Tessimo Privacy Policy

Effective date: 4 October 2026
Last updated: 23 October 2026

This policy explains what information Tessimo collects, why, who receives it, how long it is kept, and the choices and rights you have.

The short version

• You can play Tessimo without an account. Signing in with Apple or Google is optional; it lets your progress follow you to a new phone.
• When you first open Tessimo, it asks for your year of birth. We keep only whether you are 13 or older — never the year — and only on your device. Players under 13 play offline: nothing is sent to our servers. They may see ads, which are requested as child-directed and are never personalised (see section 10).
• We don't ask for your email address, real name, phone number, contacts, photos or precise location, and we don't keep the email address that Apple or Google may include when you sign in.
• Your display name, scores, rank and rating can be seen by other players.
• If you are 13 or older, the app sends crash and error reports to our crash-monitoring service in the EU, without your name, account or advertising ID (section 2.5). Players under 13 send none.
• Tessimo is free and paid for by ads. Players under 13 receive child-directed, non-personalised ads as described in section 10. On Android, the current version shows non-personalised ads. On iPhone and iPad, players aged 13 or older can choose whether to allow tailored ads. Tailored ads require your agreement in Tessimo and permission through Apple's tracking prompt. Declining either does not prevent you from playing.
• For players aged 13 or older, Tessimo uses Google's consent tool before the ad service starts. In the EEA, the UK and Switzerland, until you have given the consent that the law requires, Tessimo tells the ad service not to read your advertising identifier (section 2.6).
• We don't sell your personal information for money. On iPhone and iPad, if you turn on tailored ads and allow Apple's tracking request, ad networks receive your advertising identifier and ad interactions for personalised ads. Some US state laws call this "sharing" or "selling", and you can opt out at any time (section 4).
• You can delete your account in the app. For anything else, write to contact@abizyanastudios.com.

1. Who we are

Tessimo is made and run by Matan Gambash, an individual based in Israel who publishes as Abizyana Studios ("we", "us", "our"). We decide how the personal information described here is used, which makes us its "controller" under data-protection law.

Address: Brener St 3, Bat Yam, Israel
Phone: +972 54-447-2260
Email: contact@abizyanastudios.com

The person responsible for privacy at Tessimo (including as "person in charge of the protection of personal information" under Quebec law, privacy officer under Korean law, and the business operator's representative under Japanese law) is Matan Gambash, at the contact details above.

This policy covers the Tessimo apps for iPhone, iPad and Android, the Tessimo servers they connect to, and the Tessimo pages at tessimo.abizyanastudios.com (together, "Tessimo").

2. Information we collect

2.1 On your device

The app keeps your progress, streaks, statistics, match history, settings (such as sound, haptics, colour theme and language), your display name if you set one, your sign-in session, and the answer to the age question (whether you are 13 or older — not your year of birth) on your device. If you play as a guest and never use an online feature, this information stays on your device. Deleting the app deletes it, and we can't recover it for you.

2.2 When you use an online feature

The online features are the Daily leaderboard, multiplayer matches (including ranked matches) and syncing your account between devices. They are for players aged 13 and over (see section 10). When you use one, the app registers a random player ID with our server, together with a session credential that lets only your device act for that player ID. We store the credential only in scrambled (hashed) form.

We then keep:

• Game results: your Daily scores, with the day, the lines you cleared and the version of the rules; the moves of each Daily game, so the server can check the score is genuine; your finished matches, with both players' IDs, scores, match length, start and end times, the room code, the rules and random seed used, whether each score was verified and, if a player left early, who left; your ranked rating; and your best Endless score.
• Profile and preferences: your display name if you set one, your colour theme and your app language, so they follow you to another device.

2.3 If you sign in with Apple or Google

Signing in is optional. When you do, Apple or Google sends us a signed token that proves who you are. We check it and keep:

• which provider you used (Apple or Google); and
• the account identifier that provider gives to Tessimo. It is specific to Tessimo: it isn't your Apple ID, your Google account name or your email address.

The token can also contain your email address. We don't store it. To stop a stolen token being reused, we keep a fingerprint of each token (its identifier, or a one-way hash of it) for about 24 hours. We never see your Apple or Google password.

