Your game. Your data.

Information stored on your device

Character choices, accessibility and game settings, progress, locally authored levels, validation records and recent run information can be stored on your device so the game can remember them. This local information is not uploaded merely by playing the offline game.

Optional Community Hub account

If you choose to use Community Hub, the game creates an anonymous player ID and random access token on your device. You use a generated or custom display name. We do not ask for your real name, email address, password or third-party sign-in.

Community Hub information

Community Hub sends the anonymous player ID, display name, published courses, play history, completion times, likes, reports and block list to the service over an encrypted connection. We use this information to provide community features, manage the anonymous account, and support moderation, security and abuse prevention. We do not sell it or share it with other companies or organisations.

Advertising, analytics and purchases

The current Android build has no third-party advertising, analytics service or in-app purchase system. The only advertising in any version is the optional rewarded video in the TikTok version, described below.

TikTok version

When you play HOP. STOP. DON'T DIE! inside TikTok:

• Game files. The game downloads its pictures and music from our file server (hsdd-tiktok-assets.pages.dev, run by Cloudflare) each time it starts. These are the same files for everyone; no account, name or game data is sent. Like any web server, Cloudflare receives your IP address to deliver the files.
• TikTok sign-in. The game uses TikTok's silent sign-in only to keep your TikTok session active. We do not exchange it for your TikTok ID, profile or contacts, and we receive no information about your TikTok account.
• Saved progress. Characters, settings, progress, created levels and claimed rewards are saved on your device through TikTok's storage. They are not uploaded merely by playing.
• Community Hub. Works exactly as described above, and only when you choose to use it.
• TikTok rewards. Adding the game to your home screen or opening it from the TikTok sidebar unlocks costume sets. TikTok tells the game only whether you did it.
• Optional rewarded videos. After a run you can choose to watch an advert to unlock a costume set. Adverts are shown and measured by TikTok under TikTok's own privacy policy; we receive only whether the video was watched to the end, never information about you. Nothing is shown unless you tap “Watch ad”.

TikTok's own handling of your use of TikTok is covered by the TikTok Privacy Policy.

Deleting information

You can delete Community Hub data immediately in the game from Settings → Community Hub Data → Delete, or use our account-deletion page if you no longer have access to the app. Deletion removes the anonymous player record, display name, play history, completion times, likes, reports, block list and published courses from public availability.

Moderation and security events are de-identified. Removed course revisions may remain as non-public technical records linked only to a random identifier that no longer identifies an account. If a course was selected for an archived free Adventure feature, the level may remain with its creator credit anonymised.

You can remove local game information by clearing the app's storage or uninstalling the app. This may remove characters, progress and created levels stored on that device.

Facebook and Messenger connection used by HubX

Facebook disclosure reviewed 29 October 2026. ThriftX Ltd uses HubX internally to manage its own Facebook Pages, including ThriftX and ThriftX Studios. The Page administrator connects through Meta's sign-in and chooses the permissions to grant. HubX receives access tokens, granted permissions, manageable Page IDs, names and tasks, Page profile information, posts, scheduled posts and publication receipts needed for those functions. Durable OAuth tokens and the app secret are encrypted before storage on our server; Page access tokens are obtained from Meta when needed.

Where these features are enabled and authorised, HubX reads comments and recent Messenger conversations to respond to people who ask for a code, current deals or help. It processes message text, comment and message IDs, sender IDs and timestamps. It keeps identifiers and response outcomes needed to avoid duplicate replies. These records are used for Page operation and requested replies, and are not sold.

We process this information to operate the accounts the owner connects, reply to requests, prevent duplicate or abusive activity and maintain reliable business records. Our hosting provider processes server data to provide that infrastructure. Connection credentials are retained while the integration is needed; operational records are retained while needed for the relevant post, reply, dispute or security purpose. We review deletion requests against those purposes and any necessary legal retention, rather than promising automatic expiry that the service does not implement.

You can ask us to access, correct or delete information held about you, or object to its use for these purposes, by contacting support@thriftxstudios.co.uk. A Page administrator can revoke HubX's access in Facebook's business integration settings. Revoking access and deleting retained HubX data are separate steps: follow the Facebook and HubX deletion instructions for retained records. Meta separately controls information held by Facebook and Messenger under its own privacy policy. You can raise a concern with the UK Information Commissioner at ico.org.uk.

TikTok connection used by HubX

ThriftX Ltd uses its internal HubX tool to post videos to its own TikTok account. When the account owner connects that account, HubX receives from TikTok and stores an access token, a refresh token, the granted permissions and the account's open ID, display name and username. These are used only to confirm the connected account is the intended ThriftX Ltd account and to post videos the owner has approved. Tokens are encrypted before they are stored on ThriftX Ltd's own server and are never shown in HubX or shared with other companies or organisations. Disconnecting in HubX asks TikTok to revoke the access and deletes the stored tokens; access can also be removed at any time from TikTok's app settings. HubX does not collect information about other TikTok users.

YouTube connection used by HubX

ThriftX Ltd uses its internal HubX tool to publish videos to its own YouTube channel. HubX uses YouTube API Services, so use of HubX with YouTube is also subject to the Google Privacy Policy and the YouTube Terms of Service. When the account owner connects the channel, HubX receives and stores an access token, a refresh token, the permissions granted, and the channel's ID and title. HubX uses them only to confirm the connected channel is ThriftX Ltd's own channel, to upload videos the owner has approved, to read back each upload's title and privacy, to read the channel's title, description, banner, trailer and public video count for HubX's channel check, and, with the owner's approval, to update the channel description. HubX keeps a record of each upload's video ID, link and privacy setting. Tokens are encrypted before they are stored on ThriftX Ltd's own server, are never shown in HubX, and are not sold or shared with any other company or organisation. HubX does not collect information about other YouTube users or channels. Disconnecting YouTube in HubX asks Google to revoke HubX's access and deletes the stored tokens at once. Access can also be removed at any time from Google's security settings; HubX then deletes the stored tokens the next time it tries to use them, which it does at least every six hours.

Website data

This developer website does not contain an account system or support form. Standard request and security logs are processed by Self-hosted infrastructure controlled by ThriftX Ltd for abuse prevention and service reliability and are retained for up to 30 days.

Contact

Privacy questions can be sent to support@thriftxstudios.co.uk.

Developer and legal identity →