles and compared rankings or revealed round choices. Invite codes, account IDs, email addresses and images are not included in those analysis prompts.

Group ranking explanations send the list’s labels and aggregate participation and preference statistics. Tilt does not automatically include contributor handles or individual ballots. Every active contributor and the requester must permit shared AI before generation. Labels and custom list text may themselves contain personal information, so do not include private details about yourself or others.

Requests go through Vercel AI Gateway to the configured model provider. The default model is OpenAI GPT-4.1 mini. The Gateway and the provider processing a request receive the inputs needed to produce it. Requests require Gateway’s no prompt training routing; this is not a promise of zero retention. Provider retention, processing locations and transfer safeguards depend on the actual service configuration. Contact us for the arrangements applying to your request.

Generated text describes preferences and may include a tentative, playful personality sentence supported by your choices. It may be inaccurate and is not a verified personality assessment or a decision with legal or similarly significant effects. Personal explanations can include the aggregate community comparison when available, without other accounts’ identities or individual rankings. Tilt does not treat ordinary gameplay, agreement to the terms or access to a friend’s rankings as consent to AI processing or general-purpose model training.

Personal explanations and taste snapshots may be cached in your account’s browser storage. Shared taste profiles are saved for both friends. Prediction games store frozen guesses and your answers on the server until deleted, replaced by another game, or removed through personal AI opt-out or account deletion. Group explanations are displayed on the requesting device and are not saved as a shared group profile.

Turning off personal or shared AI permission removes your saved shared profiles and blocks future shared generation. Previously viewed browser results or copies retained by other people may remain. Withdrawing permission does not undo earlier processing. You can request access, correction of inaccurate inferences or erasure through our privacy request contact. We will explain material changes in provider or purpose before they affect your choices.

Browser data remains until you remove it, clear site data, or your browser removes it. Signing out hides account rankings and clears any remaining signed-out rankings. Account rankings remain online until deleted. See our cookie and storage notice.

Account and synced game data are retained while your account is active. Scheduling account deletion starts a cancellable 30-day window; the maintenance process then removes the account and linked database records. Guest accounts are eligible for cleanup 30 days after creation.

Leaving or being removed from a group keeps a membership record until the group or your account is deleted; this lets Tilt enforce removals. Deleting a group removes its membership and invitation records. When an owner’s account is permanently deleted, their groups are deleted too, unless ownership was transferred first.

Deleting an account does not automatically erase the text of support conversations, moderation audit records or suggestions already shared in group boards. Account links are removed where applicable, but text or recorded handles may still identify you. We keep these records only as needed for support, security and accountability; contact us to request review or erasure.

Access cookies last up to 15 minutes; refresh sessions last up to 30 days and rotate when used. Expired session and email-link records are removed by maintenance. Security logs and support correspondence are kept only as needed to resolve the issue, investigate abuse or meet a legal requirement.

A recipient may retain a copy of information you shared. Deleting your account removes your shared lists from discovery and removes your attribution. Shared versions already added to another person's library can remain there, along with their screenshots or browser copies. Where backup copies exist, erasure must also be carried through the backup lifecycle and any restoration; contact us for the status of a specific request.

You can update account details, block people, sign out of all sessions and schedule deletion from your account. Its download exports votes, rankings and lists currently available in this browser, with basic account information. It is not a complete copy of every server record.

You may request access, correction, erasure, restriction or portability of your personal information, and object to processing based on legitimate interests. Rights depend on the circumstances. You can request erasure directly without waiting through the optional account-recovery window.

See privacy requests for how to contact us. We normally respond within one month, subject to the applicable rules on identity checks and extensions. We will explain any lawful refusal or extension.

You can complain to the UK Information Commissioner's Office, or your local data-protection authority where applicable, without contacting us first.

If you are 13–17, read this with a trusted adult if anything is unclear. Do not share your school, address, contact details or other private information in a handle or list. Contact us if someone is making you uncomfortable, you believe a child under 13 has an account, or you encounter harmful content. We will investigate and take appropriate steps to restrict access and erase information collected unlawfully, subject to any lawful retention requirement.

We update this notice when the service changes. Material changes affecting your choices will be brought to your attention before the new use of your information starts.