Who is responsible?
BnC Consulting SAS (Bits’n Coffee), Lille, France, SIREN 879 608 040, is the publisher and controller for the processing it determines. Clément Sauvage develops Tilzl. Contact: . Company details are in the website’s legal notice.
Progress and local saves
Progress, preferences, completed puzzles and local games are saved on your device to provide the game you request (performance of the contract). Tilzl does not operate its own cloud-save service. Device backups depend on your Apple settings.
Local data remains until you reset it or delete the app and its data. Offloading the app can preserve data. Copies in device backups follow the backup service’s rules; exported images and videos remain until you delete them.
Apple and Game Center
Game Center is used for authentication, achievements, leaderboards and online games when you choose those features. Apple handles your Apple Account; Tilzl can use your game identifier, display name, scores and game state. Other participants can see information necessary for a match or ranking.
The basis for Tilzl’s use is providing the requested online feature. Apple determines its own processing under its policies. Disconnect or manage Game Center through Apple’s settings. Removing Tilzl does not automatically erase Apple’s records.
Usage statistics and diagnostics
Tilzl uses PostHog’s EU service for game events and technical diagnostics: mode, difficulty, timings, progression, app and system versions, device characteristics and error information. An installation identifier links events pseudonymously. Words entered, message contents and Game Center identities are excluded from the app’s event payloads. Session recording, user profiles and IP geolocation are disabled in the reviewed configuration.
In the current app code, statistics are enabled by default and can be switched off in Settings. This is not a prior opt-in. Optional analytics that require consent must wait for that consent; an audience-measurement exemption must be established against all applicable conditions, not assumed from pseudonymisation or EU hosting. This default needs to be resolved before release. Turning statistics off stops subsequent analytics collection; it does not itself delete previously sent events.
Remote configuration
The app also contacts PostHog to retrieve feature settings, including whether advertising is available. These requests can continue when statistics are off. Technical connection data and an installation identifier may be processed; feature-exposure analytics events are disabled.
The intended purpose is operating and safely configuring the service, under the publisher’s legitimate interest, subject to necessity and the rules on device access. This channel must not be used to bypass an analytics refusal.
Advertising and choices
Google AdMob is integrated for advertisements and optional rewarded hints when enabled by the remote configuration. The SDK may process IP addresses, device or advertising identifiers, app interactions, diagnostics and consent choices to deliver and measure ads and prevent fraud.
The app uses Google’s User Messaging Platform before requesting ads where required, and exposes advertising privacy options when available. Consent applies to optional access and personalisation where required; provider security and delivery operations may rely on other lawful bases described by Google. Refusing personalised ads is not the same as preventing every network request. No reward is guaranteed if an ad is unavailable or incomplete.
Photos and exports
You can create an image or video of a puzzle and choose to save or share it. Photos permission is requested for saving; it does not authorise browsing your library. This processing fulfils your export request. Files are generated locally, and the destination you choose then applies its own rules. Revoke access in iOS Settings.
Support
The support form requires your name, email address and message. It also sends the form language and the Tilzl template identifier; the server adds a receipt time. These data let us respond and send an acknowledgement. Please do not include passwords, payment details or unnecessary sensitive information.
Clever Cloud hosts the website and processes the request and technical logs. Resend delivers the message to the support team and the acknowledgement to you. Authorised support personnel and the receiving email provider can access the correspondence. Cloudflare Turnstile checks browser and network signals to prevent automated abuse; the server sends the challenge token and, when present, your IP address to its verification service.
The basis is responding to your request, including contractual support where applicable, and our legitimate interests in handling other enquiries and protecting the form. These details are not used to subscribe you to marketing. You may email us directly instead of using Turnstile.
Website statistics
The website uses Plausible separately from the app’s PostHog integration, to measure page visits, links, downloads and form-submission events without storing form contents in those events. Plausible’s standard tracker does not use cookies or persistent visitor identifiers. The small playable grid keeps its state only in the page’s memory; reloading clears it.
The website remembers your language in a preference cookie named “locale” for up to one year. It supports the requested language choice; you can delete it in your browser. This cookie is separate from Plausible statistics.
Recipients and international transfers
Recipients are limited to the publisher and the providers necessary for each feature: Apple, PostHog, Google, Clever Cloud, Resend, Cloudflare and our email service. Online players receive only the information needed for shared play. Tilzl does not sell your support messages.
PostHog ingestion is configured in the EU. This does not mean every provider operation stays within the EEA. Resend stores service data in the United States; Apple, Google and Cloudflare may process data internationally. Transfers require an applicable adequacy decision or contractual safeguards such as EU standard contractual clauses. Contact us for the safeguards relevant to your request; provider policies are linked below.
Retention and deletion
Local data follows the deletion rules above. Apple and Google apply their own retention rules to data they control. PostHog event retention depends on the organisation’s service settings; the project view reviewed does not expose that duration. A session-recording retention setting does not describe analytics-event retention.
Support messages remain in the support mailbox while needed to answer and follow up the request, and where necessary for legal obligations or disputes. The current code does not implement automatic mailbox deletion. Resend documents a 30-day email/log retention period on its standard plans; the subscribed plan, message-storage settings, mailbox retention and hosting/security log periods still need confirmation before publication. Deleting local app data does not delete these remote records.
To request remote deletion, contact us using the address concerned and, if available, the relevant installation identifier. We may need proportionate information to locate data; we cannot link a pseudonymous installation to you from your name alone.
Your choices and rights
Where applicable, you may request access, rectification, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Contact . Requests are normally answered within one month, with any lawful extension explained. You may complain to the CNIL or your local supervisory authority.
Children should use the app and online services with appropriate parental supervision and Apple account restrictions. Where a child’s consent requires parental authorisation under local law, that authorisation is necessary. Tilzl is a leisure game, not a clinical or cognitive assessment tool.