TONGTONGTONG
Privacy Policy
Last updated: 11 November 2026
TONGTONGTONG is a puzzle game published by Zhenwei Ruan (“we”, “us”). This policy explains what the game does with your information.
The short version
- You can play the whole game without an account, offline.
- An account is optional. It exists to keep your progress when you change phones.
- We do not show ads, do not use tracking, and do not sell or share personal data.
- You can delete your account and its cloud save inside the app, at any time.
What we collect
| Data | When | Why |
|---|---|---|
| Email address | When you create an account | Sign-in and password reset |
| Account ID (Firebase UID) | When you create an account | Keeping saves separate |
| Game progress (stars, best scores) | While signed in | Restoring progress on another device |
We do not collect your name, phone number, address, contacts, photos, location, microphone, camera, advertising ID or device identifiers. The game has no analytics or crash-reporting SDK.
What stays on your device
Settings (music, sound effects, voice volume, language, fullscreen) and your progress are stored on your device. When you are signed in, progress is also stored in the cloud; your settings are not.
Passwords
Your password is sent directly to Firebase Authentication over HTTPS and stored there as a salted hash. We never receive or store your password.
Service providers
- Google Firebase Authentication (United States) — account creation, sign-in, password reset. firebase.google.com/support/privacy
- Cloudflare Workers and R2 — storing the cloud save and checking sign-in tokens. cloudflare.com/privacypolicy
These providers process data on our behalf and may keep standard server logs (IP address, timestamps) for security and abuse prevention. We do not use them for advertising or tracking.
Retention and deletion
Your cloud save is kept until you delete it. In the app: Settings → Account → Delete account. Deleting removes the Firebase account, your cloud save and its history, and signs the device out. Local progress stays on the device unless you also use Settings → Reset progress.
If you cannot open the app, use this page. We complete requests within 30 days. Backups may take up to 30 days to expire.
Children
The game is not directed to children under 13, and accounts are intended for players 13 and older. If you believe a child created an account, contact us and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to processing. You can do most of this in the app; for anything else, email us. We respond within 30 days.
Security
All traffic uses HTTPS. A cloud save can only be read with a short-lived Firebase sign-in token, which our server verifies before reading or writing. No storage credentials are shipped in the app.
International transfers
Our providers process data in the United States and other countries. Where required, transfers rely on standard contractual clauses.
Changes
If the game later adds features that change this policy (for example ads, analytics or leaderboards), we will update this page before that release and change the date above.
Contact
Zhenwei Ruan
Email: hello@zhongbei.tech