TailSpin Privacy Policy

Last updated: October 9, 2026

This explains what we collect, why, who we share it with, and what you can do about it. It is written to be understood.

1. Who we are

TailSpin Interactive, LLC is the controller of the personal information described here.

TailSpin Interactive, LLC
3115 Lillian Miller Pkwy, Ste 103-219
Denton, TX 76210
United States

support@tailspin.gg

2. The short version

• We collect an email address, a date of birth, a username, and the record of how you play.
• We use your date of birth to check you are old enough and to restrict advertising for younger players. We do not use it to target you.
• We show ads unless you subscribe to Pro. Google runs them and receives information about your device. You can opt out of personalised advertising, and in the US that includes opting out of the sale or sharing of your information.
• We use analytics to understand how the game is used, and we link that to your account. We record browsing sessions on the website, and play sessions inside the app for players aged 18 and over. Anything typed into a form is masked; the words you play are not. We do not record players under 18.
• We never see your payment details.
• You can delete your account from Settings. After a 30-day grace period it is gone.

3. Where your information comes from

Nearly all of it comes from you or from your use of the app. Some comes from third parties we work with:

• Apple or Google, when you buy something, in the form of a purchase receipt. Not your card.
• Google (AdMob), in the form of confirmation that you finished watching a rewarded ad.
• Another player, if they report you, invite you, or you play them head to head.

4. What we collect

Account information. Your email address, your date of birth, your username, an optional display name, your chosen avatar, and your sign-in method (email, Apple or Google).

Gameplay information. Which puzzles you play and when, the words you submit including ones we reject, your scores, moves and times, your streak, your achievements, your head-to-head matches and rating, your leaderboard positions, your token balance and transaction history, your device's time zone (so we know when your day starts), and when you last used the app.

Purchase information. What you bought, when, whether a subscription is active, and the receipt the store gives us. We never receive your card number, bank details or billing address. Apple and Google handle payment.

Advertising information. When we show you an ad, Google's Mobile Ads SDK collects and shares your IP address, your interactions with the ad, diagnostic information, and device and account identifiers including your advertising ID, for advertising, analytics and fraud prevention.

Analytics and diagnostics. Screens you visit and actions you take inside the app, your device model, operating system version and app version, approximate location (country, region and city) that our analytics provider derives from your IP address, crash reports and error diagnostics, and session recordings — on the website, and inside the app for players aged 18 and over — as described in section 7.

We link this analytics data to your account, using an internal account identifier rather than your email address. That includes activity recorded on your device before you signed in, which is joined to your account once you do.

We do not collect precise location. Our analytics provider's IP lookup is configured to discard coordinates and postal code before the event is stored.

Things you send us. Word suggestions for the dictionary, reports about other players, and anything you write to support@tailspin.gg.

Notification tokens, if you turn on notifications, so we can send them.

5. Why we use it, and our legal basis

If you are in the UK or the EEA, the right-hand column is the legal basis we rely on under the UK GDPR and GDPR.

Selling and sharing. We do not sell your personal information for money. If you see personalised ads, US state privacy laws may treat that as "sharing" your information for cross-context behavioural advertising, and we treat it that way rather than argue about it. You can opt out, and section 6 explains how.

6. Ads

TailSpin shows ads to players who do not subscribe to Pro. Google is our advertising partner and runs the ads through AdMob.

If you are in the United States, we show Google's US state privacy message, which lets you opt out of the sale or sharing of your personal information for personalised advertising. It appears when you first start playing, and you can reopen it later from Settings in the app. Opting out does not remove ads; it makes them non-personalised.

If you are in the UK, the EEA or Switzerland, we ask your consent before personalised advertising through Google's consent interface. You can change your choice at any time from Settings in the app, which reopens Google's privacy options form.

If you are a minor, we tell Google so. Because you gave us your date of birth, we know whether you are below the age of consent for advertising in your country, and the app sets Google's under-age-of-consent flag on every ad request before the first one is made. That restricts Google to non-personalised advertising for your account.

Pro removes ads entirely.

Google's own handling of advertising data is described at policies.google.com/technologies/partner-sites.

7. Analytics and session recording

We use PostHog to understand how TailSpin is used, and Sentry to catch crashes and errors.

On the tailspin.gg website, PostHog also records browsing sessions — a replay of what happened on screen. We use it to find out where the site is confusing, and nothing else. Anything typed into a form is masked: the replay shows that you typed, not what you typed.

Inside the TailSpin app, we also record play sessions to find out where players get stuck — but only for players aged 18 and over. The app checks your date of birth before recording starts and never records players under 18. Anything you type into a form is masked — your email, your password, your username, your display name, codes, and any name you search for. The words you play are part of the game and are visible in the recording. We do not record where you tap.

Recording begins once you are signed in and we know your age, so signing up and setting up your account are not recorded for anyone.

