IMAGINE KINGDOMS

Privacy policy

Last updated 11 November 2026

You don't need an account to play, and we never ask for your real name. Our games save your progress in your own browser, and the tickets, achievements and stickers you earn playing them. If you make an account on tickle.io (to comment, post in the forum, keep your clips, game saves, level progress and rewards, join the leaderboards, log, rate, review and make lists of the games you play, or follow other players), you give us an email address, which we use only to sign you in and never show to anyone, and you pick a username and an avatar, which are public. They show on your profile page with the reviews and lists a moderator approved, who you follow and who follows you and, unless you turn it off, the games you've played and when, your ratings, favorites and want-to-play list, and your level, achievements and sticker albums; players who follow you see that in their activity feed too. Our host, Cloudflare, handles every page request and counts visits without cookies. If you email us, we keep your email so we can reply.

Who we are

This policy covers tickle.io and our games' own sites, snowboardsurfers.com, cozycitizen.com and imaginekingdoms.com. All four are run by Zeebo UK Limited, a company based in the United Kingdom, at 49 Greek Street, London W1D 4EG, England ("Tickle", "we"). We decide how the personal data described here is used, so we're its controller. Write to us at hello@tickle.io.

Because we're in the UK, UK data protection law (the UK GDPR and the Data Protection Act 2018) applies to us, and the Information Commissioner's Office is our regulator. We have no office in the European Union. If you're in the EU, the EU GDPR protects you too: write to us at the same address about anything in this policy.

Who the sites are for

Tickle is for people aged 16 and over. If you're under 16, please don't use the sites. We don't knowingly collect personal data from anyone under 16. If you think someone under 16 has sent us personal data, for example by email, tell us and we'll delete it.

