Privacy Policy
In short: playing as a guest shares nothing personal with us. An account stores your email, username and game progress so you can restore it on another device. Right now there are no ads or trackers, we never sell your data, and you can delete your account any time from Settings → Account.
This policy explains what personal information YarnToss collects, why, and what you can do about it. We are a small studio in Quebec and we have tried to keep it short and plain.
Who we are
YarnToss is made by Four Corners Games, run by Jay and Will in Quebec, Canada. Jay and Will are jointly the persons in charge of the protection of personal information. You can reach them at support@fourcornersgames.ca.
Who can play
YarnToss is for people aged 14 and over. We do not knowingly collect personal information from anyone under 14. If you believe a child under 14 has given us information, write to us and we will delete it.
What we collect
If you play without an account, the game creates a random anonymous ID with Google Firebase so the game can work. Your progress stays on your device. We do not collect your name, email or anything else about you.
If you create an account, we collect:
- your email address and password (the password is handled by Firebase Authentication; we never see it);
- the username you choose;
- your game progress: best score (the furthest room you have reached), in-game currency, unlocked skins and the skin you wear, achievements and their stats, tutorial progress and any runs you have in progress, so it can be saved to the cloud and restored on another device;
- a record of each username change (the old and new name, and the date), kept for moderation.
Like any online service, Google Firebase, which we use to run accounts and cloud saves, receives technical information such as your IP address and device type when your device connects to it.
On your device, the game keeps a save file with your progress and, if you are signed in, a login token that keeps you signed in. On the web version this lives in your browser’s storage. We do not use cookies, advertising IDs or tracking tools.
If you use “Forgot password?”, Firebase emails a reset link to the address you entered.
Why we collect it
- to run your account and cloud save;
- to show the leaderboards;
- to keep usernames unique and to moderate inappropriate names and cheating;
- to answer you when you contact us.
We do not sell your information.
What other players can see
If you have an account, your username, best score and achievement count can appear on the public leaderboards, which any signed-in player can view. Choose a username you are comfortable sharing. Your email address is never shown and is not stored with your profile. Your saved progress, currency, skins and runs are private to your account and are not visible to other players. We can remove a player from the leaderboards at our discretion, for example for cheating or an inappropriate username.
Who we share it with
We use Google Firebase (Authentication and Firestore) to store account and save data. Google acts as our service provider. Its servers may be located outside Quebec and outside Canada, so your information may be processed in other jurisdictions with different privacy rules. If you play the web version, it is hosted on itch.io, which has its own privacy policy. The game also has a link to our Discord community; if you follow it, Discord’s own privacy policy applies. We may also disclose information if the law requires it.
Ads and analytics
YarnToss does not currently show ads or use analytics. We may add them in the future. If we do, we will update this policy first, tell you what is collected and by whom, and ask for your consent where the law requires it.
How long we keep it
We keep your account information for as long as your account exists. When you delete your account (Settings → Account → Delete Account; you will be asked for your password), we delete your profile, your leaderboard entry and your reserved username, then your login, and your progress is wiped from your device. The one exception is the username-change record, which we keep after deletion so we can moderate abuse. It contains your internal account ID, your old and new usernames and the date of the change, not your email. We keep it only as long as needed for moderation.
Your rights
You can ask us to tell you what we hold about you, correct it, give you a copy, or delete it, and you can withdraw your consent at any time. Write to support@fourcornersgames.ca. We will reply within 30 days. You can delete your account yourself, at any time, from the game. If we cannot resolve a concern, you can contact the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).
Security
We rely on Google’s security for stored data and limit what we collect to what the game needs. No system is perfectly secure. If an incident is likely to cause you serious harm, we will notify you and the Commission d’accès à l’information as the law requires.
Changes
If we change this policy, we will update the date above, and for significant changes we will tell you in the game or by email before they take effect.
Contact
Four Corners Games, Quebec, Canada · support@fourcornersgames.ca