Session recordings are held on the same schedule as our other analytics data and are never shared with advertisers.

If you would rather not be recorded, email support@tailspin.gg and we will exclude you.

8. Who we share it with

We use the following service providers. Each processes data on our instructions, for the purpose listed, and none of them is permitted to sell it.

We also share information where the law requires it, to enforce our Terms of Service, to protect the rights and safety of players or of us, or in connection with a merger or sale of the business — in which case we will tell you before your information moves.

Other players can see your username, your avatar, your Pro badge if you have one, whether you have been active recently, your positions on the leaderboards, and a summary of how you play: today's Daily result, your current streak, your best Daily score, how many Dailies you have completed, and — once you have played ten rated head-to-head matches — your rating and your win/loss record. Everyone who can see you sees the same summary; being friends changes what you can do together, not what you can see. Friends additionally see your display name. If you play someone head to head, they see your score and the words you played in that match. Your achievements, your email address and your date of birth are never shown to other players. Someone you have blocked, or who has blocked you, cannot find you by username or open your player card.

9. How long we keep it

While your account is open, we keep your account information, your gameplay history, your purchase records and your analytics data. We do not currently delete gameplay history on a schedule, because your streaks, achievements, archive progress and head-to-head record depend on it. The word-by-word log behind each game (every word you tried, accepted or rejected) is deleted 90 days after you play it. If a game is still unfinished, its log is kept until you finish it, because your final score depends on it. Head-to-head matches are the exception: their logs are part of the match record and are kept with it. After 90 days, all that remains is a daily count of which words were rejected, with no link to any player.

When you delete your account, it is deactivated immediately and enters a 30-day grace period, during which you can ask us to restore it. After 30 days a nightly job permanently deletes it, and the data attached to it goes with it.

A small amount survives deletion, and we would rather say so than imply otherwise:

• Administrative and moderation records are kept, without your account attached to them, so that a pattern of abuse cannot be erased by deleting an account and making a new one.
• Purchase records are kept by Apple, Google and RevenueCat for as long as financial and tax law requires; our own copy is deleted with your account.
• Messages other players received about you — a friend request, an invite, a challenge — keep the username you had at the time.
• Aggregated statistics that cannot identify you — how many people solved a given puzzle, for example — are kept indefinitely.
• Analytics events already recorded stay with our analytics provider. They are no longer linked to an active account, and they roll off under that provider's retention settings rather than being deleted with your account.
• Backups roll off on their own schedule, within 30 days.

Analytics events and session recordings are kept for as long as our analytics provider's retention setting holds them, and are deleted on that schedule.

10. Your rights

Everyone. You can see, correct and delete most of your information from inside the app: Settings holds your profile, your notification choices, your ad privacy options, and account deletion. For anything you cannot do there, email support@tailspin.gg and we will do it.

If you are in the UK or the EEA, you have the right to access your information, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time where we rely on consent. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner's Office.

If you are in California, you have the right to know what we collect and why, to delete it, to correct it, to opt out of the sale or sharing of your personal information, to limit the use of sensitive personal information, and not to be treated differently for exercising any of those rights. We do not sell your information for money. To opt out of sharing for personalised advertising, use the US state privacy message described in section 6, or email us. We do not knowingly sell or share the personal information of anyone under 16.

If you are elsewhere in the United States, several states now give you similar rights. Email us and we will apply them.

We will not charge you for any of this, and we will respond within the time the applicable law allows, which is generally 30 to 45 days.

11. Information leaving your country

We are based in the United States and our providers are mostly in the United States, so if you use TailSpin from outside the US, your information is transferred to the US and processed there.

For transfers out of the UK and the EEA we rely on the European Commission's Standard Contractual Clauses and the UK Addendum, as incorporated into our agreements with our providers.

12. Children

TailSpin is not for children under 13. We ask for a date of birth at sign-up and we do not create an account for anyone under 13.

If we learn that we hold information about a child under 13, we delete it and close the account. If you believe a child under 13 has an account, email support@tailspin.gg and we will deal with it.

For players between 13 and 18, we set Google's under-age-of-consent flag on every ad request so that advertising is not personalised. We also do not record sessions inside the app for players under 18.

13. Security

Traffic between the app and our servers is encrypted. Sign-in tokens are held in your device's secure storage. Access to production systems is limited to people who need it, and the game is server-authoritative, meaning your score and your token balance are decided on our servers rather than on your device.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects you, we will tell you as the law requires and as promptly as we reasonably can.

14. Changes to this policy

We will update this page when what we do changes. The "Last updated" date at the top will change with it, and for material changes we will tell you in the app or by email before they take effect.

15. Contact

support@tailspin.gg

TailSpin Interactive, LLC
3115 Lillian Miller Pkwy, Ste 103-219
Denton, TX 76210
United States