Privacy & saving

Updated 20 September 2026 · account notice 2026-09-13-public1

You can play as a guest without an account or saved device progress. Optional website analytics starts off for everyone; adults may choose it without signing in. Personal Wobble Golf cloud saving is available to adults aged 18 and above. Children’s accounts and real parental-consent collection are not open. Optional gameplay analytics is available separately to consenting adult cloud players. There are no advertising tools, payments, player chat or public profiles in this release.

Who is responsible

Wobble Arcade is personally operated by Jasdeep Singh Manku, an individual based in India. For support, privacy requests or complaints, email jasdeep@gprm.in.

Guest play: no saved device progress

Guest scores, qualification and sound, music and motion choices exist only in the open page’s memory. They reset when you refresh or close the game. We do not write guest saved-game records to local storage, session storage, cookies or a server. Without optional website analytics, guest play makes no requests to Google or Supabase. Consenting adults can separately allow website and game-usage counts, as explained below; that does not save or restore their guest progress. There is no device-saving option or saving-choice popup.

On a visit to this updated site, we remove the old Wobble device score, preference and saving-choice keys that this browser lets us access. We do not restore or upload their values. Data in other browsers or on other domains is outside this page’s access. Cloud account records are separate and are not deleted by this cleanup.

Website delivery still involves connection and security information, described below. Guest play is not a promise that hosting providers receive no network data.

Wobble Haul

Guests play with coins, upgrades, designs and settings in the open page’s memory only. Leaving, refreshing or closing the game resets guest progress. We do not upload guest progress or import it into an account.

Adults can use the same Google account as Wobble Golf and separately enable Haul saving in Cloud saves. Choose Play Haul with cloud saving after enabling it. Signing in alone does not activate saving, and ordinary game links still open guest play.

With that choice, Supabase stores your account identifier, Haul consent version and time, earned coin balance, upgrade levels, owned and equipped designs, delivery totals and synchronization revision. Run receipts store random run IDs, route number, cumulative collected coins, delivery status and start time. Transaction receipts record random operation IDs, the relevant game action and its submission time; successful delivery submissions also include bottle count and elapsed run time. These receipts prevent duplicate credits and purchases across retries or devices. They are game-save records, not the optional analytics program.

Collected coins are uploaded during play, even for runs that later fail. The delivery bonus is added only on success. The current vehicle position, loose-bottle motion and remaining fuel/nitro are not saved for resuming a run. Sound and motion preferences remain in page memory. A failed upload remains pending in the open page; keep it open and use Retry save. Closing before synchronization can lose unsent progress.

Haul saves and their receipts are kept while you retain the save. Export my data includes them. Delete cloud progress or Withdraw saving permission removes both Golf and Haul progress and Haul receipts from the active database; account deletion also removes them. Provider logs and backups follow the retention disclosures below. Coins have no real-money value, and we sell no coins.

The Haul play page does not load an optional analytics collector. An opted-in homepage Play click does not measure Haul deliveries. Hosting connection/security processing and normal browser file caching still apply. Cached game files do not contain your saved progress.

Optional adult accounts

Personal accounts are open to adults, without an invitation. Before requesting sign-in information, the page asks your age group. An under-18 choice leads to guest play and makes no request to our account provider. We do not ask for a date of birth. The choice is a self-declaration, not verified age or parental permission.

If you choose the adult route, you enter your Google email and accept the account terms and notice before Google opens. We use that email to match a short-lived signup declaration to the Google identity you subsequently authenticate. Our pending-signup table stores a one-way email hash and timing information, not the raw email. That hash is still treated as personal data. The declaration expires after 15 minutes, is consumed when a new account is created, and expired entries are scheduled for deletion every 10 minutes. Provider request and security logs are separate.

Google and Supabase handle sign-in. They process your Google identifier and email address, and may provide or store your name and profile image. Wobble Arcade requests only identity, email and basic profile permissions, not contacts, files, calendars, precise location or advertising permissions. We do not duplicate your Google profile in the game-progress table.

Signing in alone does not enable score saving. We record your adult declaration time and notice version for account eligibility. The account screen asks separately whether to save your personal game results. We store your account identifier, saving-permission state, notice version and decision time. For Golf, when saving is enabled, we store your best completed round, course version and synchronization information. Qualification is derived from the score. Sound, music and motion preferences last only while the current page is open; this interface does not save them to your account.