What we collect, why, and for how long

WhatWhyLegal basisHow long
Game progress and settings, saved in your browser (localStorage): courses unlocked, best scores, your last rider, course and difficulty, sound on or off, camera view and graphics quality. So the game remembers where you got to and how you like it set up. It never leaves your device and we never receive it. Saving it there is part of the game you asked to play. Until you delete it (below) or clear your browser's site data.
Your account email (tickle.io accounts only), and the one-time sign-in codes we send to it. To sign you in: each time, we email a 6-digit code to the address. We don't show your email to anyone (moderators don't see it either), send you marketing or newsletters, or use it for anything else. A code is kept only in scrambled form, for 10 minutes. Providing the account you asked for (contract). Until you delete your account.
Your public profile (tickle.io accounts only): the username you choose and the avatar you pick from our set of drawings, when you joined, and your profile page at tickle.io/@ followed by your username in lower case (tickle.io/@yourname). The addresses of your reviews and lists start with it too. The account also has an internal id (a random code we give it once and never give to anyone else, even after you delete the account); it isn't part of any page's address. Shown next to your comments, forum posts, reviews, lists and leaderboard scores, which link to your profile page, so people can tell players apart. The page shows your username, avatar, when you joined, the reviews and lists a moderator approved, how many players you follow and how many follow you (with the lists of them: see Follows), and, unless you turn it off (the setting below), your diary, ratings, favorites and want-to-play list. That's all anyone else sees about you: there are no real names, birthdays, locations, photos or bios on Tickle. Providing the account you asked for (contract); for an old username we hold, our legitimate interest in stopping anyone else taking it to pass themselves off as you. Until you change them or delete your account; then the profile page goes. You can change your username once every 30 days. When you do, we keep your old username for 90 days, linked to your account, only so that nobody else can take it (you can take it back in that time); then we delete it. Its old address then says only "This player changed their name.": it doesn't link or forward to your new name. Your public reviews and lists stay public under your new name, and their links keep working: an old link to one of them goes to it at your new name. If an old username puts you at risk, or is a name you no longer use, email hello@tickle.io: we can stop holding it straight away and give your reviews and lists new addresses, so that old links to them stop working. If a moderator takes a username away for breaking the rules, that name goes on a list of names nobody can pick again; the list doesn't say whose it was. The internal id stays with the deleted account's empty record, only so that no one else is ever given it.
Comments and forum posts you write, with the time, and moderation records (whether a moderator approved or removed a post, and why). Reports you send about other posts. To publish your posts once a moderator has approved them, keep the community safe and answer reports. Providing the service you asked for (contract); our legitimate interest in moderating it. Until you delete your account. Then all your posts come off the site at once, and a thread you started takes the replies under it with it (so a reply of yours comes off if the person who started the thread deletes their account). We keep them hidden, with no end date, until you ask us to erase them: email hello@tickle.io. A post's moderation record is kept as long as the post. Posts a moderator removed are kept, hidden, with their record, and reports are kept with the post they're about, so moderators can see what happened before; ask us if you want one deleted.
Leaderboard scores and their replays (when you're signed in and finish a run): your best score on each game today, this week and of all time, and the recording of that run. A recording is the game's random seed (which our server hands out for each run) and the buttons you pressed at each moment, not a video. From the recording we work out simple timing figures, like how quickly and how evenly the buttons were pressed. If another player reports one of your scores, we keep the report and its reason. To check the score is real by replaying the run on our side, then rank you on each game's and each category's leaderboards, where anyone can see your username, avatar and score and watch the replay. Until it's checked, only you (and our moderators) see it. The timing figures and reports are seen only by our moderators, to spot bots and cheating. Providing the leaderboards you joined (contract); our legitimate interest in keeping them fair. Daily boards for 8 days, weekly boards for 5 weeks, all-time bests until you beat them or delete your account. Reports about a score: until 180 days after a moderator closes them.
Clips in your account: recordings of your runs (as above, not video), with the game, score, date and whether you starred them. They're also kept in your browser, signed in or not. So your clip history survives a cleared browser and follows you to other devices. Providing the account you asked for (contract). Up to 200 clips; the oldest unstarred ones make room. Deleted with your account, or one by one by you.
Favorites in your account: the games you hearted and when. Signed out, they're kept only in your browser; when you sign in, those are added to your account. So your favorites follow you to other devices and the Favorites lane in the feed can play them. They show on your profile page unless you turn that off. Providing the account you asked for (contract). Up to 500 games. Deleted with your account, or one by one by you.
Game saves: some games carry on from one play to the next (a home you're building, the days that have passed, what you've unlocked), so they keep a save: the game's own record of your progress (at most 1 MB), which version of the game wrote it, when, and one backup (the save before it). Signed out, it's kept only in your browser on that device. Signed in, it's also kept in your account, and a save made on the device while you were signed out goes to your account the next time you play that game signed in (if your account already has a different one, the game asks which to keep, and the other becomes the backup). So the game carries on where you left off, on every device you sign in on, and you can go back to the save before. Providing the game and the account you asked for (contract). In your account: until you delete it (My saves, on your account page) or delete your account. A deleted save leaves only a note that it was deleted, with none of the game's data, until you delete your account. In your browser: until you clear the site's data (see below).
Tickets and your level: the tickets each round you play gives you (worked out from its score, its length, whether it was a new best and what it earned), the tickets you have now and have earned in all (your level comes from that), what you spent them on, the free gift's count of rounds and when you last opened it, and how many tickets each game gave you that day. Signed out, it's kept only in your browser; signed in, in your account (and anything your browser earned before you signed in moves into your account when you do). To give you tickets for playing, show your level, run each game's prize machine and the free gift, and keep any one game from paying for being played over and over (after a daily amount a game pays less). Tickets have no money value: they can't be bought, sold or swapped, and are spent only on cosmetics in our games. Your level shows on your profile unless you turn that off; your tickets don't. Providing the game and the account you asked for (contract). In your account: until you delete your account (each game's daily count for 30 days). A round is taken back if our replay check finds the run wasn't real. In your browser: until you clear the site's data, or until it moves into your account when you sign in.
Achievements, stickers and cosmetics: in games that have them, the achievements and stickers you've earned (with the run that earned each, and whether our replay check confirmed it), counts toward some of them (such as wins), the cosmetics you've won from the game's prize machine, and the one you play with. Signed out, only in your browser; signed in, in your account too. The cosmetic you play with is saved in the replays of your runs, so they look the same when watched. So you keep what you earned on every device you sign in on, your profile can show your sticker albums (unless you turn that off: "Show my level, achievements and sticker albums on my profile" on your account page; it's on when you join), and each game's page can show what share of its players earned each achievement, counted without names once 20 or more have played. Providing the game and the account you asked for (contract). Until you delete your account. An achievement or sticker is taken back if our replay check finds the run that earned it wasn't real. In your browser: until you clear the site's data, or it moves into your account.
