Privacy Policy
Zipwaltz · Nimbus Bikes LLC
Effective date: November 5, 2026 · First published: October 14, 2026 · Last updated: November 8, 2026
This policy explains how Zipwaltz handles information in its iOS and Android games and how we handle messages sent to its support email and visits to this support website. Zipwaltz is published by Nimbus Bikes LLC, an Oregon limited liability company. 11557 SE Cascade View Dr, Happy Valley, OR 97086-4039, United States. On the Apple App Store, Zipwaltz is currently sold by John Li, the owner of Nimbus Bikes LLC, on behalf of Nimbus Bikes LLC, while the developer account transfers to the LLC. Nimbus Bikes LLC is the controller of the information described in this policy.
1. Playing the game
The game is an arcade game you play on your own device. You do not need to create a game account to play. The game content is bundled in the app, so ordinary gameplay does not require connecting to any server we run. Duels (section 4) let you send a run to a friend as a link, and Orbit Party rooms (section 5) let you race friends online, but both are optional.
The game stores your scores, progress (such as stardust, rank, missions, achievements and cosmetics), Daily Orbit results, run statistics, a preset duel name and settings locally on your device so they can appear in later sessions. We do not receive this data through a game backend. Your device, Apple and Google backup settings can affect whether local data is preserved, restored or deleted.
The game is meant for players 13 and older. If a child under 13 contacts support, we delete the message. What Orbit Party rooms process is described in section 5 and in its Children paragraph.
2. Optional purchases
The iOS and Android apps offer optional one-time cosmetic purchases in the in-game Hangar: Pulsar Comets, Rival Ghost Styles, the Strings Instrument Pack and Finish Effects (on both iOS and Android). On iOS only, a Founder's Bundle (which includes the Supporter Pack, Pulsar Comets and Rival Ghost Styles) is offered for 30 days starting November 20, 2026. The purchases are cosmetic only and do not change gameplay or scoring. On iOS, the original Supporter Pack may also be offered; if you already own it, it keeps working.
Purchases and restoring them (Restore Purchases in the Hangar) are processed by Apple's App Store and StoreKit on iOS, or Google Play Billing on Android. Apple or Google manages billing, your account, transaction processing and purchase history under its own terms and privacy practices, and the app checks your purchase and entitlement status with Apple or Google on your device to unlock your items. Nothing about your purchases is sent to servers of ours; we do not run any for this game. Apple processes App Store purchases and does not give us your payment-card details. On Google Play, the Play Console shows us each order's date, app, product, order ID, status and total, and lets us search orders by the buyer's email address. Store purchases and restoration require an internet connection, even though the core game is playable without one.
3. Sharing a score
If you choose to share a score, the iOS app opens the Share Sheet, and the Android app copies the text or link to your clipboard so you can paste it where you like. You decide whether to send it and which service receives it. Scores are not shared automatically. The recipient service's own privacy terms apply to anything you choose to send.
4. Duels and shared links
A duel works through a link that contains your run. When you choose to start or reply to a duel, the app builds a link that encodes what is needed to replay your run: the game rules version, the course seed, your score and hops, the playfield size (derived from your screen size), your aim-guide setting, the timing of your taps, the cosmetic look of your comet if you chose one, and a preset duel name. If you are replying to a duel, the link also carries the runs from the link you received, each with its own preset name and the same details, so one link can hold up to six runs in total (the oldest drop off when it is full). The duel name is picked once at random from a built-in list on your device; you do not type it, and it is not your real name. The link does not include an account, email address, device identifier or location.
This data sits in the part of the link after the "#" sign. Web browsers do not send that part to a website's server, and the duel page on this site does not upload it. The iOS app shares the link through the Share Sheet and the Android app copies it to your clipboard; either way, you decide whether to share a link and with whom. Anyone who has the link can open it, see the preset names and replay the runs in it (up to three race together), and the link may be forwarded or be visible to the service you send it through (a messaging app, for example) under that service's own privacy terms. Please share links only with people you want to see them, and do not add personal information to any message you send with a link.
A friend plays the run by opening the link in a web browser, on this support website's duel page; the apps do not open duel links. The duel page is the full game running in the visitor's browser, and it saves a preset duel name, best score, progress, settings and tutorial flags in that browser's local storage.