2.4 Information other players can see

Other players can see your display name, your Daily scores and leaderboard position, and your rank and rating. In a live match, your opponent sees your moves and score as you play. You don't have to set a display name; if you do, don't put personal information in it.

2.5 Technical and security information

• IP address. Our server sees the IP address of each request and uses it to limit request rates and block abuse. We don't store it with your account. When the app proves it is genuine (see the next point), we keep a keyed, one-way hash of the IP address for a few minutes.
• App integrity checks. To protect leaderboards and ranked play, Tessimo may ask Apple (App Attest) or Google (Play Integrity) to confirm that a request comes from a genuine copy of the app on a genuine device. Apple or Google processes information about your device and the app to answer. We keep only what we need to check the answer: short-lived, single-use challenge records, and, on Apple devices, an identifier and public key for the app's key on your device, Apple's receipt for that key, and a counter of how often it has been used.
• Server logs. Our servers keep technical logs of requests, such as the time, the address requested, the result and, where needed to investigate errors or abuse, the IP address the request came from. We use them to run the service, fix problems and investigate abuse, and we keep them for up to 30 days (section 5). When the server hits an error or is overloaded, it sends a technical error report to our crash-monitoring service (Sentry, EU). These reports contain no IP address, account or player identifier.
• Crash reports from your device settings. If you have chosen in your device settings to share diagnostics with app developers, Apple or Google may pass us crash reports. These don't identify you to us.
• Crash and error diagnostics from the app. If you are 13 or older, the app sends crash reports and error diagnostics directly to our crash-monitoring service (Sentry, hosted in the EU) so we can find and fix bugs. A report contains technical information: the kind of error and where in the code it happened, the app's version and build, your device model and operating system version, and whether the app was running normally. The crash-monitoring library also includes a random identifier that it generates for each installation of the app, so that sessions and crashes can be counted per installation. It is not your name, account, player identifier or advertising identifier. We do not send your name, account or player identifier, email address or advertising identifier, and we do not send what you played. When a crash report reaches our service it is set to discard user, location and device-identifier fields. A crash report may contain technical data from the app's memory at the moment of the crash, so we do not claim a report is anonymous before it reaches us. Players under 13 send no diagnostics. We keep these reports for 30 days. You can object to crash reporting at any time by writing to us (section 9); we will delete reports we can link to your installation and tell you how to stop them being sent.

2.6 Advertising

Tessimo is paid for by ads, shown through Unity LevelPlay, an advertising service run by Unity. LevelPlay runs an auction between ad networks; the networks currently taking part are Unity Ads and ironSource Ads. For players under 13, ads are requested differently; see section 10.

To show ads, measure them and prevent ad fraud, Unity and the ad networks collect information directly from your device, such as your IP address, device and operating-system type, app version and interactions with ads. On Android this may include your device's advertising ID and app set ID; on iPhone and iPad, access to the advertising identifier also requires Apple's tracking permission. Their use of this information is described in their own privacy policies (section 4).

On Android, the current version of Tessimo requests non-personalised ads and tells the networks that you have not agreed to personalised advertising and that your information must not be sold or shared.

On iPhone and iPad, if you are 13 or older, Tessimo asks whether you agree to tailored ads and separately requests Apple's tracking permission. Tailored ads are permitted only when you agree in Tessimo and Apple reports that tracking is authorised. If you decline either, Tessimo requests non-personalised ads and sends the ad service an opt-out from the sale or sharing of your information. You can change Tessimo's answer in Settings → TAILORED ADS, and Apple's tracking permission in iOS Settings.

Players aged 13 to 17 on iPhone and iPad. The app knows only whether you are 13 or older, so in the current version players aged 13 to 17 are offered the same tailored-ads choice as adults. Tailored ads are off until you turn them on yourself in Tessimo and also allow Apple's tracking request; if you do neither, you get non-personalised ads. If you are under 18, we recommend leaving TAILORED ADS off, and a parent or guardian can turn tracking off for every app in iOS Settings → Privacy & Security → Tracking, or through Screen Time. You or a parent can ask us at any time to confirm what applies to you.

