Privacy Policy
The short version. Toppio has no adverts and no advertising trackers, and we never sell your information. You play with a guest account that needs no email address or phone number. We keep only what the game needs to work: your progress, the name you choose, your friends, and what you build and share. You can delete all of it from inside the game at any time: Settings → Delete my account.
1. Who we are
Toppio is made by WEEBA15 LIMITED, a company registered in England and Wales (company number 16684065). We are the data controller for the information described here.
We are registered with the Information Commissioner's Office (registration reference ZC063277).
Contact for anything about your privacy: ezeddin@hivefixa.com.
2. What we collect and why
| Information | What it is | Why we use it |
|---|---|---|
| Guest account | A random account ID created the first time you play, and a sign-in token kept on your device. No email, phone number or real name is asked for. | So your progress follows you and online features work. |
| Game progress | Your level, stars, gems, boosters, upgrades, the looks you own, settings, missions and season progress, saved on your device and in a cloud save. | So you do not lose your game, and can carry on after reinstalling. |
| Your player profile | The display name and picture you choose from the game's set, and a friend code. | So friends can find you and see who they are playing with. |
| Friends and blocks | Who you are friends with, friend requests, and players you have blocked. | To let you challenge friends and to keep blocked players away from you. |
| Challenges | Game invitations sent between friends (for example "challenge to a duel"). These are fixed game messages; there is no typed chat in Toppio. | To start matches between friends. |
| Things you build and share | Levels and forts you publish, with your display name, plus likes, plays and reports on shared levels. | To show your creations to other players, and to take down reported content. |
| Matches and scores | Leaderboard, league, tournament and daily scores, duel and live war results, castle raids and recorded "ghost" runs. | To run competitions and show results to you and other players. |
| Purchases | What you bought and the store's receipt for it. Payment is handled by Apple or Google; we never see your card or bank details. | To give you what you paid for, to restore purchases, to stop fraud, and to keep records the law requires. |
| Error reports | If the game hits an error: the error message, your device and browser type, and the game version. | To find and fix bugs. |
| Server logs | Technical records such as IP address and time of each request to our servers. | To keep the service secure and working, and to stop abuse. |
We do not collect your location, contacts, photos, microphone, advertising identifier or browsing history.
3. Our legal reasons (UK GDPR)
- Providing the game you asked for (contract): your account, progress, cloud save, friends, matches, shared creations and purchases.
- Legitimate interests: error reports, server logs, preventing cheating and abuse, and moderating shared content. We keep these to the minimum and they never override your rights.
- Legal obligation: keeping purchase records for tax and accounting.
4. What other players can see
Other players can see your display name, picture and friend code, the levels and forts you publish, and your scores on leaderboards, leagues and tournaments. Please do not use your real name, or anything that identifies you, as your display name.
5. Who we share information with
- Hetzner Online GmbH, Germany: hosts our servers and stores the data. Your information stays in the UK and the European Economic Area.
- Apple and Google: process your in-app purchases under their own privacy policies. We send store receipts back to them to check a purchase is real.
- Authorities: only if the law requires it.
We do not sell or rent your information, and we do not use it for advertising.
6. How long we keep it
- Your account, progress and creations: for as long as your account exists.
- When you delete your account, your published levels and forts, friend code, recorded duels, tournament scores, raids, likes, cloud save, friends and league entries are removed, and the game on your device starts afresh.
- Purchase records: for as long as UK tax law requires (normally six years).
- Error reports and server logs: only as long as needed to fix problems and keep the service secure.
7. Children
Toppio is a family game. It has no adverts, no typed chat, no links out to social networks, and asks for no contact details. Display names are checked against a list of rude words, players can be blocked, and shared levels can be reported. If you are a parent and want your child's account and data removed, use Settings → Delete my account on their device, or email us.
8. Your rights
You have the right to access your information, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy of it. The quickest way to delete everything is Settings → Delete my account. For anything else, email ezeddin@hivefixa.com and tell us your friend code so we can find your account. We will reply within one month.
If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.
9. Security
Information travels between the game and our servers encrypted (HTTPS), and access to the servers is restricted to us.
10. Changes
If we change this policy we will update the date at the top, and tell you in the game if the change matters.