Privacy policy

Last updated: 3 November 2026

Tofubi is a free games site, run from New Zealand. You can play without an account. This page explains, in plain words, what we collect when you play, what we don't, and who else is involved.

What we don't collect

You don't need an account to play. We never ask for a password, your real name or your date of birth.
We don't sell your information, and we don't use our own cookies to follow you around the internet.

What we do collect

Server logs. Like every website, the services that run Tofubi see your IP address and what kind of browser you use when your browser asks for a page. They use this to deliver the page and to block attacks.
Things saved on your device. Your recently played list, game progress and how long you've played each game are saved in your browser on your own device. Clearing your browser data removes them.
How many people play. To count players without knowing who they are, your browser remembers the day you first visited and the last day you played, and how long you've played today. It tells us when you come back on a new day, along with those dates, how many seconds you played each game, which games' pictures you saw and clicked, whether you're on a phone or a computer, which site linked you here the first time, and the country your connection comes from. There's no name, number or cookie in it that could pick you out, so we only ever see totals. While you're playing a game, your browser also says so every half minute, so we can see who's playing right now. That carries a random code made for your browser tab, which game you're playing and how long you've played since you opened the tab; our server adds your country and, if you're signed in, your account, so our team sees your display name or just "Guest". The code is forgotten when you close the tab, and our server forgets all of it two minutes after you stop playing.
Ratings. You can give a game a thumbs up or down without an account, once you've played it for a few minutes. We keep the vote with a random number saved in a cookie, so you can change your vote later. The cookie is only set when you vote and isn't used for anything else.

Accounts

An account is optional and lets you post times and scores to leaderboards, and comment on games. Accounts are for people aged 13 or over. If you make one, we keep:

Your email address and sign-in method, from Google, Discord or the email you type in. We use it to sign you in.
The display name you choose. It's public: anyone can see it on a leaderboard.
Your leaderboard results, with the time you posted them. These are public too. For some games we also keep a recording of the run's inputs, so we can check the result wasn't cheated.
Your comments, with your display name and when you posted them. They're public. We star out swear words before saving a comment. If a comment has a slur in it, we also keep what you typed, in a report only our moderators can see.
A sign-in cookie, which keeps you signed in for up to 30 days. With it we keep the IP address and browser you signed in from, to spot stolen sign-ins. It isn't used for anything else.

If you sign in with Google or Discord, they send us your email address, name and profile picture. We keep the email and name and throw the picture away. We never see your password. If you sign in with your email, we send you a one-time code.

You can delete your account at any time from the account button at the top of the page. That removes your email, name, results and comments from our systems straight away. Our backups are kept for 30 days and then deleted, so a copy can stay in a backup for up to 30 days after that. We only use backups to recover from a fault.

Tofubi is free because of ads. We use Google AdSense to show them, on our pages around the games and in breaks between rounds. Games never show ads of their own.

Third-party vendors, including Google, use cookies to serve ads based on your earlier visits to this website and to other websites.
Google's advertising cookies let it and its partners show you ads based on your visits to Tofubi and other sites on the internet. You can read how Google uses information from sites that use its services.
You can turn off personalised ads in Google's My Ad Center, or turn off many other companies' cookies for personalised ads at aboutads.info. You'll still see ads, but they won't be based on what you've done online.
If you're in the European Economic Area, the UK or Switzerland, we ask before any ad cookies are used, and you can change your choice at any time.

Kids' privacy

Lots of our players are young, so we keep things simple for them:

Anyone can play without an account, and playing never asks for personal information.
Accounts are only for people aged 13 or over. If we learn that someone younger has made one, we delete it.
Games made for kids, or for kids and grown-ups together, have no comments.
On those games, ads are never personalised: they're picked from the game page itself, not from what anyone has done online. We follow the US Children's Online Privacy Protection Act (COPPA) and New Zealand's Privacy Act 2020.

If you're a parent and think your child has given us personal information, email us and we'll delete it.

Who else handles your information

We use a few companies to run Tofubi. They only use your information to do that job for us:

Cloudflare delivers the site and the games, and stores our backups.
Hetzner runs the server that holds accounts, leaderboards, ratings and comments, in Germany.
Amazon Web Services sends our emails, such as sign-in codes.
Google and Discord sign you in, if you choose them.
Google shows ads, as explained above.

This means your information may be stored or handled outside the country you live in.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Email us and we'll reply within 20 working days. If you're not happy with our answer, you can complain to the New Zealand Privacy Commissioner, or to the privacy regulator where you live.

Changes

If we change this policy, we'll update the date at the top. If a change affects what we do with your information, we'll also put a notice on the site before it applies.

Contact us

Questions about privacy? Email [email protected].