For players aged 13 or older on both platforms, Tessimo uses Google's consent tool to check the applicable consent requirements before LevelPlay starts. In the EEA, the UK and Switzerland, the tool is meant to show a consent form. The form may not be shown yet in every version or region while our advertising account is being set up. Until you have given the consent that the law requires, or if device access is not permitted by the form, or the check fails or times out, Tessimo instructs the ad service not to read the advertising identifier. Even then, to show you a non-personalised ad the ad service still receives basic technical information from your device, such as your IP address, device type, operating system and app version. Where required, you can revisit the form in Settings → PRIVACY CHOICES; a changed choice is applied when Tessimo next starts. The check runs again on the next launch. Google's consent tool receives technical information, including IP-derived approximate location, app or device performance information and consent interactions, to provide this functionality, and stores your choices on your device.

Players under 13 do not contact Google's consent tool through Tessimo. Their ad requests follow section 10.

Rewarded ads. Some features let you watch an ad in exchange for a reward, such as continuing an Endless game. So that LevelPlay can confirm to our server that you finished the ad, the app gives LevelPlay your Tessimo player ID when it starts the ad service, if you have one. For each reward, our server keeps LevelPlay's event ID, your player ID, the reward, when it was granted and when you used it.

2.7 Fair play and moderation

To keep competition fair, our server automatically flags unusual play, for example reactions faster than a person could manage, or the same two players repeatedly meeting in ranked matches. A flag records the kind of pattern, the player, the match or other player involved, and a short measurement. A flag on its own changes no result, rating or leaderboard; a person reviews it.

If we act, for example by hiding a score, clearing a display name or restricting an account, we keep a record of what was done, when, by whom and why.

Display names are checked automatically against our name rules. A name that breaks them is refused, and a name that is later found to break them can be cleared.

2.8 When you contact us

If you email us, we receive your email address, your message and anything you attach, and we keep our replies.

2.9 What we don't collect

We don't collect your precise location, contacts, photos, or microphone or camera input, and we don't collect payment information: Tessimo has no purchases. We don't use third-party analytics services, and the current version of the app doesn't send us usage analytics. Our web pages don't use cookies.

3. How we use information, and our legal bases

Where data-protection law requires a legal basis (for example in the EU, the UK and Israel), we rely on the following:

For the collection of device information by the ad service built into Tessimo, we and Unity may be joint controllers. Unity is responsible for what it does with that information after it is collected; see Unity's privacy policy (section 4). You can contact either of us about it.

Where we rely on legitimate interests, we have weighed them against your interests and rights, and you can object (see section 9).

You don't have to give us any information to play offline, and no law requires you to give us any. The online features need a player ID and your game results, and signing in needs an Apple or Google account.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Scores are verified and ratings calculated automatically, but no action is taken against an account on the strength of a flag alone.

4. Who we share information with

We don't sell your personal information for money. Advertising networks collect device and advertising information directly from your device, as described in section 2.6.

On iPhone and iPad, if you turn on TAILORED ADS and allow Apple's tracking request, the ad networks in LevelPlay receive your device's advertising identifier and your ad interactions and may use them to show you personalised ads. Some US state laws treat this as "sharing" or "selling" personal information, or as "targeted advertising". You can opt out at any time by turning off TAILORED ADS in Tessimo's Settings or turning off tracking in iOS Settings. On Android, and whenever tailored ads are off, Tessimo sends the ad service an opt-out from the sale or sharing of your information.

• Other players, as described in section 2.4.
• Apple and Google receive information when you sign in, when the app checks that it is genuine, and when you download or update it through their stores. Google also receives the information needed to provide its consent check and form for players aged 13 or older on both platforms (section 2.6). See the Apple Privacy Policy and the Google Privacy Policy.
• Unity and the ad networks in LevelPlay (Unity Ads and ironSource Ads), as described in section 2.6. See the Unity Game Player and App User Privacy Policy.
• Sentry, our crash-monitoring service, which receives the crash and error diagnostics described in section 2.5 from players aged 13 or older, and the server's error reports. It stores them in its EU region and processes them only to provide that service to us. See the Sentry Privacy Policy.
• Hostinger, which hosts our server (in Frankfurt, Germany), our domain's name servers and our email. It processes information only to provide those services to us.
• Authorities and others, when necessary: if the law or a valid legal request requires it, or if it is needed to protect players, us or others, to investigate fraud or abuse, or to enforce our Terms of Service.
• A new owner of Tessimo, if Tessimo is sold or transferred. The new owner must honour this policy or tell you about any change.