To save a round, sign in, enable personal cloud saving, and choose Play with cloud saving on the account page. Ordinary game links open guest play even if you previously signed in. We keep the better score when signed-in devices submit different completed results. Guest results are not imported into an account. An unfinished hole is not uploaded or restored later.

Optional account gameplay analytics

Analytics starts off. Signing in or enabling cloud saving does not turn it on. In Cloud saves, eligible adult players can separately choose “Allow account analytics” and can withdraw just as easily using “Turn off & delete account analytics”. Refusing analytics does not affect playing or cloud saving.

With that permission, future cloud-play pages send game opens, round starts, shots, water penalties, retries, hole completions and completed-round scores. We combine these into daily counts linked to your account identifier, event type and hole number. This is account-linked personal data, not anonymous data. We record your analytics choice, notice version and decision time. This account-linked collector does not collect guest activity, full browsing histories, referral URLs, device fingerprints or advertising identifiers. The separate website collector below can measure consenting adult guest visits. Connection/security logs described below are separate.

Jasdeep Singh Manku uses private Supabase reports to understand participation and course difficulty. Analytics relies on your optional consent. Counts cover only consenting adult cloud players, not all website visitors. They begin with this release; earlier visits cannot be reconstructed.

Analytics uses a rolling 90-day UTC reporting window. Data outside that window is removed at the next scheduled daily cleanup. Turning analytics off immediately blocks new accepted events and deletes your active analytics history. Deleting cloud progress, withdrawing saving permission or deleting your account also removes that history and disables collection. An old open game cannot reuse an earlier permission after you switch analytics on again; open a new game for the new choice. You can export your own analytics with your account data. Provider logs and backups may follow separate retention schedules.

Optional website analytics, including guests

Website analytics is separate from sign-in, cloud saving and account gameplay analytics. Jasdeep Singh Manku uses it to understand traffic, homepage Play click-through, engagement and technical reliability. It starts off. Adults can select their age group and then choose Allow website analytics; Keep off is available without signing in or losing any game feature. Under-18 choices and browser Global Privacy Control / Do Not Track signals keep this collection off. An age choice is self-declared, not verified age or parental consent.

With permission, we use a random browser capability and visit/page identifiers to count measured browsers, visits and page views. We store fixed page names, selected Play/Cloud saves/Guide click flags, visible-time totals, game-start/putt/hole/round counts, coarse source/screen-size/browser-family/load-speed categories, script-error counts and classic-view usage. The collector does not send full URLs, URL queries, referral URLs, form contents, names, email addresses, error text, precise location, screen recordings or keystroke contents. We do not join this identifier to Google accounts. These browser-distinguishable records are pseudonymous personal data, not anonymous data.

Supabase processes these records for us. Consent is the basis for this optional collection. The browser keeps the choice and, only after consent, a random capability for up to 90 days. A tab visit identifier restarts after 30 minutes without visible activity. Page records use a 90-day window with daily cleanup. Withdrawing deletes active page records; a minimal revoked hash remains until the original expiry to reject late requests. Hosting/provider logs and backups are separate.

Use Analytics choices in the footer or the Cookies & storage page to export this browser’s records, turn collection off, or request deletion. Collection stops immediately in this page; if a deletion request fails, its capability is retained only for retry and a pending status is shown. A change is shared with other open tabs when browser storage is available. Browser privacy signals do not automatically change the separate account gameplay choice; use Cloud saves for that.

Reports describe consenting browsers, not verified people or every website visitor. Refusals, under-18s, blocked requests, offline activity and events before consent are absent. Visible time excludes hidden/unfocused intervals and is an estimate, not exact attention. Homepage click-through measures measured homepage views with a Play action divided by measured homepage views; it is not Google search CTR. No earlier visitor history can be reconstructed.

Before a child or another person uses a browser where an adult allowed analytics, turn it off. Do not use an adult’s choice as permission to track a child. Children’s analytics is not offered. Clearing browser storage, using another browser or deleting an account does not identify all unlinked browser records; use each browser’s controls before clearing storage where possible. The storage notice lists exact keys and expiry/deletion limits.

