Privacy Policy

Time Travel Heist is made and published by Annanor Technologies Ltd., an independent company registered in the United Kingdom (company number 17432852), which is the data controller for the limited processing described below. It is a small independent operation: there is no investor and no data-sharing arrangement behind it.

What we collect: nothing

We do not collect, receive, transmit, sell or share any information about you or your device. Not your name, email address, contacts, location, advertising ID, device identifiers, IP address, photos, files or usage statistics. We could not tell you how many levels you have finished, because that information never leaves your phone and we have nowhere to put it.

This is a structural property of the app rather than a promise about our intentions. The game is a self-contained bundle of files that runs offline; there is no server anywhere for it to send anything to, and no analytics, advertising or crash-reporting library compiled into it.

What the game saves on your device

So that the game remembers where you are, it writes a small amount of data to storage that belongs to the app and is private to it. This is the complete list:

tth_progress

Which levels you have attempted and which you have completed, and the fewest turns each completed level has been finished in.

tth_solutions

The moves of your best run on levels you have solved, so a solved level can be replayed.

tth_settings

Your preferences: haptic strength, walking speed, music and effects volume, and language.

tth_seen

Which one-off tutorial prompts and story cards you have already been shown, so you are not shown them twice.

tth_theme

Which colour scheme you are playing in.

None of it identifies you, and none of it is transmitted. On Android it is held in the app's private storage area, which other apps cannot read. It is removed when you clear the app's data or uninstall the game.

Android's own backup

The game allows Android's standard backup service to include that saved data, so that your progress survives a factory reset or a move to a new phone. When it does, a copy is held in your own Google account, under Google's terms and not ours — we have no access to it and are not told it exists. You can turn backup off for the app, or for the device, in Android's Settings under System → Backup. Doing so costs you nothing but the transfer of progress between devices.

Permissions the app declares

• Vibrate — the short confirming buzz when you hold to wait a turn. Nothing else uses it, and you can set it to Off in the game's settings.
• Internet — required by the framework the game is built on in order to load the game's own bundled files inside its display component. The game makes no outbound network requests whatsoever. You can confirm this by playing it with the phone in aeroplane mode: everything works.

The app requests no runtime permissions at all — no camera, microphone, location, storage, contacts or notifications. You will never see a permission prompt.

Buying the game

Time Travel Heist is a paid app, bought once, with no advertising and nothing further to buy inside it. The purchase is handled entirely by Google Play. We never see your payment details, your address or your Google account: Google gives us anonymised, aggregated sales and country figures, and processes your purchase under Google's own privacy policy.

Children

The game is a single-player puzzle with no chat, no social features, no user-generated content and no links out of the app. Because it collects no personal information from anyone, it collects none from children either, and there is nothing for a parent to request the deletion of beyond uninstalling it. Please see the game's age rating on Google Play for guidance on story content.

Hosting

timetravelheist.co.uk is a set of static pages served by Cloudflare. Like every web server, Cloudflare's records the technical details of each request — IP address, the page requested, approximate timestamp, browser and operating system — and uses them to deliver the page, to keep the site available and to block attacks. That processing is Cloudflare's, under its privacy policy; we do not query, export or analyse those logs.

Analytics

There are none. We run no analytics product on this site — not Google Analytics, not a cookieless alternative, not a tag manager, not a tracking pixel. These pages contain no JavaScript whatsoever, so there is nothing running in your browser to measure you with. What we know about our visitors is whatever our host's ordinary server logs say, which we do not query.

If that ever changes we will say so here first, with a new date at the top, as described under Changes to this policy below.

Cookies

This site sets no cookies of its own, and none for advertising, tracking or profiling. Cloudflare may set a strictly necessary security cookie when it needs to distinguish a person from a bot; it carries no information about you and is not used to track you. There is no consent banner here because there is nothing to consent to.

Third-party content

None. There are no embedded videos, no social widgets, no comment system, no advertising, no tag manager and no hosted webfonts — the typefaces here are ones your device already has. Every image and stylesheet is served from this domain, so opening a page here does not quietly announce your visit to anybody.

This is enforced rather than merely intended: the site is served with a content security policy that permits no external origin at all, so a stray third-party embed added by mistake would be blocked by your own browser rather than quietly loading.

Contacting us for support

If you email us, we will have your email address and whatever you chose to put in the message. We use it to answer you and for nothing else — never for a mailing list — and delete the correspondence once the matter is closed.

Under UK and EU data protection law you have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable form, and to complain to a supervisory authority — in the UK, the Information Commissioner's Office.

In practice we hold almost nothing to exercise them against: we have no account records, no identifiers and no database of players, so we cannot look you up. The data the game saves is on your device and under your control — clearing the app's data erases all of it immediately, with no request to us needed. Where server logs held by our host constitute personal data, our lawful basis is legitimate interest in keeping the site running and secure. If you want to exercise a right, write to us at the address below and we will do what we can.

If the game or the site changes in a way that affects this policy — and any change that introduced data collection certainly would — we will publish an updated version here with a new date at the top, and note it in the app's release notes. We will never make a change of that kind quietly.

Questions about this policy, or about anything else, are genuinely welcome:

privacy@timetravelheist.co.uk