5. How long we keep information

• Account, profile and game records: until you delete your account (see section 6).
• Session credential: it stops working after about 90 days without use. Signing out or deleting your account ends it immediately.
• Sign-in token fingerprints: about 24 hours.
• App integrity challenges: a few minutes. Daily totals of integrity checks, which identify nobody, are kept for 400 days.
• Fair-play flags and moderation records: until your account is deleted.
• Reward records: while your account exists. When it is deleted, we keep each reward's event ID and times without your player ID, so the same reward can't be granted twice.
• Server logs: up to 30 days.
• Crash and error diagnostics: 30 days.
• Backups: we back up our database every night, and each backup is deleted after about 15 days. Information you delete can remain in a backup until that backup is deleted.
• Emails with us: up to two years after your request is closed, unless we need them longer to deal with a legal claim.

6. Deleting your account

If you use Tessimo with an online account, you can delete it in the app: open ACCOUNT and choose DELETE ACCOUNT. Deletion is permanent. It removes your player record, display name, sign-in link, rating, preferences and Daily scores, the flags and moderation records about you, your pending integrity records, and your device's App Attest receipt.

A few things remain, without your player ID:

• matches you played stay in your opponents' history, with your player ID removed;
• reward records keep their event ID and times, so a reward can't be granted again; and
• your device's App Attest key stays blocked from being registered again.

Backups expire within about 15 days. Your local progress stays on your device until you delete the app.

If you can't use the app, or you want information deleted that isn't covered here, write to contact@abizyanastudios.com.

7. Security

All traffic between the app and our servers is encrypted (HTTPS). Session credentials are stored only in hashed form, sign-in tokens can be used only once, requests are rate-limited, and access to our server is limited to the people who run Tessimo. No system is perfectly secure. If a breach affects your information, we will notify you and the authorities where the law requires. We keep a written information-security procedure for the server and its data and review it at least once a year.

8. International transfers

We are based in Israel, and our server is in Germany. The European Commission and the United Kingdom recognise Israel as providing an adequate level of protection for personal data, so information sent from the EEA or the UK to us in Israel needs no further safeguard.

Apple, Google and Unity may process information in the United States and other countries. Our crash-monitoring service, Sentry, stores our reports in the EU; it is a company based in the United States and may process information there. When these providers transfer personal information from the EEA, the UK or Switzerland to a country without an adequacy decision, they rely on the safeguards the law provides, such as the EU–US Data Privacy Framework (and its UK and Swiss extensions) where they are certified under it, or the European Commission's Standard Contractual Clauses (with the UK Addendum for UK transfers), as described in their own privacy policies and data-processing terms. You can ask us for more information about these safeguards, or a copy of them, at contact@abizyanastudios.com.

The countries involved are Germany and other EU countries (our server and Sentry), Israel (us), and the United States (Apple, Google, Unity and Sentry). If you are in Japan, Korea or another country whose law asks us to name them: each of these countries has its own data-protection law, and the providers above apply the safeguards described here.

9. Your rights

Depending on where you live, including the EU, the UK, Israel, California and other US states, you may have the right to:

• find out whether we hold information about you, and get a copy of it;
• correct it;
• delete it;
• object to, or ask us to restrict, how we use it, including where we rely on legitimate interests;
• receive it in a portable format;
• withdraw any consent you have given;
• opt out of the sale or sharing of your information, or of targeted advertising;
• not be treated differently for using these rights; and
• appeal if we decline your request (see below); and
• complain to a data-protection authority: in the EU or UK, the authority where you live or work; in Israel, the Privacy Protection Authority; elsewhere, your local authority.

