Privacy Policy

Last updated: 1 November 2026

Draft. This policy describes how Tovoria works today and will be reviewed before Tovoria's public release.

Tovoria is made by EMPOC, LLC ("we", "us"). This policy explains what information Tovoria collects, why, and the choices you have. We collect as little as we can to run the game and its online features. We don't sell your information, and we don't show ads.

What stays on your device

Everything you make (levels, art, packs, palettes, worlds) and your game progress are saved on your device. They only reach our servers if you choose to share them.

What we collect when you use online features

• An anonymous device identity. When you first open the online features, the game creates a random id for your device so you can browse and play without signing up. We store only a one-way hash of it.
• Sign-in, if you choose to sign in with Apple, Microsoft or email. For Apple and Microsoft we receive an account identifier, which we store only as a one-way hash. If you sign in with Apple, we also keep an encrypted token from Apple so we can tell Apple to disconnect Tovoria if you delete your account. For email sign-in, we use your address only to send you a sign-in code and store only a one-way hash of it.
• Your display name, which other players see.
• What you share: levels, art packs and worlds you choose to upload, with your name as the author.
• Activity on shared content: plays, clears and best times, likes, and reports you file. Other players see totals and your name on records such as best times.
• Blocks you set up, so we can hide those players' content from you.
• Technical data: your IP address is used to protect the service (for example, rate limits against abuse) and appears briefly in server logs.

Purchases

When in-game purchases become available, they are handled by the platform you play on (for example, Apple). We receive confirmation of the purchase so we can credit your account, not your payment details.

Who helps us run Tovoria

• OVHcloud hosts our servers and database.
• Cloudflare protects and delivers our website and online service.
• Mailgun sends sign-in code emails.
• Apple and Microsoft provide sign-in when you choose them.

They process information only to provide these services to us.

Moderation and safety

Players can report shared content. Reports and the content they concern are reviewed by us. Content that breaks our Terms may be hidden or removed, and we tell the author why.

Deleting your account

You can delete your account at any time in the game (Account → Delete my account). This permanently deletes your account, your sign-in links, everything you shared, your likes, blocks and reports. Plays and clears you made on other players' content stay only as anonymous totals. If you signed in with Apple, we also ask Apple to disconnect Tovoria. Things saved only on your device are not affected; you can delete them in the game or by removing the app.

How long we keep information

We keep your information while your account exists. Server logs are kept for a short time for security. Backups are overwritten on a rolling basis.

Children

Tovoria is a creative game that families enjoy. We collect very little and never sell information. If you believe a child has given us personal information without a parent's consent, contact us and we will delete it.

Your choices and rights

You can play without signing in, change your display name, choose what to share, and delete your account. Depending on where you live, you may have additional rights (such as access or correction); contact us to use them.

Changes

If we change this policy, we'll update the date above and, for important changes, tell you in the game.

Contact

EMPOC, LLC · [email protected]