Privacy policy

1. Who is responsible?

Build Your Web, the company publishing Time It Arcade, is the controller for the processing described here. Registered office: 12 rue René Légé, 92700 Colombes, France. SIREN: 918 338 401. Phone: +33 1 42 42 20 68. Legal notice (French). For questions or requests about your data: contact@timeit.fr.

2. Data we use and why

The app creates a player identifier without requiring an email account or password. This identity is pseudonymous, not completely anonymous: it links your games, nickname and relationships within the game.

Profile and friends

Player identifier, nickname, friend code, friend requests and accepted relationships, to recognise your profile and provide social features.

Games and results

Scores, rounds, Perfect results, timing errors, statistics and dates. Depending on the mode and version, targets, stop measurements and use of the advertising bonus heart are recorded to calculate results, check their consistency and operate leaderboards.

Challenges

Participants, shared targets, invitation status, started and completed rounds, results, dates and deadlines, to resume games, compare results and enforce one ranked daily attempt per profile per day.

Compatibility

Platform, device type, generic brand and model, operating system and app version, language, first and last recorded connection, for support, compatibility and internal analysis of app operation.

Optional notifications

Notification token, player identifier, platform, language, registration and refresh dates, daily reminder preference and activation date. Delivery and error information helps route alerts.

Support and security

If you contact us: email address, message and attachments you choose to send. Technical providers may also process IP address, browser information, timestamps and requests to operate and secure the service.

Processing needed for gameplay, saving progress and the social features you request is based on performance of the service. Security, score verification, compatibility and support rely on our legitimate interest in operating a reliable game and preventing abuse. Optional notifications rely on your consent. Handling data-rights requests fulfils our legal obligations. Advertising and related choices are described in section 5.

Online features cannot operate without the data required for player identity and synchronisation. Refusing notifications does not block challenges. Time It does not request access to your address book, GPS location, IMEI, device serial number or MAC address. Providers’ advertising processing is separate.

3. What other players can see

Global leaderboard: nickname, best ranked score, rank and highest round may be displayed to other app players. The leaderboard service also uses a technical player identifier. The friends leaderboard compares these results among accepted friends. Submitting a ranked classic game feeds these leaderboards; there is currently no switch to hide just one public score.

Friend challenges: both participants can access the challenge and its status. An opponent’s detailed measurements, Perfect results, errors and scores become visible once both players finish. These comparisons are not published in the global leaderboard.

Daily challenge: completed games enter a separate leaderboard showing nickname, score and rank. Detailed measurements remain private. Ranks may change until midnight, Paris time. Result history may remain available after the deadline.

Your friend code, notification tokens and device compatibility information are not included in displayed leaderboards. Choose a nickname that does not reveal personal information and share your friend code with people you choose. Read the game and leaderboard rules.

4. Invitations and the 8 am daily reminder

Notifications are optional. A confirmation explains friend invitations and the daily reminder, then the app requests iOS or Android permission if necessary. Activation is confirmed only after permission and server registration succeed.

• Invitation: the alert contains the friend’s nickname and a challenge identifier. Tapping opens the challenge; it does not accept it on your behalf.
• Daily reminder: dispatch is scheduled for 8 am, Paris time, including daylight saving time changes, for subscribed profiles that have not completed today’s challenge. The message includes the alert type and date, with no score or target list. Tapping opens today’s challenge without starting your attempt.

Receipt depends on the network, phone and Focus settings; delivery at exactly 8 am is not guaranteed. A friend’s nickname may appear on the lock screen depending on your preview settings.

To change your choice: open Settings → Manage notifications. You can disable the reminder alone or all notifications on this device. Token removal and cancellation of queued sends are confirmed online. Phone settings also let you block notification display; the app synchronises that change when reopened and connected. A message already handed to notification services may not be recalled.

These alerts concern challenges, not advertising. Their permission is independent of advertising consent and Apple’s tracking permission.

5. Advertising, consent and the bonus heart

The app uses Google AdMob and its UMP consent platform. Depending on your region, ads and choices, Google and its partners process advertising or app-specific identifiers, IP address and approximate location inferred from it, device information, interactions and diagnostics. These support ad delivery, personalisation where permitted, measurement, frequency control and fraud prevention.

Required choices are presented before ad requests. Processing requiring consent is permitted only according to your choice; providers describe other processing in their notices. You can reopen the advertising options offered in Time It settings. On iPhone and iPad, ATT tracking permission, when requested, is separate and can be changed in system settings. Refusing tracking does not prevent gameplay and does not necessarily remove all advertising.

