Privacy policy
Last updated: 2 October 2026
This policy explains how personal data is handled when you play Thimiola's Toilet at thimiolas.com ("the game", "we", "us"). THIMIOLA is fictional. This policy is not.
1. Who we are (data controller)
The data controller is the operator of Thimiola's Toilet. For any privacy question or request, write to [email protected]. See also contact and terms of use.
2. Summary
- No account, sign-up or login. We never ask for your name, email or other personal details.
- Your game progress stays in your own browser. We don't receive it.
- The game is free because it shows ads from our ad partner Monetag. No ad code loads unless you choose Accept; if you choose Essential only, no ad code loads and the game plays exactly the same. You can change your choice at any time: privacy and ad settings.
- We don't sell your data, and we don't use analytics or tracking of our own.
3. What we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Game progress in your browser's local storage (recovered research logs, session counter, whether you've seen the intro) | Remembering your progress, which is the game feature you are using | Art. 6(1)(b), providing the service you requested. Storing this on your device is strictly necessary for that service. |
| Technical connection data (IP address, browser type, request time) handled by our hosting/CDN provider | Delivering the site securely, preventing abuse and attacks | Art. 6(1)(f), our legitimate interest in a secure, working website |
| Advertising data: cookies, device and advertising identifiers, IP address, approximate location, ad interactions | Showing ads, limiting how often you see them, measuring them, preventing ad fraud, and (with consent) personalising ads | Art. 6(1)(a), your consent. Nothing is loaded or stored for advertising until you choose "Accept". Our ad partner and its partners are responsible for their own processing. |
| Your consent choice | Remembering whether you allowed ads, so we don't ask every time | Art. 6(1)(c) and (f): we must be able to show that consent was given, and respect a refusal |
| Motion and orientation sensor readings (phones, only if you allow them) | Tilting and shaking the bathroom in real time | Processed only on your device, never stored or transmitted |
| Emails you send us | Answering you | Art. 6(1)(f), our legitimate interest in replying |
We don't make decisions about you based solely on automated processing, and we don't create profiles ourselves.
4. Cookies and local storage
| Name | Set by | Purpose | Type and duration |
|---|---|---|---|
thimiola.research.v1 | Us | Your game progress | Local storage, strictly necessary. Kept until you wipe it. |
thimiola.consent.v1 | Us | Your ad consent choice and when you made it | Local storage, strictly necessary. Kept until you change it or clear site data. |
| Advertising cookies, local storage and identifiers (names vary) | Monetag and its advertising partners, only after you accept | Serving, frequency-capping and measuring ads, preventing fraud, and personalisation | Non-essential. Durations are set by the ad partners; see Monetag's privacy policy. |
Security cookies (for example __cf_bm) | Cloudflare, only if bot protection is triggered | Telling humans from bots | Cookie, strictly necessary. About 30 minutes. |
Ad code only loads after you choose "Accept". You can delete cookies and local storage in your browser at any time. To erase your game progress, use 📁 Project Files → Credits → Wipe research progress.
5. Advertising
Our current ad partner is Monetag, operated by Propeller Ads Ltd, Zinonos Rossidi 11, 3082 Limassol, Cyprus (registration number HE353513). We use its vignette format: occasional full-screen ads that you can close. Monetag's privacy policy: monetag.com/privacy.
- Consent first. When you first play, the start screen asks for your choice, with two equal buttons: Accept & begin and Essential only. Monetag's code is only loaded after you choose Accept. If you choose Essential only, no ad code is loaded and no advertising cookies are set. Refusing is as easy as accepting, and the game works the same either way.
- What happens if you allow ads: Monetag and its advertising partners may use cookies, local storage, device information, your IP address, approximate location and how you interact with ads to show ads, limit how often you see them, measure them, prevent fraud and personalise them. They act on their own responsibility, as described in their privacy policies.
- Changing your mind: you can withdraw consent at any time through privacy and ad settings (also in the game under 📁 Project Files → Credits). The page then reloads without ad code. Withdrawing doesn't affect processing that happened before.
- You can also opt out of personalised advertising by many companies at youronlinechoices.eu (Europe) or aboutads.info (US).
- We are not responsible for the content of ads. If you see an ad that seems inappropriate, please tell us.
If we use Google AdSense or AdMob
We may later use Google AdSense on the website or Google AdMob in our mobile apps. If we do, this section applies and this policy will be updated:
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
- You may opt out of personalised advertising by visiting Google's Ads Settings.
- How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
- In the EEA, UK and Switzerland, consent is collected through a Google-certified consent management platform (IAB Transparency & Consent Framework). If you decline, you may still see non-personalised ads.
- Some ads may be optional rewarded ads, clearly labelled "Watch ad", that give an in-game bonus. You never have to watch an ad to play.
6. Recipients and international transfers
- Propeller Ads Ltd (Monetag), Cyprus, and its advertising partners: advertising, only after you accept.
- Cloudflare, Inc.: hosting and content delivery (processor).
- Google Ireland Limited / Google LLC: only if we start using AdSense or AdMob (see above).
Cloudflare, and some advertising partners, may process data outside the EU, including in the United States. Such transfers rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses.
7. Retention
- Game progress: on your device until you wipe it or clear your browser's site data.
- Technical connection data: kept by Cloudflare for a short period in line with its security practices.
- Your consent choice: until you change it or clear your browser's site data.
- Advertising cookies: as set by the ad partners (see the table above).
- Emails: as long as needed to deal with your request.
8. Your rights
Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing (including processing based on legitimate interest), to data portability, and to withdraw consent at any time. Because we don't hold your game data or identify you, most requests about ads are best made directly to the ad partner (Monetag), but you can always contact us at the address above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where the alleged infringement took place. A list of the EU data protection authorities is available from the European Data Protection Board.
9. Children
Thimiola's Toilet is a general-audience game with cartoon toilet humour. It is not directed at children, and we do not knowingly collect personal data from children. In the EU, children under the age of digital consent in their country (between 13 and 16) should only give consent to personalised advertising with a parent's or guardian's permission. If you believe a child has given consent, use the privacy and ad settings above to withdraw it, or contact us.
10. Mobile apps
Our iOS and Android apps, when available, use Google AdMob in the same way, with a consent message where required. On iOS you are asked whether the app may track you across other companies' apps and websites (App Tracking Transparency); if you decline, you only see non-personalised ads. On Android you can reset or delete your advertising ID in your device settings.
11. Changes
We update this policy when the game or the law changes. The current version is always on this page, with its date.