5. Orbit Party rooms (online, optional)
Orbit Party lets you race friends in a private room. Rooms are optional: the rest of the game works without them and offline. Rooms are available in the browser version of the game (the duel page) and in the iOS and Android apps from the app update that adds them. Nothing connects to the room server until you tap Create or Join. The apps share a room invite as a link to the duel page, so a friend without the app can join in a browser.
What we process. To run a room we use a random room code, the nickname you pick from our preset list (a choice from fixed lists, stored and sent as a single 16-bit number, not text you type), a random seat token so you can rejoin after a drop, the course seeds, the taps you make during each heat, and the resulting scores. Taps are replayed on the server to confirm your score. There is no account, no email address, no free text and no chat. Your nickname, your comet's coarse position and live score during a heat (relayed live, about 5 times a second, and never stored) and your scores are shown to the other players in the same room.
How long. While a room is open its data (the room code, the preset nickname number, the seat token, the course seeds and the scores) is held in the room server's memory, and a copy of it is saved to the room server's temporary storage (a Cloudflare Durable Object) every few seconds so the room survives a server restart. That saved copy is deleted when the last open room closes; while other rooms are still open, it is rewritten without the closed room within about half a minute. The taps you make are replayed to check your score and only the result is kept; your live position is relayed and never saved. We keep no copy of your nickname or scores after the room closes. While the room is open this data is tied to your seat in the room (through the seat token), not to your name or an account. Your device may keep its own copy of the results card, which you can delete by clearing the game's data. Beyond that we keep only overall counts, such as how many connections were opened, with nothing that identifies a player.
Your IP address. Your device's IP address reaches our servers because that is how the internet works. Our code turns it into a scrambled (hashed) form, using a random salt that changes each UTC day, and keeps that hash and the salt in the room server's temporary storage. Next to the hash we keep counts for that hash for the day (connections opened, messages, actions such as create, join and start, runs, and live-position messages), only to limit how much one connection can do. The hash, its salt and its counts are deleted from storage within 10 minutes after the UTC day ends, even if nobody is using rooms at that time (a scheduled cleanup does this). The hash is pseudonymous, not anonymous: it is stored beside its salt, so someone with access to that storage could work out the address from it. While you are connected the hash is also kept with your connection. Our code never stores or logs the address itself and never links the hash to your nickname, seat or scores, and the room server's logging is turned off. We do not use it for anything except rate limits and abuse protection.
Not for ads or tracking. We do not use room data for advertising, profiling or tracking across apps or websites, and we do not sell or share it. Orbit Party rooms follow the same rule as the rest of the game: no ad or analytics SDKs and no tracking.
Who runs the servers. Rooms run on Cloudflare (Cloudflare, Inc.), which processes connection data, including IP addresses, on our behalf as a processor to deliver and protect the service, under its privacy policy and data processing terms. Room servers may run in a Cloudflare location outside your country. Connections are encrypted in transit.
Children. Orbit Party rooms process only a small set of technical identifiers for every player, including children: a random seat token (so you can rejoin after a drop) and a salted, hashed form of your IP address that changes every UTC day. We use them only to run the room and for abuse and security limits. Orbit Party has no names, no accounts, no email addresses, no chat and no free text: if you pick a nickname, you choose it from a fixed preset list and nothing you type is sent. We do not use these identifiers for advertising or profiling, and we do not link them to a name or an account. We do not knowingly ask children for any other personal information.
6. Game Center (optional)
On iOS, if you are signed in to Apple Game Center, the app reports your scores to the Zipwaltz leaderboards and unlocks achievements through Game Center. Apple provides this service under its own terms and privacy practices, and your Game Center nickname and scores can be visible to other Game Center players. We do not run a server that receives this information. You can play without Game Center and can manage it in your device's Settings.
7. Clips (iOS)
On iOS, the game can record a short clip of a run (about 10 seconds) using Apple's ReplayKit. The clip captures the game screen and game audio, not your microphone. It is kept as a temporary file on your device and only leaves the device if you choose to share it through the Share Sheet or save it to Photos (the app asks for permission to add to your photos). We do not upload clips.
8. Advertising, analytics and tracking
The iOS and Android games do not include third-party advertising or analytics SDKs and do not use an advertising identifier for cross-app tracking. This support website does not install analytics scripts or advertising cookies. If these practices change in a future release, this policy will be updated accordingly.
