Who we are

Tanoshiibox (tanoshiibox.com) is a free browser-games site operated by Amiwill Ltd, a company registered in Scotland, United Kingdom. This Privacy Policy explains what happens to any information connected with your visit. It is written to comply with the UK GDPR, the EU GDPR, the Privacy and Electronic Communications Regulations (PECR), the US Children's Online Privacy Protection Act (COPPA), and the California Consumer Privacy Act (CCPA).

You can reach us at privacy@tanoshiibox.com.

The short version

No accounts. There is nothing to sign up for. We never ask for your name, email address, phone number, or anything like it.
Your game progress stays on your device. Things like scores, unlocked achievements, and preferences are saved in your browser's local storage. They never leave your computer or phone.
Ads are contextual, not behavioural. We use Google AdSense configured in "non-personalised ads" / "contextual" mode. Ads are chosen based on the content of the page and basic signals like country, not based on tracking who you are or where you have been online.
No selling of data. We do not sell information, and we have no personal information to sell even if we wanted to.
We assume our visitors include children under 13. Every choice we have made about tracking, ads, and data is driven by that assumption.

What we collect

1. Standard web-server logs

Like every web server, ours keeps short-term technical logs. These may include:

The IP address of the device making the request
The browser's user-agent string (e.g. "Chrome on Android")
The page requested and the referring page (if any)
The date and time of the request

We keep these logs for a maximum of 30 days, after which they are deleted. We use them only for security (blocking abuse) and troubleshooting.

2. Local storage on your device

Each game uses your browser's local storage to remember game state. Examples:

XOS: score tally, selected language, selected cat/dog image
Balloon Pals Parade: total balloons caught, unlocked achievements
Rainbow Garden: experience points, discovered plants, garden layout

This data stays on your device. We cannot read it from our servers. You can clear it at any time from your browser's settings.

3. Advertising (Google AdSense)

We use Google AdSense to show adverts. AdSense is configured to serve non-personalised, contextual ads only. This means:

Adverts are chosen by the content of the page (for example, "puzzle games" or "animals") and broad signals such as approximate country
Adverts are not chosen based on your past browsing, interests, or anything Google has learned about you personally
No advertising identifiers are used to build a profile of you

Google may still set a cookie or similar identifier to enforce frequency caps (so you do not see the same advert ten times) and to detect fraud. For visitors in the EEA, UK, and Switzerland, Google's consent management platform will display a message explaining this before ads are shown. You can manage or decline at any time via the "Manage options" link in that message.

Google's own privacy information is at policies.google.com/privacy and its advertising terms at policies.google.com/technologies/ads.

4. Cloudflare Web Analytics

We use Cloudflare Web Analytics to understand how the site is used. This service is cookieless — it sets no cookies and uses no fingerprinting. It collects aggregate, non-personal data only: page views, approximate visitor counts, country (derived from IP, not stored), referring URL, browser and device type, and Core Web Vitals performance metrics. No personal information is retained. Cloudflare’s privacy information is at cloudflare.com/privacypolicy.

What we do NOT do

We do not use Google Analytics, Facebook Pixel, TikTok Pixel, or any similar behavioural-analytics or tracking service. We use Cloudflare Web Analytics, which is cookieless and collects no personal data (see above).
We do not run third-party behavioural-tracking scripts. The Cloudflare Web Analytics beacon described above is cookieless and non-tracking.
We do not use fingerprinting.
We do not sell, rent, or trade any information.
We do not ask children to provide personal information.

Children's privacy (COPPA and GDPR-K)

Our games are designed for families and children aged 3 to 12. We comply with COPPA (United States) and the children-specific provisions of the UK and EU GDPR ("GDPR-K"):

We do not knowingly collect personal information from any visitor, child or adult.
We do not enable behavioural advertising. All ads are contextual.
We do not ask for age, birthdate, photos, voice, or location.
Parents and guardians can contact us at privacy@tanoshiibox.com with any question, concern, or request related to a child's use of the site.

If you believe a child has provided personal information to us in error (for example, typed their name into a feedback channel we host in the future), please contact us and we will delete it.

Your rights

Depending on where you live, you have some or all of the following rights in relation to personal information we hold about you:

Right to know what we hold (UK/EU GDPR, CCPA)
Right to a copy of your data (UK/EU GDPR)
Right to correction (UK/EU GDPR, CCPA)
Right to erasure / deletion (UK/EU GDPR, CCPA)
Right to object to processing (UK/EU GDPR)
Right to restrict processing (UK/EU GDPR)
Right to opt out of sale or sharing of personal information (CCPA — moot here since we do neither)
Right to non-discrimination for exercising these rights (CCPA)

In practice, because we do not store personal information, most requests resolve to "confirmed, nothing to hand over". You can still exercise your rights by emailing privacy@tanoshiibox.com and we will respond within the time limits your local law requires (30 calendar days under UK/EU GDPR, 45 days under CCPA).

You also have the right to complain to a data-protection authority. In the UK the regulator is the Information Commissioner's Office (ico.org.uk).

Cookies and similar technologies

Purpose	Set by	Essential?
Local storage of game progress	First-party (this site)	Yes — it is how the game works
AdSense advert frequency-capping / fraud-prevention	Google	Served as part of the advertising you see
Cloudflare Web Analytics beacon	Cloudflare	No cookies set — cookieless beacon only

We do not use any other cookies. We do not set tracking pixels. Visitors in the EEA, UK, and Switzerland will see a consent message from Google's CMP regarding AdSense's frequency-capping and fraud-prevention cookies. All other visitors see no cookie banner because no non-essential cookies are set by us.

International transfers

Our static site assets are served from content delivery networks, which may route requests through servers in multiple countries. Google AdSense processes advertising requests globally. Where personal data is transferred outside the UK/EEA, the transfer is governed by the UK International Data Transfer Agreement or EU Standard Contractual Clauses, depending on the destination.

Changes to this policy

This is version 1.2, effective 20 April 2026. If we change it, the version number and effective date above will change, and the previous version will be retained in our git history for transparency. Material changes will be flagged in a notice on the home page for at least 30 days.

Contact

Email: privacy@tanoshiibox.com

We welcome any questions from parents, guardians, educators, or players.