Last updated: July 2026
Your username, your email address (email is the login — there is no password for email accounts; legacy password accounts store only a salted hash, never plaintext), and your game progress (skills, crystals, achievements, cosmetics, run saves, and idle-arena state). If you sign in with Google, we receive your Google account ID, display name, and email address from Google — never your Google password.
Solely to run the game: keeping your account working across devices, syncing progress, and displaying public hiscores (username, title, round, kills). We do not sell your data, show ads, or track you across other websites.
Data is stored on Cloudflare infrastructure (Workers KV). Traffic is encrypted in transit (HTTPS). Bot protection is provided by Cloudflare Turnstile, which may process your IP address to verify you are human.
Guest play stores everything on your device only — nothing is sent to our servers. You can permanently delete your account and all associated data at any time, directly in the game: Settings → Profile → DELETE ACCOUNT. This removes the account, profile, save data, and hiscore entries immediately and irreversibly. You may also contact support via tdidle.com and we will remove it within 30 days.
TDidle is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact support and it will be removed.
If this policy changes, the "Last updated" date above changes with it. Questions or requests: support via tdidle.com. This policy applies to TDidle on every platform it ships on (web, and any mobile or desktop app versions).