Privacy Policy

1. Overview

100Tiles is designed to be used anonymously. We do not require an account, an email address, or any personal information to participate. This policy describes the limited data we do collect and how we use it.

2. What we collect

• Anonymous cookie ID. On your first visit we set a randomly generated identifier (UUID) in a cookie that lasts about one year. This cookie lets us enforce per-day claim, love, and report limits without knowing who you are.
• IP address. Your IP address is read from request headers and used to enforce per-day rate limits (for example, a maximum of two tile claims per IP address per day) and to mitigate abuse. IP addresses are stored alongside reactions and claim records.
• Drawing content and metadata. Strokes, text, colors, and timestamps you produce are stored so the live grid and daily archive can render and play back.
• Standard server logs. Our hosting provider may record routine technical information (request paths, user agents, timestamps) for operational purposes.
• Google Analytics. We use Google Analytics 4 to understand aggregate traffic patterns (page views, geography, device type). Google Analytics sets first-party cookies (typically _ga and_ga_*) and may receive a truncated form of your IP address. We do not use Google Analytics for advertising or remarketing, and we have not enabled Google Signals. See Google's privacy policy for details on how Google handles this data.

3. What we do not collect

• We do not ask for your name, email, phone number, or address.
• We do not use third-party advertising trackers.
• We do not sell or rent any data to third parties.
• We do not maintain a user account database.

4. How we use data

We use the data described above only to:

• Operate the live drawing grid and the daily archive;
• Enforce claim, love, and report limits;
• Detect and prevent abuse, spam, and disallowed content;
• Diagnose technical problems and improve the Service.

5. Cookies

We use a first-party cookie containing a random identifier to enforce per-day limits and track tile ownership. Google Analytics also sets first-party cookies (see section 2). We do not use advertising or social-media cookies. You can clear or block these cookies in your browser settings; doing so means you'll be treated as a new visitor on your next visit.

6. Public content and archives

Anything you draw on a tile is intentionally public. Once a day ends, that day's mosaic and the sequence of events used to render it are archived and publicly viewable indefinitely. Please don't draw anything you wouldn't want a stranger to see permanently.

7. Data retention

Drawing events and archived mosaics are retained indefinitely. Cookie IDs and IP addresses associated with rate-limit and reaction records are retained while relevant for abuse prevention and may be purged from older days at our discretion.

8. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the Service, please contact us so we can address it.

9. Your rights

Because we do not collect personally identifying information, we typically have no way to associate stored data with a specific individual. If you are in a jurisdiction (such as the EU/UK or California) that grants rights of access, deletion, or correction, you may contact us and we will make reasonable efforts to assist where technically feasible.

10. Security

We take reasonable measures to protect the data we hold, but no system is 100% secure. Use the Service at your own risk and do not submit content you would not want to be public.