A rewarded ad is optional: a confirmed reward restores one heart, once per classic game. The 1.1 update plans to include the final score, including the bonus heart continuation, in global and friends leaderboards. This rule depends on the installed version and its activation; older versions may exclude the advertising continuation from rankings. For applicable games, the target sequence, stop measurements and bonus round help verify the result and are not displayed in the leaderboard.

An interstitial may appear at the end of the daily challenge, after the score is saved and before results. It grants no extra points or additional attempt. If no ad is available, results remain accessible.

How Google and its partners use data.

6. Sharing a score or invitation

Sharing opens the phone’s share sheet: you choose the app and recipients. Depending on the action, shared text may include a score, rank, challenge date, nickname or friend code, and a link to timeit.fr. Time It does not access your contacts, WhatsApp group membership or conversations.

The chosen service then processes the content, and recipients may keep or forward it. Deleting Time It data does not remove messages or screenshots already shared elsewhere.

7. Hosting and recipients

• Build Your Web: access to information required for operation, support and security. Our email providers process correspondence when you contact us. Other players see only the information described in section 3.
• OVHcloud: hosting of timeit.fr and technical website access logs. OVHcloud data protection.
• Supabase: identity, game database and notification processing. The main Time It database uses the Ireland, European Union region. Supabase data protection.
• Expo Push Service, Apple APNs and Google Firebase Cloud Messaging: tokens or installation identifiers, content and technical data necessary for notifications. Firebase handles Android notifications; the app does not integrate Google Analytics for Firebase. Expo, Apple, Firebase.
• Google AdMob and advertising partners: processing described in section 5. Applicable partners and choices appear in the advertising form where required.
• Cloudflare Turnstile: anti-bot verification when creating the player identity. It processes IP address and technical browser and connection signals. Turnstile notice.

Some notification, security, support or advertising services may process data outside the European Economic Area, including in the United States. The providers’ documents above describe their transfer safeguards, such as standard contractual clauses or the EU–US Data Privacy Framework where applicable. A European game database therefore does not mean all processing stays in the EU. You can contact us for details of these safeguards.

8. Retention and deletion

Profile, relationships, statistics and games

Kept while the profile exists to maintain progress, history and rankings, then removed from the active database on account deletion. There is currently no automatic profile purge solely for inactivity. Challenge expiry prevents further play but does not automatically delete its history.

Notification subscriptions

Kept while active; removed on confirmed opt-out, account deletion or an invalid-token report. Automatic cleanup removes subscriptions not refreshed for 90 days.

Alert processing

Technical sending and receipt records are cleaned up after 30 days. Disabling notifications or deleting the account also removes associated jobs. The daily choice and activation date are kept with the subscription; disabling the reminder clears its activation date.

Local data

Session, preferences, progress and measurements awaiting synchronisation are stored on the device. Account deletion clears player data managed locally by the app. Uninstalling alone does not request deletion from the server.

Support, logs and technical copies

Support correspondence is retained to handle and follow up the request, then only where a legal obligation or the defence of a right requires it. Provider logs and backups follow their retention and rotation cycles; deletion from the active database does not mean immediate erasure of every technical copy. Advertising and notification providers’ processing also follows their respective notices.

Settings → Delete my data deletes your identity, relationships, statistics, ranked scores, daily entries, associated friend challenges and notification subscriptions. Those challenge details also become unavailable to the opponent. A connection and success confirmation are required. Deletion instructions.

9. Website and local storage

Presentation, privacy and invitation pages contain no advertising or audience analytics tool. The server may log accesses, including IP address, requested page and date, for operation and security. The anti-bot page uses Turnstile; technical storage may be required for this verification. The app locally stores information needed for the session, preferences, consent and game recovery.

10. Your rights

Under the conditions set out in the GDPR, you can request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. You may withdraw notification and applicable advertising consent without affecting processing lawfully carried out before withdrawal.

Contact contact@timeit.fr. Explain your request and include your nickname and friend code if known. They help locate a profile but may not prove ownership: proportionate verification may be required. Do not send passwords or identity documents unless requested. Without session access or a reliable way to identify the profile, we may be unable to act on its data.

We normally respond within one month; we will inform you if an extension permitted by law is necessary. You can complain to the CNIL or your local data protection authority.

11. Security, minors and updates

Our services use HTTPS and private-data access controls. Leaderboards are calculated by the server. No safeguards guarantee the complete absence of incidents; you can report concerns by email.

Time It is for a general audience, not specifically designed for children. Store age ratings do not replace rules about a minor’s consent. A parent or legal guardian can contact us about their child’s data.

The date on this page identifies its last update. New features must be accompanied by suitable information and, where necessary, a new consent choice. This policy does not enable your notifications.