What this site keeps, what it does not, and how to get rid of it.
Last updated 8 October 2026
The short version. You can use all of Tumble Studio without an account and without telling us anything. Everything you build is saved on your own computer. There are no adverts, no trackers, no analytics, and nothing is sold or shared with anyone.
Nothing about you is sent anywhere. Your scenes, your settings and your best score are written into your own browser's storage, on your own computer, and they never leave it. Clearing your browser data deletes them, and nobody — including us — has any copy.
The nickname, email address and password you type stay in your browser's storage too. The password is never stored as you typed it; only a PBKDF2-SHA-256 derivation of it is kept. This kind of account is a way of keeping two children's scenes apart on a shared computer. It is not a security boundary, and the sign-up screen says so.
This is the only case where anything is stored on a server. We receive, and keep:
| What | Why |
|---|---|
| A permanent ID number given to us by Google or Microsoft | So we recognise you next time. It is meaningless outside this site. |
| Your email address | So we can contact you about the account if we ever need to. |
| Your first name only | To greet you. Surnames are discarded. |
| A session record | To keep you signed in for 30 days. Only a one-way hash of the session token is stored, never the token itself. |
That is the whole list. We do not receive your password, and we never ask Google or Microsoft for your contacts, your calendar, your files or anything else — only who you are and your email address.
Signing in means Google or Microsoft learns that you use this site. That is unavoidable with this kind of sign-in, and it is why the email-and-password option is still here.
Your scenes are still saved only on your own computer, even when you are signed in this way. We do not have them.
Google and Microsoft both require account holders to be 13 or over. If you are younger, use Tumble Studio without an account, or make one on this computer — everything works exactly the same either way, and we would rather hold nothing about you at all.
Nobody. Nothing is sold, shared or handed to advertisers. There is no analytics, no advertising network, no social media button and no third-party script on this site. The fonts are served from this site rather than from a font service, specifically so that visiting does not report your address to anyone else.
The site is hosted on Cloudflare, which necessarily handles the traffic in order to serve the page, and the account data above is held in a Cloudflare database.
Only one, and only if you sign in with Google or Microsoft: a cookie that keeps you signed in for 30 days. There are no advertising or tracking cookies of any kind.
If this page changes in a way that matters, the date at the top changes with it. Questions, corrections, or a request to delete something: hello@tumblestudio.com.
← Back to Tumble Studio