The days you play and the daily challenge: the days (by the calendar in UTC) on which you played a round that counted, and the day you last met the daily challenge. To show you, on your account page only, a calendar of the days you played and how many in a row (one missed day a week doesn't break a run), and to give the daily challenge's tickets once a day. We send no reminders or notifications about it. Providing the game and the account you asked for (contract). 400 days, or until you delete your account. In your browser: the last 60 days, until you clear the site's data or sign in.
Level progress: in games with levels that unlock (Knights vs Beasts so far), which levels you've cleared, the stars you earned on each, when, and whether our replay check has confirmed the run. Signed out, it's kept only in your browser; signed in, it's kept in your account too, and in your browser under your account. So the game shows the levels you've unlocked on every device you sign in on. Only you see it: it isn't on the leaderboards or your profile. Providing the game and the account you asked for (contract). In your account: until you delete your account. A level is taken off again if our check finds the run that cleared it wasn't real. In your browser: until you clear the site's data (see below).
Your diary, ratings and want-to-play (tickle.io accounts only): the games you log as played and the day you say you played each one, your star rating of each game (half a star to five), and the games you mark "want to play". So you can keep track of what you play. Unless you turn it off with "Show my diary, ratings, favorites and want-to-play on my profile" on your account page (it's on when you join), they show on your profile page, and your rating shows next to your reviews. Ratings also count, without your name, in each game's average and spread, which we show only once 5 or more players have rated a game. Providing the account you asked for (contract). Until you delete them on your account page or on the game's page, or delete your account.
Reviews you write of a game (one per game, up to 5,000 characters), whether you marked it as having spoilers, when you wrote and edited it, an edit waiting for a moderator, and moderation records (whether a moderator approved or removed it, and why). Reports you send about other people's reviews. To publish your review once a moderator has approved it: on its own page (under your profile's address: tickle.io/@ your username, then /reviews/, the review's own random code and the game's name; the code never changes, so the link keeps working if you change your username), on the game's reviews and on Tickle's list of new reviews, with your username, avatar and, if you show them, your rating. An edit replaces the review once a moderator approves it; until then the approved version stays up. Also to keep the community safe and answer reports. Providing the service you asked for (contract); our legitimate interest in moderating it. Until you delete the review or your account. If you delete your account, all your reviews come off the site at once; we keep them hidden (with any edit still waiting), with no end date, until you ask us to erase them, as for posts. Reviews a moderator removed are kept, hidden, with their record, and reports are kept with the review they're about, as for posts.
Lists you make (up to 100): each one's title, description, the games on it (up to 250, ours and classics) in your order, whether it's ranked, a note on any game, when you made and changed it, changes waiting for a moderator, and moderation records (whether a moderator approved or removed it, and why). Reports you send about other people's lists. To publish your list once a moderator has approved it: on its own page (tickle.io/@ your username, then /lists/, the list's own random code, which never changes, and the words of its approved title, which change when you rename it; an old link keeps working), on your profile, on the pages of the games on it and on Tickle's lists page, with your username and avatar. Changes to the title, description or notes go up once a moderator approves them, and until then the approved version stays up; the games and their order change at once. Also to keep the community safe and answer reports. Providing the service you asked for (contract); our legitimate interest in moderating it. Until you delete the list or your account. If you delete your account, all your lists come off the site at once; we keep them hidden (with their games, notes, likes and any changes still waiting), with no end date, until you ask us to erase them, as for posts. Lists a moderator removed are kept, hidden, with their record, and reports are kept with the list they're about, as for posts.
Likes you give other players' lists. To count them: each list shows how many likes it has, and Tickle's lists page puts the most liked first. Nobody, the list's author included, is shown who liked a list. Providing the service you asked for (contract). Until you take the like back or delete your account (or the list goes).
Follows: the players you follow, the players who follow you, and when each follow started. So you can follow players: your activity feed (tickle.io/activity, only for you) shows what the players you follow logged, rated, reviewed and listed, and only what their profile pages already show everyone (plays and ratings only while their profile setting is on; reviews and lists once a moderator approved them). Who follows whom is public: your profile shows how many players you follow and how many follow you, and anyone can open the lists of them (tickle.io/@ your username, then /following or /followers). Search engines are asked not to index those lists. We send no emails or notifications when someone follows or unfollows you; you see it in your list of followers. Providing the service you asked for (contract). Until you unfollow, one of you blocks the other, or either of you deletes the account.
Blocks: the players you block, and when. So a player you block stops following you and you stop following them, neither of you can follow the other again until you unblock them, and neither of you sees the other in your activity feed or in any follow list (who a player follows, or who follows them). We show your blocks to nobody but you (on your account page), and we don't tell the player you blocked. Blocking doesn't hide comments, posts, reviews or lists: report those if they break the rules. Our legitimate interest in keeping the community safe, and yours in choosing who you deal with. Until you unblock the player or either of you deletes the account.
Abuse limits: a scrambled form of your IP address (a keyed hash we can't turn back into the address) and counters. To limit how many sign-in codes, sign-in tries and leaderboard scores can come from one network, so nobody can flood an inbox or a leaderboard. Counters on your account limit how often you can post, review, make or change lists, like, follow, block, report and change your log. Our legitimate interest in keeping the sites secure. The counters reset every hour; old ones are deleted after 8 days.
Banned accounts: if a moderator banned an account and it is then deleted, a scrambled form of its email address (a keyed hash we can't turn back into the address). So the same person can't delete a banned account and sign straight up again with the same email. Nothing else uses it. Our legitimate interest in keeping the community safe. 2 years after the account is deleted.
Page requests: your IP address, browser and device type, the page you asked for, the page you came from, and the time. Cloudflare needs these to deliver the pages, keep the sites secure and block abuse. Our legitimate interest in running a working, secure website. We don't store request logs ourselves. Cloudflare keeps request data under its own retention rules, which its privacy policy describes.
The bot check (Cloudflare Turnstile) on the sign-in form and on every form that sends something to a person: comments, forum threads and replies, reviews, lists (their titles, descriptions and notes), and reports on a post, a review, a list or a score. It looks at signals from your browser and connection, such as your IP address and browser type. To tell people from bots before the form goes through, so nobody can flood inboxes, the forum or our moderators. It doesn't tell us who you are. Usually you don't see it; sometimes it asks for a tap. Our legitimate interest in keeping the sites and the community safe. We keep nothing from it but whether the check passed, and only for that one form. Cloudflare keeps the signals under its Turnstile privacy addendum.
Visit statistics (Cloudflare Web Analytics): page views, load times, referring sites, country, browser and device type. To see which pages people use and how fast they load. Our legitimate interest in knowing how the sites are used. We only see totals, never individual visitors. Cloudflare's retention rules, as above.
Emails you send us: your email address and what you write. To reply, fix the bug you reported or handle your request. Our legitimate interest in answering you. For privacy requests, our legal duty to respond. Up to 2 years after our last reply, then deleted. A privacy request and what we did about it are kept for up to 6 years, in case we need to show how we handled it.

