Last updated 14 October 2026 (IP-based statistics, support messages and news emails added)

Privacy Policy

We collect as little as we can to run the game. No ads, no third-party trackers, and we never sell your data.

What we collect

Game progress for everyone, guests included: a random player name you can change, your cards, XP, Compute, achievements, match results and settings.
Account details if you sign up: your email address and a securely hashed password (we never store or see the password itself).
Shop waitlist if you join it: your email, optional name and country, and the items you picked.
Visit statistics: the pages you view and when, which website sent you there, your device type, browser, operating system and screen width, and your IP address. We use the IP address to count unique visitors and to work out your approximate location (country, region and city). That lookup happens on our own server with the DB-IP database, so your IP address isn’t sent to anyone for it. If you’re playing, these visits are linked to your player profile, and we keep a list of the IP addresses your profile was used from, to spot cheating and abuse. If your browser sends Do Not Track or Global Privacy Control, we don’t record your visits at all.
Security counters: to stop password guessing and email spam, we briefly count sign-in and email requests per IP address. These counters delete themselves within an hour.
Email records: a log of the emails we send (address, type, time, and whether it was delivered).
Messages you send us: emails to any @playtoptokens.com address and feedback from the app, with their attachments, our replies and internal notes. Feedback also includes your player name, screen size, browser and the page you were on, so we can fix bugs.
Email preferences: whether you asked for game news, and whether you want emails about friends and duels.
Your public profile if you have an account: your player name, the picture and bio you add, your level, stats and collection count. Anyone can see it unless you make it friends-only. Pictures are cropped and re-saved on our server, which removes any location or camera data in the file.
Friends and duels: who you’re friends with, your duels and their moves, and the in-app notifications about them. Friends see when you were last online.

Cookies and storage

tt_sid: keeps you signed in and links your browser to your progress. It’s essential, so the game can’t work without it.
tt_look_v3: remembers your card style.
Your sound, music, vibration and hint settings stay in your browser’s local storage and never reach us.

Why we use it

To run the game and your account, send the emails you ask for (sign-in links, email confirmation), answer your messages and feedback, tell waitlist members about the items they asked for, stop cheating and abuse, and understand which parts of the game people enjoy and where our visitors come from.

We only send game news if you ticked “send me game news” (at sign-up or on your profile). Every news email has an unsubscribe link. Occasionally we may email every account about something important, like a change to these terms or a security issue.

Who helps us

Postmark delivers our emails and receives the emails you send us.
Uploaded pictures are stored on our own server (in Garage, a self-hosted file store), not with a third party.
Linode (Akamai Cloud) hosts our servers and database.

Card statistics come from public sources, mainly Artificial Analysis, with thanks. That data is about AI models, not about you, and none of your information is ever sent to them.

How long we keep it

Visit statistics, including IP addresses and locations: 180 days, then deleted automatically. The same goes for the list of IP addresses a profile was used from.
Email records: 12 months.
Messages and feedback: until the conversation is resolved and for up to 2 years after, unless you ask us to delete them sooner.
Profile pictures: until you remove or replace them (the old file is deleted right away), or your account is deleted.
In-app notifications: 120 days.
Account and game data: for as long as you play, or until you ask us to delete it.
Waitlist entries: until the products launch or you ask us to remove you.

Your choices

You can see, correct or delete your data, or leave the waitlist, by emailing hello@playtoptokens.com from the address on your account. We’ll reply within 30 days.

Children

Top Tokens isn’t aimed at children under 13. If you think a child has given us personal information, contact us and we’ll delete it.

Changes

If we change this policy in a meaningful way, we’ll say so in the game before the change applies.