For iPhone and iPad ad choices, turn off TAILORED ADS in Tessimo's Settings, change Apple's tracking permission in iOS Settings, and use PRIVACY CHOICES when shown. You may also contact us to exercise the rights described here.

To use a right, write to contact@abizyanastudios.com. We may ask for details that show the information is yours before we act. We reply within the time your local law requires (for example within 10 days in Korea and 15 days in Brazil for confirming whether we process your information), and in any case within one month. Someone you authorise may make a request for you, with proof of that authority.

Appeals. If we decline your request, in whole or in part, you can appeal by replying to our decision with the word "Appeal". We will answer within 45 days (60 days in Colorado) and explain our reasons. If we deny your appeal, you can contact your state Attorney General or your local data-protection authority.

For California residents. In the past 12 months we have collected these categories of personal information: identifiers (player ID, display name, the account identifier from Apple or Google, IP address); internet or other electronic network activity (gameplay, requests to our servers); and inferences (your rank and rating). Ad networks collect advertising identifiers and ad interactions directly, as described in section 2.6. The only sensitive personal information we hold is your session credential, used solely to keep your account secure. We collect this information from you and your device, and from Apple or Google when you sign in, for the purposes in section 3, and we disclose it only to the recipients in section 4.

Sold or shared. We don't sell personal information for money. In the past 12 months, on iPhone and iPad, when a player turned on TAILORED ADS and allowed Apple's tracking request, these categories may have been "shared" for cross-context behavioural advertising, or treated as "sold":

• identifiers (the device's advertising identifier); and
• internet or other electronic network activity (interactions with ads),

with advertising networks (Unity Ads and ironSource Ads, through Unity LevelPlay). We never sell or share the personal information of players under 13. Players aged 13 to 15 are treated the same as adults in the current version: their information is shared only if they opt in themselves, by turning on TAILORED ADS and allowing Apple's tracking request; tailored ads are off by default. To opt out, turn off TAILORED ADS in Tessimo's Settings or turn off tracking in iOS Settings. On Android, and whenever tailored ads are off, Tessimo sends the advertising service a sale/share opt-out. Section 5 explains how long we keep first-party information.

10. Children

Tessimo is made for a mixed audience, including players under 13. We use the answer to the age question to give younger players the protections described in this section.

When you first open Tessimo, it asks for your year of birth. We don't keep the year: we keep only whether you are 13 or older, and only on your device.

If you are under 13, Tessimo's online features are off. There is no account and no online feature — no leaderboard, no multiplayer, no public display name — and nothing is sent to our servers. The app sends no crash or error diagnostics for them either (section 2.5).

You may still see ads; they are how Tessimo stays free. For a player under 13, the app marks the ad service as child-directed under the US Children's Online Privacy Protection Act (COPPA) before it starts:

• ads are chosen from context only — never personalised, and never based on a profile of you;
• your device's advertising identifier is not read, and the ad service is never given a Tessimo player ID;
• on Android, only ad networks that have self-certified under Google Play's Families programme are started; and
• no rewarded ads are offered.

Tessimo does not send players under 13 to Google's consent service or ask them for Apple's tracking permission. The ad service receives its child-directed and device-identifier opt-out settings before it starts.

To show an ad, the ad networks still receive technical information from your device, such as your IP address, device and operating-system type and app version. Under their child-directed rules they may use it only to show a contextual ad, to limit how often an ad is shown and to prevent fraud.

Ads come from third parties. We use the ad networks' settings to keep them suitable for younger players, but we can't review every ad in advance. If you see an ad that isn't suitable, write to us and we will block it.

We don't collect personal information from players under 13 ourselves. If you believe a child under 13 has used Tessimo's online features or sent us information, write to us and we will delete it.

If you are under the age of majority where you live, ask a parent or guardian before you sign in or use the online features.

11. Changes to this policy

We will post any update on this page and change the "Last updated" date. If a change materially affects how we use your information, we will tell you in the app or by another appropriate means before it takes effect.

12. Contact

Matan Gambash, trading as Abizyana Studios
Brener St 3, Bat Yam, Israel
Phone: +972 54-447-2260
contact@abizyanastudios.com