Apple and Google can separately process App Store purchases, downloads, diagnostics and aggregate usage information under their own settings and privacy practices. The fact that a device uses those services does not mean game scores are uploaded to us.
9. Contacting support
When you contact slingshotplanet-support.tiling324@simplelogin.com, we receive the email address you use, the message content and any attachments you choose to include. We use this information to answer your request, investigate game defects and maintain related support records. Please do not send sensitive information such as passwords, verification codes or payment-card details.
Our public support alias is routed through SimpleLogin, and the private support inbox is hosted with Proton Mail. These providers process support messages as needed to deliver, protect and store email. We do not use support inquiries for targeted advertising or sell support correspondents' information. We retain support correspondence only as reasonably needed to provide support, resolve issues or comply with applicable record-keeping obligations. You can request deletion of a support conversation by contacting us, subject to any necessary legal or security retention.
10. Website hosting and external links
These pages are static and hosted using GitHub Pages. We do not run a site visitor-account system, embedded contact form, advertising pixel or site analytics on these pages. GitHub may process technical request data, such as IP addresses, for website hosting, security and service operation according to its own privacy practices.
The duel page loads its two fonts from Google Fonts, so Google may receive your IP address and browser details when you open it, under Google's own privacy practices. Apart from Orbit Party rooms (section 5), which are optional, the page sends no data to us or to any analytics service.
Links to Apple, Google Play, itch.io, email applications and other external services take you to independently operated services with their own privacy terms.
11. Your choices
- You can play without creating a game account or buying any pack.
- You may choose whether to share a score or a duel link, and whether to email support.
- Joining an Orbit Party room is optional. Room data is deleted when the room closes, and the hashed address used for rate limits is deleted within 10 minutes after the UTC day ends (section 5). It is tied to a seat in a room and a random token, not to your name or an account, so there is nothing for us to look up by name; you can still contact us with any question.
- You may change or remove locally stored game data using your device's app and backup controls.
- You may ask us about your support messages or request their deletion using the contact address below.
- Apple Account and Google Play purchase-history and payment requests are handled through Apple's and Google's account and support channels.
12. Android app
Zipwaltz on Android (com.shortygames.zipwaltz) works the same way as the iOS game, apart from Apple-specific features: you play on your own device, with no account, no ads and no analytics or third-party SDKs other than Google Play Billing for the optional purchases in section 2. Game data stays on your device (and in your device backup if you turn backup on), and gameplay works offline.
The Android app requests permission for vibration (haptics), internet access, network-state access and Google Play's billing permission. The billing permission comes with Google Play Billing; the internet and network-state permissions are used by Play Billing and by Orbit Party rooms (section 5). Apart from Orbit Party rooms (section 5), which use the internet permission only after you tap Create or Join, the game itself makes no network requests; Google Play Billing uses them to buy and restore the optional purchases through the Google Play store on your device. Google Play Billing and the Google Play services components it brings may send purchase and diagnostic data to Google under Google's privacy policy. We do not receive your payment-card details from them; see section 2 for the order information Google Play shows us. Section 6 (Game Center) applies only to iOS. If Android backup is turned on in your device settings, Google may include the game's local data in your device backup under Google's own terms; you can turn this off in Android settings. Scores and duel links are never shared automatically. Orbit Party rooms (section 5) work the same way in the Android app as in the browser. Uninstalling the app deletes its data from the device.
13. Your rights
We handle Google Play order records based on our legitimate interests in supporting and honouring your purchases, and we handle support emails based on our legitimate interests in helping you, or on your request. Nimbus Bikes LLC is in the United States, so support email and order data are handled in the United States. You can ask us for access to, correction of, or deletion of the information we hold about you, or object to how we use it, and the other rights your local law gives you, by emailing slingshotplanet-support.tiling324@simplelogin.com. If you are in the EU, the EEA or the UK, you can also complain to your data protection authority. Support correspondence is kept only as described in section 9.
14. Changes and contact
We may update this policy when the game's features, service providers or legal obligations change. The effective date above will show when a revision applies.
For privacy questions or support requests, email slingshotplanet-support.tiling324@simplelogin.com.