Privacy Notice

The data controller for Tilt at tilt.zabinski.dev is Pawel Zabinski, an individual based in the United Kingdom. The controller is responsible for deciding how the service uses your personal information.

Contact [email protected] for privacy enquiries and requests about your information. For support or reports of misuse, email [email protected]. This notice explains the public Tilt service.

Tilt is for people aged 13 and over. You can rank things on your device without creating an account. An account adds online storage and social features. We do not sell your information or run advertising or third-party analytics trackers.

AI generation is disabled for this launch. Tilt does not send your rankings to an AI model while it is disabled.

Use a nickname rather than your real name. Do not put private information about yourself or anyone else in handles, packs or shared links.

On your device: votes, rankings, custom packs, cached results and preferences are saved in browser storage. Website requests still pass through our hosting and security providers, even without an account.

Accounts: your email, handle, account dates, verification status and settings. If you choose a password, we store a password hash, not the password itself. A Google-only account does not give us your Google password.

Google sign-in: Google supplies an account identifier, email and verification status. Tilt does not request your Google profile name or photo. New accounts start with a random nickname, which you can change. We do not publish your Google display name as your handle automatically. A verified email matching an existing Tilt account can link the Google identity to that account. We do not request Gmail, contacts or Drive access.

Online features: synced votes and rankings, custom packs, friends and blocks, invitations, games, notifications and any previously saved shared results. Joining a shared game can create a temporary guest account, even if you have not registered an email.

Security and support: session records, browser information and IP addresses where supplied, request paths, timestamps, errors, and messages you send us. Our infrastructure providers also process technical connection data.

We use account, sign-in and game information to provide the features you request and fulfil our agreement with you. Account emails support confirmation, recovery and security; they are not marketing.

We rely on legitimate interests to protect accounts, prevent abuse, investigate faults and answer support requests. These interests are running a safe, reliable service; they must be balanced against your rights, with particular care for younger users. We may also keep information when necessary to meet a legal obligation.

Acknowledging this notice is not blanket consent. If a future optional feature needs consent, we will ask separately and explain how to withdraw it. Optional AI profiling is not enabled. Rankings are calculated from your choices; they are not used to make decisions about employment, credit or other legal entitlements.

Your handle can be found by other signed-in users. Your email is not shown to them. Rankings are shared with accepted friends; an invitation can also show the relevant game information to whoever has its link. Treat invitation links as something you choose to share, and avoid posting them publicly if you want a private game.

You can decline requests, unfriend and block people. The operator can access stored records where needed for support, security or maintenance. We may disclose information when required by law or to address abuse, but do not sell it.

Oracle Cloud hosts the service and database. Cloudflare routes and protects website traffic. Google handles Google sign-in when you choose it. When email delivery is enabled, Resend processes recipient addresses and account emails. Your email provider also receives messages delivered to you.

These suppliers may process information outside the UK, including through international support or infrastructure. You can ask us which locations and transfer safeguards apply to your information. Google also processes information under its own privacy policy when you use its sign-in service.

Browser data remains until you remove it, clear site data, or your browser removes it. Signing out does not clear your saved rankings. See our cookie and storage notice.

Account and synced game data are retained while your account is active. Scheduling account deletion starts a cancellable 30-day window; the maintenance process then removes the account and linked database records. Guest accounts are eligible for cleanup 30 days after creation.

Access cookies last up to 15 minutes; refresh sessions last up to 30 days and rotate when used. Expired session and email-link records are removed by maintenance. Security logs and support correspondence are kept only as needed to resolve the issue, investigate abuse or meet a legal requirement.

A recipient may retain a copy of information you shared. Deleting your account does not erase another person's screenshots or browser copies. Where backup copies exist, erasure must also be carried through the backup lifecycle and any restoration; contact us for the status of a specific request.

You can update account details, block people, sign out of all sessions and schedule deletion from your account. Its download exports votes, rankings and packs currently available in this browser, with basic account information. It is not a complete copy of every server record.

You may request access, correction, erasure, restriction or portability of your personal information, and object to processing based on legitimate interests. Rights depend on the circumstances. You can request erasure directly without waiting through the optional account-recovery window.

See privacy requests for how to contact us. We normally respond within one month, subject to the applicable rules on identity checks and extensions. We will explain any lawful refusal or extension.

You can complain to the UK Information Commissioner's Office, or your local data-protection authority where applicable, without contacting us first.

If you are 13–17, read this with a trusted adult if anything is unclear. Do not share your school, address, contact details or other private information in a handle or pack. Contact us if someone is making you uncomfortable or you believe a child under 13 has an account.

We update this notice when the service changes. Material changes affecting your choices will be brought to your attention before the new use of your information starts.