Cloudflare Web Analytics adds a small script from static.cloudflareinsights.com to our pages. In Cloudflare's words, it "does not use any client-side state, such as cookies or localStorage, to collect usage metrics", and Cloudflare doesn't "fingerprint" individuals by IP address or browser to show analytics.

What we don't do

If we add ads

We may show ads in future to keep the games free. Before we do, we'll update this policy to say which ad companies we use and what they collect. Visitors in the EEA, the UK and Switzerland will be asked for consent before any advertising cookies or similar technology are used.

Who else handles your data

These companies are in the United States, so your data goes there. How it's protected:

Your rights

You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, limit how we use it or send it to you in a portable format. You can also object to how we use it. Email hello@tickle.io with "Privacy" in the subject. We'll reply within one month.

You can also complain to a data protection authority: in the EU, the one in the country where you live or work; in the UK, the Information Commissioner's Office. We'd like the chance to fix the problem first, so please write to us too.

Delete your account

You can delete your tickle.io account at any time on your account page. That deletes your email address, username, avatar, profile page, sessions, leaderboard scores and their replays, the clips, game saves, level progress, tickets, level, achievements, stickers, cosmetics, days played and favorites in your account, your diary, ratings and want-to-play list, the likes you gave lists, who you follow and who follows you, the players you blocked and any blocks of you, and the old usernames we hold for you. (If a moderator banned the account, we keep a scrambled form of its email for 2 years so it can't sign up again: see the table above.) Your comments, forum posts, reviews and lists, including any still waiting for a moderator, come off the site at once (a thread you started takes its replies with it): nobody else can see them, and their links stop working. We keep them hidden, with no end date; email hello@tickle.io and we'll erase them. Moderators can still see one that someone had reported, so they can deal with the report. You can change your username and avatar on the same page, choose what your profile shows (your diary and the rest; your level, achievements and albums), and delete your reviews, lists and diary entries one by one.

Delete your saved game data

Game data lives only in your browser, so we can't see it or delete it for you. You can delete it yourself here. Each site keeps its own copy: this button clears the one for imaginekingdoms.com.

To clear the copy on the other site, use the button on its privacy page. If you'd rather the games saved nothing at all, play in a private window or block site data for our sites in your browser settings. The games still work; they just won't remember your progress.

The button doesn't touch game saves. Those on this device go when you clear this site's data in your browser. The ones in your account go when you delete them under My saves on your account page, or delete your account.

Changes to this policy

We'll change the date at the top when we update this page. If a change affects what we collect, we'll say so on the sites before it takes effect.