Privacy

Last updated 26 October 2026

Your creature stays with you

Everything about your TICKLETOAST, including its body, personality, memories, field notes, treasures and keepsake book, is stored on your device. There are no accounts, usernames or emails. The app doesn't ask for your location; seasons come from your device's time zone setting.

Codes you share

A visit code carries only your creature: a random id, its form, its generation, its name if you gave it one, a rough sketch of its personality, and the details your two devices need to stay connected. Nothing in a code is about you. A move code carries your whole creature, so only send it to your own devices.

Friends and the relay

After a first visit, your creatures stay in touch through a small relay we run on Cloudflare.

• Every message is end-to-end encrypted between the two phones. The key never leaves them, so we can't read it.
• The relay only sees random mailbox ids, message sizes and times. No names, no creatures, no content.
• Messages are deleted as soon as they're delivered, or after seven days if they never are. Live playdate messages aren't stored at all.
• We don't keep logs.

The camera

Only used while you're scanning a friend's QR code, only after you tap Scan. Nothing is saved or sent.

This website

No cookies, no analytics, no trackers, no fonts or scripts from anyone else. It's hosted on Cloudflare, which handles the basic technical information any website visit involves, such as your IP address, to deliver the page and keep it safe.

Children

TICKLETOAST doesn't collect personal information from anyone, of any age.

Changes and questions

If this changes, we'll update this page and the date at the top. Questions are welcome at hello@tickletoast.com.