Privacy Policy · Marble Mania

Who we are

Marble Mania is operated by Tovuti LLC (“we”, “us”). We run this website and the Marble Mania accounts on TikTok, YouTube and Instagram where the race videos are posted. We are the data controller for the information described here. To contact us about privacy, message @marble.mania1 on Instagram.

Marble Mania is not affiliated with, sponsored by or endorsed by TikTok, YouTube, Instagram or Meta. Your use of those platforms is governed by their own terms and privacy policies; this policy covers only what we do.

What we collect

We hold the minimum a marble race needs.

The name you enter — the racer name you type on this site (often a social media handle, but it can be anything), or a name you commented on one of our videos that we added to the grid.
Your email address — only if you claim your marble. We use it to send you a sign-in link that proves the marble is yours. It is never shown publicly and never used for anything else.
Game data we create — points, the upgrades you buy with them, when you asked to race, race entries and results, draw entries (why you were on a grid), and the ledger that records every point earned or spent.
Session cookies — a signed cookie that remembers which name you entered and whether you proved you own it (via the link we email you). It contains no password. A separate cookie exists only for the site administrator.
Server logs — our hosting provider records standard request data (IP address, browser type, time, page) for security and reliability, retained for a short period under its own policy.

We do not collect passwords, phone numbers, payment details, precise location, contacts or social media account data, and we do not use advertising trackers or cross-site cookies. Comments you leave on our videos stay on that platform; if we add a commented name to a race we copy only the name.

Why we use it

To run the race — put your name on a marble, draw the grid, simulate the race, publish the result and the video. (Performance of our terms with you / our legitimate interest in running the game.)
To award and spend points — races pay placement rewards and claiming pays a welcome bonus; you spend points on upgrades. The ledger exists so balances can be audited and errors fixed.
To prove a marble is yours — the sign-in link we email you is the only way to spend points or delete your data, so nobody else can do either to your marble.
To keep the game fair and secure — spotting duplicate or automated entries, abuse, and bugs.
To meet legal obligations and respond to lawful requests.

We do not use your data for advertising, profiling for marketing, newsletters, or anything unrelated to the game.

Who it is shared with

Publicly, by design — your racer name, its initials, grid slot, finishing position and time appear in race videos posted to TikTok, YouTube and Instagram and on this site’s results pages and leaderboard. That is the game. Your email is never public.
Service providers who process data on our behalf under contract: Vercel (hosting and logs), Turso (database) and Resend (sending the sign-in email). They may store data in the United States.
Legal — if required by law, or to protect the rights and safety of users or the public.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We do not respond to browser “Do Not Track” signals because we do not track you across sites.

How long we keep it

Game data (profile, email, points, ledger, race results, draws) for as long as your marble exists — until you delete it.
Session cookies for up to 90 days (12 hours for the administrator cookie). Sign-in links expire after 14 days.
Hosting and email-delivery logs for the short period those providers retain them.

Race videos already published are not re-edited when data is deleted; see Data deletion for what is and isn’t removed.

Your rights

Wherever you are, you can ask us to delete everything we hold about your marble, to tell you what we hold, or to correct it. If you are in the EU, UK or a jurisdiction with similar law (GDPR), you also have the rights to restrict or object to processing and to data portability, and to complain to your supervisory authority. If you are a California resident (CCPA/CPRA), you have the rights to know, delete and correct, and to opt out of sale or sharing — we do none — and we will not discriminate against you for exercising them.

Deletion is self-serve from your Garage once you have claimed your marble, or by request — instructions here. For any other request, message @marble.mania1 on Instagram. We answer within 30 days. We verify requests by asking you to write from the email address attached to the marble, or to use a sign-in link sent to it.

Children

Marble Mania is not for anyone under 13. We do not knowingly collect data from children under 13; if you believe we have, message @marble.mania1 on Instagram and we will delete it.

International transfers

We operate from the United States and our providers store data there. If you use Marble Mania from elsewhere, your data is transferred to the US; where required, our providers rely on standard contractual clauses or equivalent safeguards.

Security

Connections are encrypted (HTTPS), session cookies and sign-in links are signed so they can’t be forged and expire, and only the operator has access to the database. No system is perfectly secure; we will tell you if a breach affects you where the law requires.

Changes

When this policy changes we update the effective date above and, for material changes, say so on the site. We review it at least once a year.