Privacy Policy
THROW ANYTHING ("the Game") needs no account and asks for no personal details. Its online features - how many people are playing, the throw counter and levels made by players - work with a random ID the Game makes up on your device. This policy sets out exactly what is processed, why, and for how long.
1. What this policy covers
This policy covers the THROW ANYTHING website, the browser game, the Android app built from the same code, and the online service the Game talks to.
2. Information we do not collect
We do not collect:
- Your name, e-mail address, phone number or other contact details - the only text you can send is a level title and an optional maker name, both of your choosing
- Account details - there is no sign-up and no login
- Payment details - there is nothing to buy
- Advertising identifiers (ADID/IDFA) - there are no ads
- Location, contacts, photos, microphone or camera data
- Advertising or cross-site tracking data, and crash reports - the only measurement is cookie-free Cloudflare Web Analytics on the website (see 6)
3. What the online features process
While the Game is on screen it sends a short heartbeat to our server about every 30 seconds. When you use the level features, it sends what that feature needs:
- Device ID - a random string the Game creates on your device. It is not taken from your device, account or phone number and identifies no one. It lets a session count once, a like count once, and lets you find the levels you published.
- Play counts - how many throws and clears you made since the last heartbeat. They are added to anonymous daily totals; no record of individual throws is kept.
- Game starts and website visits — starting the game adds one start to an anonymous daily total with its first signal, and opening the website adds one visit, sent with no identifier at all. So the same visit is not counted twice, the tab's session storage keeps a throw-anything.visited mark, which is erased when the tab closes.
- Levels you publish - the level layout, the throw that cleared it (used to prove the level can be cleared), the title and the optional maker name you type.
- Likes and reports you make, linked to the device ID.
- Your IP address - used to deliver each request and to limit abuse. Only a salted one-way hash of it is stored, and only with a level you publish; the address itself is never stored.
Purposes: showing how many people are playing, running the level gallery, and preventing spam and abuse. Where the GDPR applies, the legal basis is our legitimate interest in running and protecting these features (Art. 6(1)(f)) and, when you publish a level, providing the feature you asked for (Art. 6(1)(b)).
4. How long we keep it
- Heartbeat record for a device ID: deleted after 2 days without a heartbeat
- Daily totals of throws, clears and sessions: anonymous numbers, kept
- Game starts and website visits: kept only as daily totals that identify no one
- Published levels with their title, maker name, likes and reports: until you ask us to remove them or we remove them
- Server logs: kept only for the hosting provider's standard log retention period
5. What is stored on your device
Your progress stays in your browser's local storage and is not sent to us, except the device ID and the counts described above:
- throw-anything.best-score
- throw-anything.cleared-index
- throw-anything.stars
- throw-anything.daily
- throw-anything.missions
- throw-anything.endless
- throw-anything.blitz
- throw-anything.music-off
- throw-anything.challenges
- throw-anything.level-best
- throw-anything.badges
- throw-anything.found
- throw-anything.counts
- throw-anything.sets
- throw-anything.muted
- throw-anything.auto-next
- throw-anything.coached
- throw-anything.lang
- throw-anything.app-banner-closed
- throw-anything.device
- throw-anything.maker-name
- throw-anything.draft
- throw-anything.hidden-levels
To remove it, clear this site's data in your browser or clear the app's data. Where storage is unavailable (private browsing, for example) nothing is stored and the Game still plays normally.
6. Service providers and international transfer
We do not sell or share personal information, and there are no ads. Two providers process data on our behalf:
- Railway Corporation (USA) - hosts the Game's API server and its PostgreSQL database
- Cloudflare, Inc. (USA) - delivers the website and the game files and, on the website only, counts page views and measures loading speed with Cloudflare Web Analytics, which uses no cookies or local storage and does not track you across sites
Data may therefore be processed in the United States. The providers may use it only to provide their service to us.
7. Children
The Game is suitable for all ages and does not knowingly collect personal information from anyone, including children. The only free text is a level title and maker name; links and abusive words are refused, and we ask children not to type their real name. If a child has published something that should not be there, contact us and we will remove it.
8. Your rights and choices
Every part of the Game works without the online features: play without a network connection, or add ?offline to the game address. Everything linked to your device ID (levels you published, likes, reports, presence) can be deleted at once in the game under LEVEL → Records → "Delete my online data", or by e-mailing us with your device ID or a level code (how: https://throwanything.com/en/delete-data/). Where data protection law gives you rights of access, correction, deletion, restriction or objection, contact us to use them; you may also complain to your data protection authority.
9. Contact and changes
The person responsible for privacy is the representative named at the bottom of this page; questions go to the e-mail address there. If this policy changes, the new version is published on this page with a new date.
Contact
- Company — 프로젝트팀포유
- Representative — 이유상
- Business registration no. — 495-25-02209
- Mail-order sales no. — 제2026-경북봉화-0037호
- Address — 경상북도 봉화군 상운면 예봉로 1166-68
- Phone — 070-7620-7256
- E-mail — projectteamforyou@gmail.com
- Service launched — September 25, 2026