PETRO GAME STUDIO
Privacy Policy
Crumple Toss · Effective October 27, 2026 · Contact updated November 3, 2026
This policy applies to the Crumple Toss Android game, the services available at crumpletoss.com, and the private Crumple Toss Mail Backup tool. These services are operated by Petro Game Studio.
Android game
The current Android version works offline, does not require an account, and does not send gameplay data to Petro Game Studio. It contains no advertising, analytics, tracking SDKs, or in-app purchases.
Data stored on your device
The game stores settings, level progress, personal records, and sticker album progress locally on your device. This information is used only to provide game features and is not transmitted to Petro Game Studio. You can remove it by clearing the app's storage or uninstalling the game.
Permissions and network access
The current Android version does not request access to contacts, location, camera, microphone, photos, advertising identifiers, or other sensitive device data. It does not require Internet access for gameplay. Opening this policy uses your device's web browser.
Google Play
Installation and distribution are provided by Google Play. Google may process information independently under its own privacy policy. Petro Game Studio does not receive personal data from Google Play through the game.
Website and Steam sign-in
Public pages, leaderboards, published player levels, and level downloads are available without signing in. If you choose to sign in through Steam, we process your Steam ID and public Steam profile information: display name, avatar, and profile URL. We do not receive your Steam password.
A secure HTTP-only session cookie keeps you signed in for up to 30 days or until you sign out. Short-lived security and transfer tokens are used for Steam sign-in and for moving record or level codes between the game and website. The site does not use advertising or analytics cookies.
Technical information
Our hosting and security systems may process your IP address, browser and device information, requested URLs, and timestamps in technical logs used to deliver, protect, and troubleshoot the service.
Community submissions and public information
If you submit a record, player level, comment, or reaction, we process the submitted content, your Steam account identifier, verification and moderation results, and relevant timestamps. Accepted records and published levels may show your public Steam name, avatar, profile link, result, level, comment, or reaction to other users.
You keep ownership of content you create. By submitting content, you confirm that you have the necessary rights and give Petro Game Studio a non-exclusive, worldwide, royalty-free licence to host, copy, verify, moderate, display, and distribute it as needed to operate Crumple Toss and its community services.
Illegal, infringing, privacy-invasive, malicious, deceptive, abusive, explicit, or manipulated content is prohibited. We may reject, hide, or remove content and restrict submissions to enforce these rules, protect users, and maintain the service. Reports may be sent to the contact address with the public level number and reason.
How information is used and shared
Website information is used only to authenticate users, verify records and levels, publish and distribute approved content, operate leaderboards and community features, prevent abuse, and secure and maintain the service.
We use Steam for authentication and public profile information, hosting infrastructure to operate the service, and a private Telegram moderation channel to review submitted player levels. Submitted level content, preview images, author name, Steam ID, and moderation status may be delivered to that private channel.
Retention and your choices
Expired session and transfer tokens are deleted automatically. Technical logs are removed according to operational and security log-rotation periods. Profile data, submissions, verification results, comments, reactions, and moderation records are retained while needed to provide and protect the service, preserve leaderboard and moderation integrity, resolve disputes, and prevent abuse.
You may request access, correction, or deletion by email. Some records may be retained where reasonably necessary for security, legal obligations, or the integrity of published results.
Crumple Toss Mail Backup and Google Drive
Crumple Toss Mail Backup is a private operational tool being configured for the studio owner and authorized administrators. Its purpose is to back up and restore the studio's domain email using encrypted archives stored in Google Drive. It is not a public sign-in service or a feature of the Android game. The game does not access Google Drive, and this tool does not request Gmail access.
After the owner authorizes Google Drive access, the tool will use backup folder and file metadata, such as names, identifiers, sizes, and modification times, and encrypted archive contents to upload, list, verify, download, restore, and remove backups. Operations will target the designated backup location; the configured location is not itself an OAuth permission boundary. The permissions granted by Google are shown on the consent screen before authorization.
Before operational use, archives must be encrypted locally before upload. Google Drive will store encrypted archives and their file metadata, not plaintext mailbox archives or decryption keys. Authorization credentials will be kept in protected storage outside public files and source control. Access to credentials and restored mail will be limited to authorized operators.
Google Drive data will be used only for backup, recovery, and related security and maintenance. It will not be sold, used for advertising or AI model training, or used to browse unrelated Drive content. Google provides the storage service; the tool will not publish backups or share them with other users. Mail archives may include messages, attachments, and correspondent details already held in the studio's mailbox.
The owner will control the backup retention schedule and may delete archives from Drive. Any automatic removal of older backups will follow the owner's configured retention settings. Access can be revoked through Google Account connections; revocation stops future authorized access but does not delete existing archives. For access or deletion requests, use the contact address below. Requests involving archived mail will be handled subject to applicable retention and security needs.
The tool's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. This section describes the intended operation before activation; it does not mean that Google Drive authorization, automatic backups, or a recovery test have already been completed.
Children's privacy
Crumple Toss is not directed specifically to children under 13, and Petro Game Studio does not knowingly collect personal information from children under 13.
Security and changes
We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security. If our practices change, this policy and, where applicable, the Google Play Data safety declaration will be updated before the change is released.
Contact
For privacy questions, reports, and data requests, contact contact@crumpletoss.com.