Privacy Policy

Tip-Top Studio · Bugz Rush · Last updated 11 August 2026

1. Who is responsible for your data

Tip-Top Studio ("we", "us") is the data controller for the processing described in this policy. We are based in Spain, so this policy is written to meet the EU General Data Protection Regulation (GDPR).

Privacy contact: [email protected]

2. Everything at a glance

This table states, for every category of data connected with the game, exactly how it is captured, how it is used, who it is shared with, and how long it is kept. The sections after it explain each column in full.

3. How we capture data

There is no background collection. Nothing is gathered while you simply play.

• Locally on your own machine. Saves and settings are written to the game's folder in your user profile, or to your browser's local storage. This never leaves your device unless your store's cloud-save feature copies it there for you.
• On our website, for the browser version. The page that hosts the free browser build counts sessions with a first-party, cookieless counter, described in the table above. The identifier lives in sessionStorage, so it dies with the browser tab and cannot follow you between visits or across sites. It identifies nobody.

The installed game makes no network requests at all. It has no accounts, no sign-in, no leaderboards, no chat, no multiplayer, no achievements, no in-game purchases, no crash reporting and no update check. The only time it ever asks your system to reach the internet is when you press the "get the full game" button in the demo, which opens the store page in your normal browser. Nothing is sent with that — it is an ordinary link.

Xbox services and the Microsoft Store version

The Microsoft Store version of Bugz Rush does not use Xbox services. There is no Xbox sign-in, no Xbox achievements, no presence, no clubs and no Xbox cloud saves, so no Xbox account data — no gamertag, no Xbox User ID, no friends list — ever reaches the game. Your purchase of the game is handled by the Microsoft Store in the usual way, and Microsoft's own privacy statement governs it.

4. How we use data

We use the data above only for these purposes:

• To save your progress and settings on your device, and to restore them next time you play.
• To display the game in your preferred language and with your chosen controls.
• To let your store synchronise your saved games, if you use its cloud-save feature.
• To count visits to our own website in aggregate.
• To reply to you if you write to us.

We do not use data for anything else. In particular we do not use it for advertising, profiling, scoring, automated decision-making, market research, or training machine-learning models.

5. How we share data

We do not sell your personal data, we do not rent it, and we do not share it with advertisers, data brokers or analytics companies. We have never done so.

We receive no personal data about you from the stores, and we pass none to them. Each store you might buy the game from is an independent data controller for your account and purchase with it, entirely outside our reach, and each has its own privacy policy:

• Microsoft — privacy.microsoft.com/privacystatement
• itch.io — itch.io/docs/legal/privacy-policy
• Google Play — policies.google.com/privacy
• Epic Games — epicgames.com/site/privacypolicy

We may also disclose data if the law requires it, for example in response to a valid legal order. Nothing else is shared with anyone.

International transfers. We transfer no personal data outside the European Economic Area. The store platforms are mostly based in the United States; where your data reaches them it does so through your own relationship with that store, and they rely on their own safeguards for such transfers, such as the European Commission's Standard Contractual Clauses.

6. How long we retain data

• Saves and settings on your device — kept until you delete them. Uninstalling the game and removing its save data, or clearing your browser storage, removes them immediately and permanently.
• Cloud saves and purchase records — stored by your store platform, not by us, for as long as you hold the game in your library and in line with that platform's own retention rules. Deleting your store account removes them.
• Website visit counts — held only in our web server's access log, with no database behind it, and not kept beyond 12 months.
• Support correspondence — kept for up to 12 months after your question is resolved, then deleted.

We operate no player database and keep no backups of player data. We hold no personal data about players on our own systems at all.

7. What we never do

• No analytics, crash reporting, telemetry, fingerprinting or session recording inside the game.
• No advertising, ad identifiers or advertising partners.
• No third-party SDKs of any kind in the shipped game.
• No accounts, sign-in, chat, user-generated content or social features.
• No selling, renting or sharing of personal data for anyone else's purposes.
• No profiling and no automated decisions that affect you.
• No access to your location, contacts, camera, microphone, or any files outside the game's own save folder. The Android build requests no permissions at all.
• No collection of your payment details — stores handle payment entirely, and we never see a card number.

8. Legal bases (GDPR Article 6)

• Performance of a contract — saving your progress and settings so the game you bought works as a game is expected to work.
• Legitimate interests — counting website sessions in a form that identifies nobody, so we can tell whether our pages work; and answering your support messages.
• Legal obligation — stores retain purchase and tax records as the law requires. Those records are held by the store, not by us.

We rely on no consent-based processing, because the game collects no personal data and the website counter uses no cookie or other identifier that would require consent.

9. Your rights

Under the GDPR you may request access to your personal data, correction of it, its erasure, restriction of or objection to its processing, and a portable copy.

Write to [email protected] and we will respond within one month. In practice we hold nothing that identifies you, so there is usually nothing for us to return or erase: your saves are files on your own device that you can delete yourself, and anything about your purchase sits in your store account. Requests about saves or purchases are therefore fastest through Microsoft, itch.io, Google or Epic directly — tell us and we will point you to the right place and help where we can.

If you believe we have handled your data improperly you may complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or to the supervisory authority where you live.

10. Children

Bugz Rush is rated suitable for all ages (PEGI 3, ESRB Everyone, IARC 3+) and is safe for children to play: it collects no data from anyone, of any age, and contains no advertising, no purchases, no chat and no links to other people. We do not knowingly collect data from anyone below the age of digital consent in their country, which is between 13 and 16 depending on where you live, because we do not collect data from anyone at all. Store accounts are age-gated by the store itself. If you believe a child has provided us with personal data — by writing to us, for instance — contact us and we will delete it.

11. Changes to this policy

If this policy changes we will update the date at the top of this page. Material changes affecting how your data is used will also be announced on our store pages.