Privacy policy

Last updated October 22, 2026

Galactic Acid Studios makes Thumb & Tomb. This page says what the game and this website collect, why, and how to stop it. The short version: the game can send play statistics so we can tune it and fix bugs, they don't say who you are, and you can turn them off.

Thumb & Tomb: play statistics

The game has a setting, OPTIONS > SHARE STATS. While it's on, the game sends the following to our own server:

• A random ID made on your device the first time the game runs. It identifies the copy of the game.
• The game's version and build, and the platform (Windows, Linux, iPhone and iPad, or the web).
• A summary of each finished run: your class, how far you got, what ended it, your level, kills, gold, weapons and boons, and how the fights went (hits dealt and taken, parries, dodges and so on).
• What happened on each floor: each fight (the monster, how long it took, the damage each way, parries and dodges), the choices you were offered and took at level-ups and camps, what you picked up, bought, sold or forged, potions drunk, and your time, health, level and gold.
• Health reports: when the game starts (with your screen size and whether the last session closed normally), crashes (an error code and where in the game it happened), failed internal checks, spots where the game stopped responding, and frame-rate statistics with your display settings.

We use this only to balance the game and find bugs. We don't sell it, share it, or use it for advertising. Our server keeps no IP addresses with it, and its request logs, which also leave IP addresses out, are deleted after seven days.

During the early alpha (until October 22, 2026), the game also sent the Steam account signed in on the computer, the computer's name and the user name on it, and our server kept the IP address each report came from. We used them only to tell testers apart. They're gone: the game no longer sends them, our server throws them away if an old copy does, and on October 22, 2026 we deleted the ones we had kept.

Turning it off: set OPTIONS > SHARE STATS to OFF. Nothing more is sent, and anything waiting to be sent is deleted from your device. During the alpha the setting starts on. In the released game it starts off, and the game asks first.

The game also keeps a log of your runs on your own device (runs.jsonl, next to your saves). It stays there and is only sent as described above.

This website

This site uses no cookies, no analytics and no third-party scripts. Like most web servers, ours keeps an access log (the page asked for, the time, your IP address and browser) for security and troubleshooting. It's deleted after 14 days.

Services we use

Our website and our statistics server are reached through Cloudflare, which handles the network connection to them. Steam and Apple's App Store sell and deliver the game, and their own privacy policies cover what they collect.

Children

We don't knowingly collect personal information from children, and the game sends none.

Contact

Questions about this policy, or about anything the game sent: support@galacticacidstudios.com. To have the statistics from your copy deleted, send us its random ID: the game shows it at OPTIONS > SHARE STATS ("YOUR ID", the first eight characters are enough), on every platform. On a computer it's also in install_id.txt, next to your saves.

Changes

If this policy changes, we'll update it here and change the date at the top.