Privacy Policy
Last updated: 27 September 2026
This policy explains what personal data Tiny Brick City (the game and the website at tinybrickcity.com, together the "Service") collects, why, how it is stored and shared, and your rights. We collect as little as we need, we never sell your data, and we never use it for advertising.
1. Who is responsible
Reshot Technologies, SAS with a share capital of 10,000 €, 60, rue François 1er, 75008 Paris, France, SIREN 939 435 988 operates the Service and is responsible for your personal data (the "data controller").
Contact for any privacy question or request: hello@tinybrickcity.com.
2. Playing without an account
You can play Tiny Brick City without an account. As a guest, the cities you build are saved only in your own browser (local storage); they are not sent to us, and we do not identify you.
3. Signing in with Google: the data we receive and how we use it
You can create an account with Sign in with Google. We only request Google's basic sign-in permissions (the "openid", "email" and "profile" scopes). Google then shares with us:
- your name,
- your email address and whether Google has verified it,
- your profile picture (its URL),
- a unique Google account identifier.
We use this data only to:
- create your Tiny Brick City account and sign you in,
- show your name and picture in the game (for example on your saved and shared cities),
- contact you about your account or important changes to the Service.
We do not access your Google contacts, Drive, Gmail, calendar or any other Google data, we do not post anything on your behalf, and we do not use Google user data for advertising, profiling or to train AI models. We do not sell Google user data or transfer it to third parties, except to the service providers listed in section 5 that host and run the Service for us.
Google API Services User Data Policy. Tiny Brick City's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. What we collect and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Account: name, email address, profile picture, Google account identifier | Sign you in and show your profile | Performance of our contract with you | Until you delete your account |
| Your cities: layouts, names, settings and, if you choose to share a city, its public page | Save your progress and let you share cities | Performance of the contract | Until you delete them or your account |
| Session: a sign-in cookie and session records (date, IP address, browser type) | Keep you signed in and protect your account | Performance of the contract, and our legitimate interest in security | 30 days after your last visit |
| Technical logs: IP address, request details | Security, abuse prevention and troubleshooting | Our legitimate interest in keeping the Service secure | A few days to a few weeks |
We do not currently use analytics or advertising cookies. If we add privacy-friendly analytics, this policy will be updated first.
5. Where your data is stored and who processes it
Your account and your cities are stored in our own database on servers rented from Hetzner in Ashburn, Virginia (USA). The database is not reachable from the internet: only our application and our administrators, over an encrypted private network, can access it. All traffic to the Service is encrypted (HTTPS).
We use the following service providers, each bound by a data processing agreement and allowed to use the data only to provide their service to us:
- Google (Sign in with Google) - USA
- Hetzner Online (servers and database) - USA (Ashburn, Virginia)
- Cloudflare (content delivery network, security, storage of the game's 3D models) - worldwide
When personal data of people in the European Economic Area is transferred outside it, it is protected by the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
6. Deleting your data and revoking access
- Delete your account: email hello@tinybrickcity.com from the address of your account. We delete your account, your cities and all associated Google data within 30 days (backups are overwritten within a further 30 days).
- Revoke Google access: you can remove Tiny Brick City's access to your Google account at any time from your Google Account permissions page. This does not delete the data we already hold; ask us as above to delete it.
- Guest cities can be deleted by clearing your browser's site data for tinybrickcity.com.
7. Cookies
We only use an essential cookie that keeps you signed in. It is set when you sign in and is not used for tracking or advertising. Guest cities are kept in your browser's local storage, not in cookies.
8. Your rights
Wherever you live, you can ask us to access, correct, export or delete your personal data, and to object to or restrict its processing. Email hello@tinybrickcity.com; we answer within one month.
- European Union / United Kingdom: you have these rights under the GDPR, and you can lodge a complaint with your data protection authority (in France, the CNIL: www.cnil.fr).
- California and other US states: we do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information. You will not be treated differently for exercising your privacy rights.
9. Children
Anyone can play as a guest without giving us personal data. Accounts are not intended for children under 13, and we do not knowingly collect personal data from children under 13. In the European Union, children under the age of digital consent in their country (15 in France) need a parent's permission to create an account. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes
We may update this policy. The version in force is the one on this page, with its date above. If a change significantly affects how we use your data, we will tell signed-in players in the game or by email before it applies.