Children and saving permission

Cloud accounts are for an adult’s own play. Children can play as guests without saved device progress. Please do not create an adult account to upload a child’s results or share a signed-in account with a child. Child profiles, parental verification and child-device pairing are not offered in this release. See For parents.

Withdrawing saving permission deletes active Golf and Haul saves and blocks further uploads. You can make a new saving choice later. Guest play stays available without saved progress.

Cookies and browser storage

Our application code does not set cookies or advertising identifiers. Guest play uses no persistent game storage. Optional website analytics uses the separate consent and visit entries described in our Cookies & storage notice. A requested account sign-in uses session storage for authentication, not for device game saves. Hosting/security services and Google’s sign-in pages may use their own storage under their applicable terms.

The account session uses the Wobble cloud-session storage key. An unsynced round is queued only in the open page’s memory; closing it can lose the pending upload. Guest play sends no analytics unless an adult separately enables website analytics. For an adult who chooses analytics, a small queue exists only in the open cloud-play page and is discarded on failure or session end; it is never saved on the device.

Who processes information

• Sites hosting and Cloudflare delivery infrastructure: deliver the website and handle connection/security information such as IP address, requested URL, time and browser details.
• Supabase: provides account authentication, the progress and optional account/website analytics databases, and the account-deletion service. The project database is in Mumbai, India. This does not mean every support, edge or subprocessor operation stays in India.
• Google: provides the Google sign-in you choose to use.
• Google Workspace: hosts our support mailbox, jasdeep@gprm.in. If you contact us, sender details, messages and attachments are processed to handle the request. Workspace administrators and configured retention or backup arrangements may affect access and retained copies.

These services may process information in other countries. Their applicable contracts and transfer safeguards govern provider processing. We do not sell account data or use it for targeted advertising. This release serves its fonts, artwork and audio itself and has no embedded social, video or map widgets.

Why we use information

We use sign-in information to provide your requested account, permission records to apply your saving choices, and scores to restore your progress. We use support messages to answer requests and connection/security information to deliver and protect the service. Where applicable privacy law requires a lawful basis, requested account services rely on the applicable service relationship, optional saving on your recorded choice where consent is required, and necessary security/administration on the applicable legitimate interest or legal obligation. We use separately permitted website statistics to improve the arcade. Neither analytics choice is bundled with playing or cloud saving.

Retention and deletion

Active account and permission records remain while your account is open. Deleting the account removes the active account, its adult-declaration record, permission records, cloud progress and account analytics history; it also revokes refresh sessions. Existing access tokens may take time to expire, but a deleted account cannot create a new progress record.

There is no invitation expiry. Your account exists to let you return to your saved game; we retain the active account, admission and permission records for that service until you delete the account or we close it. Scores remain until you delete them, withdraw saving permission or delete the account. We do not use this retention to build an advertising history. Temporary signup declarations have the short expiry described above.

We keep support and request information for handling the issue and any necessary follow-up or applicable legal obligation, and review it for deletion when no longer needed. Provider security logs, mailbox retention and backups can have separate retention schedules. Account deletion does not promise immediate removal from every provider log or retained copy. We have not configured an independent game-data backup service and do not guarantee recovery of deleted scores.

Your controls and requests

For website analytics, use Analytics choices to export or delete this browser’s records separately. In Cloud saves, you can export progress, permission and analytics information, withdraw saving permission, delete cloud progress, sign out of this tab or delete your account. Signing out keeps the cloud record; deleting cloud progress stops automatic saving until you enable it again. Google-account settings are managed with Google.

Contact Jasdeep Singh Manku using the email or address above to request access, correction, deletion, withdrawal or help with a privacy complaint. Include only the information needed to identify the request. We may verify your relationship to the data proportionately; we do not ask you to email passwords or unnecessary identification documents. Guest rounds have no saved copy for us to retrieve. Applicable rights and regulator-complaint routes depend on the law that applies to you.

Age policy and future changes

The games are intended for ages 8 and above; cloud accounts are for adults’ own use. If we learn that an account belongs to a child, we will stop its collection and arrange deletion. A parent can report this using the contact details above without sending passwords or identity documents.

We will date material changes to this notice and obtain any fresh permission required before enabling a new optional purpose. We will provide an appropriate verification process and parent controls before offering child cloud accounts.

Provider information: Supabase privacy · Supabase processing terms · Google privacy · Google Workspace processing terms · Cloudflare privacy.