Privacy

Last changed on 12 November 2026.

The short version

This site has no cookies, no tracking, no ads and no sign-ups. Everything on it comes from this site itself, the fonts too, so while you're here your browser doesn't talk to Google or any other company.

Who runs it

Tumbalo and this site are made by one person, a solo designer in Croatia. You can write to me at hello (at) playtumbalo.com.

When you visit

The site is hosted by Cloudflare. To send you a page and to keep attacks off the site, Cloudflare's servers see what any web server sees: your IP address, your browser, and which page you asked for. Cloudflare keeps that for a short time, under its own privacy policy.

I only see totals, like how many visits there were in a day and from which countries. The one exception is a request Cloudflare blocks as an attack, which its security log shows me with its IP address.

The legal ground for this is a legitimate interest in running the site safely (Article 6(1)(f) of the GDPR).

When you write to me

Mail to the address above is passed on by Cloudflare to my own inbox. I use your address and your message only to answer you. I don't add you to a mailing list and I don't give them to anyone. Ask, and I'll delete them.

Your rights

You can ask me what I have about you, and have it corrected or deleted. If you think I've handled your data wrongly, you can complain to the Croatian data protection authority, AZOP, or to the one in your own country.