Privacy, in plain terms

Tumble Tally is a free game from RTG Game Labs, a brand of RTG Product Labs. You can play without an account, and analytics can be turned off at any time.

Your scores stay here

This browser saves one fresh-well best, up to 35 daily bests, your daily streak (a count and the last UTC date you finished a daily well), and your sound and motion preferences. An unfinished run is not saved. “Clear local scores” removes those records. Records do not sync across devices. A copied challenge contains your score, mode, hands cleared, rules version and, for daily runs, a UTC date. It contains no player name.

How analytics work

Outside the EU/EEA, UK and Switzerland, product analytics (PostHog, based in the United States) are on by default to help us improve the game; use the button above to turn them off at any time. Global Privacy Control and Do Not Track are honored automatically and always win, even if you allowed analytics earlier in this browser.

In the EU/EEA, UK and Switzerland, and wherever we cannot tell your location, we ask first with a small floating card in the corner of the screen that never blocks play. Without your permission we keep only anonymous daily totals (page visits, run starts, finishes and retries, all without a player ID) in Cloudflare D1 (EU jurisdiction). Those totals carry no browser ID, IP address, user agent or referrer, are kept for up to 90 days, and are never sent to PostHog. “Turn off analytics” above stops those too.

If analytics are on, PostHog receives a random browser ID and session ID, daily or fresh mode, and controlled milestones: starting a run, clearing a first hand, finishing, retrying, entering full screen and choosing to copy a score. Scores, hands cleared and active play time are grouped into ranges. A new, same-day or later-day return label helps us understand repeat play. Events include approximate country from the service edge when available, otherwise an explicit unknown; event IP is masked.

Only approved Game Labs, GitHub playtest and shared-score campaign labels are admitted. Original first-touch and current-tab labels stay separate. Coarse browser, operating-system and device types and an available referring site hostname help us understand discovery. No key presses, pointer paths, exact scores, arbitrary URLs, referrer paths, typed text or raw errors are sent. There is no session recording (replay is opt-in only and not currently offered), no device fingerprinting, no advertising and no sale of data. The purpose is product improvement only.

Hosting and network providers receive the connection information needed to serve requests, including your IP address in their own logs; that is separate from the controls above, which mask IP in analytics events and disable analytics geolocation.

Change your choice

Use the button under “How analytics work” above. Turning analytics off clears the stored measurement ID, attribution, activation and return-day keys, stops new PostHog events, and stops anonymous daily totals from the next page load, including in any other open tab of this game. Previously delivered events and totals remain. Allowing analytics again creates a new ID. Your local scores and preferences are separate and stay intact either way.

Embedded play keeps no analytics at all.

If browser storage is blocked, choices and records last only on this page. Closing or reloading it loses them.

Questions

Write to hello@rtgproductlabs.com with a privacy question. Please avoid sensitive information. Updated September 29, 2026.