Who is responsible
Tip My Canoe is published by Shifted Music LLC. Contact our support team for game issues or privacy questions. Contact our feedback team for game ideas, suggestions and feedback.
Your game on your device
The game stores your preferences, challenge progress, best scores, earned canoe colours and privacy choices on your device. You do not create a separate Tip My Canoe account. Deleting the app may remove locally stored progress; it does not automatically delete information already received by service providers.
Optional usage statistics
Usage sharing is off until you choose to enable it. If enabled, TelemetryDeck receives usage events such as session starts, modes played, active play time, challenge results, retries and rematches. We use these statistics to understand which parts of the game people use and to improve the game.
TelemetryDeck also receives a salted, hashed device identifier and app/device metadata, which may include app and OS versions, device type, locale, time zone, screen/orientation information and accessibility settings. The app does not attach your name, email, Game Center player identity, contacts or raw aiming traces to these events.
Optional crash and performance reports
Crash reporting is off until you enable it. If enabled, Sentry receives crash, session and performance diagnostics, including technical app/device information, stack traces and a generated installation identifier. These reports help us find failures and improve reliability.
The game disables Sentry's screenshot and view-hierarchy attachments and its network tracking/breadcrumb features, and removes user, request and extra fields from error events. It does not send screen recordings, microphone recordings or your raw aiming movements through this reporting flow.
Change your choices
Open Settings in the game to change Share usage statistics and Share crash reports independently. These choices do not change gameplay or rewards.
Turning sharing off stops future collection through that service after the change is applied. A final active-play total or previously queued reports may still be transmitted while the service shuts down. Turning a switch off does not erase information already received by a provider.
Playing with another person
Play Nearby uses local-network discovery and an encrypted connection between the two devices. The devices exchange information needed to pair, keep the same game state, resolve shots and finish or restart a match. Local Network permission is needed for that route.
Play Online uses Apple's Game Center for authentication, friend invitations and real-time match communication. Apple processes information under its own privacy terms. The game does not send your Game Center identity to its optional analytics or crash-reporting events.
The website and support
The website uses Vercel hosting and a Cloudflare-managed domain. Hosting and security providers may process technical requests, such as IP addresses, page paths, timestamps and browser information, to deliver and protect the site.
The website does not include visitor analytics, advertising or embedded social feeds. A motion preference is stored locally in your browser. When you use our contact form, we receive your name, reply email, message and chosen topic so we can respond. Cloudflare Turnstile checks for automated abuse. Upstash stores the message and spam-check results for up to 30 days, including a pseudonymous identifier used to limit repeated submissions. Resend delivers messages to our support or feedback inbox. We do not send an automatic email to the address entered in the form, add you to a mailing list or use your message for advertising. Our email service may retain the resulting support conversation separately. Please do not include passwords, pairing secrets or sensitive personal information.
Cloudflare’s Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/.
Retention and deletion
Local preferences and progress stay on the device until removed through available device/app controls. TelemetryDeck's current documentation says received signals do not have scheduled automatic deletion from cold storage. Query access periods do not mean the underlying information has been erased.
The current Sentry plan retains error events for 90 days and performance spans for 30 days. Retention differs by diagnostic data type and provider plan. Website runtime logs follow Vercel's plan-specific retention; hosting and security providers may keep other operational records under their own policies. These periods do not promise deletion of all provider records or backups.
Contact-form records in Upstash expire after 30 days. The resulting email conversation is separate and may be kept while needed to respond, follow up, protect the service or meet legal obligations. For a privacy question or deletion request, use our contact form or the support address listed in the app. We review requests and remove information where applicable. Some processed statistics or reports may not be identifiable from an email address alone.
Audience and future changes
Tip My Canoe is intended for a general audience and is not specifically directed to children under 13. If you believe a child has supplied personal information through our support channels, contact us so we can review and remove it where applicable.
The first public release is free, without ads or in-app purchases. New purchases, services or changes to data handling will require an updated notice where appropriate.