Privacy

Last updated: 28 September 2026

Who is responsible

Adryano Yohanna (Oddpetal), Am Kanal 73A, 1110 Vienna, Austria. Contact: contact@oddpetal.org. See also the Imprint.

Playing without an account

Your progress (best height, Gold, Gems, unlocked items, missions and settings) is saved on your device: in your browser on our website, in your CrazyGames account on CrazyGames, and in your YouTube account on YouTube Playables. We do not receive it.

Step Up: Ranking and online duels

When you finish a run or play an online duel, our server receives:

• the timing of your taps, so the server can recalculate and check your score,
• your score and duel results,
• in duels: the finish (style) of your tower, so your opponent sees it,
• when you search for an opponent: your duel rank, so we can pair you with players of a similar rank,
• on our website: a random player key in a cookie (luma_player, kept for one year) and a random nickname we assign,
• on CrazyGames, if you are signed in: your CrazyGames username and user ID, verified with CrazyGames. We store the ID only in scrambled (hashed) form.

Your nickname or CrazyGames username and your best score are shown to other players in the Ranking and in duels.

The game shows you a Player ID in its settings: a short code derived from your scrambled player key or CrazyGames ID. It identifies you only within Step Up; you may share it, for example to claim a prize from a duel event we announce.

For each online duel we keep a record for 90 days: the Player ID of both players, the time, the room code of a private room, the result with both tower heights, and whether the computer stepped in as your opponent. We use it to keep duels fair and to check prize claims. Older records are deleted automatically as new duels are played, and you can ask us to delete yours at any time.

When you start or join a duel, your IP address is counted in scrambled (hashed) form to limit abuse. These counts expire within ten minutes. Duel rooms expire two hours after their last activity. Runs expire one day after they start, finished or not; only your best score stays in the Ranking. Expired entries are deleted automatically as players start new runs and duels.

Your player profile (your player key or CrazyGames ID in scrambled form, and your nickname or username) and your Ranking entries, including those of earlier seasons that the game no longer shows, remain while the game is online, unless you ask us to delete them.

Step Up on iPhone

Your progress and settings are saved on your iPhone. We do not receive them.

For the Ranking and online duels, the app creates a random player key, keeps it on your iPhone and sends it to our server instead of a cookie. The server knows you only by this key and a random nickname; everything described under "Step Up: Ranking and online duels" applies.

The app shows ads from Google AdMob (Google Ireland Limited). In the EEA, the UK and Switzerland, Google's consent form asks whether ads may use your personal data. If you do not agree, you see ads that are not personalised or limited ads. These still use some data, such as your approximate location from your IP address and the app they appear in, to deliver and measure ads and to prevent fraud. The app also asks for Apple's permission to track; without it, the advertising identifier of your iPhone is not used. Google processes data for ads under its own privacy policy (policies.google.com/privacy). You can change your ad choices at any time under Settings, "Ad choices", where your region requires it, and tracking under iPhone Settings, Privacy & Security, Tracking.

To report an inappropriate ad, tap the information icon on the ad or write to us.

Bellbop: online duels

Bellbop has no Ranking. When you play an online duel on our website or on CrazyGames, our server receives:

• your steering and stomp inputs, so the server can recalculate both bells and decide the duel,
• the style of your bell and the round length you chose,
• on our website: a random player key in a cookie (bellbop_player, kept for one year) and a random nickname we assign,
• on CrazyGames, if you are signed in: your CrazyGames username and user ID, verified with CrazyGames. We store the ID only in scrambled (hashed) form.

We store your duel results, an internal skill rating per round length that is used to find fair opponents and never shown, the names of your recent opponents so they do not repeat, and your finished runs. Your runs may be stored and used as opponents in other players' matches, shown with your nickname or CrazyGames username. Guests appear as "Opponent".

A stored run is deleted once 500 newer runs of the same round length and skill level have replaced it, and 30 days after a rules update of the game. Duel rooms exist only while a match runs. On our website, your current room is kept in your browser tab so a reload can return to the duel. Your player record, ratings and results remain while the game is online, unless you ask us to delete them.

To limit abuse, your IP address is used in scrambled (hashed) form for about a minute and is not stored.

Hosting

Our website and server run on Cloudflare (Cloudflare, Inc.), which processes technical request data such as IP addresses to deliver and protect the service and keeps short-lived logs.

Platforms and ads

On CrazyGames and YouTube, the platform's own privacy policy also applies, including for any ads they show. Our website currently shows no ads and uses no tracking or analytics cookies. The only cookies are the player keys described above (luma_player for Step Up, bellbop_player for Bellbop); they are needed for the Ranking and online duels and are not used for tracking. The iPhone app uses no cookies; ads there come from Google AdMob as described above.

Legal bases

We rely on these legal bases of the GDPR:

• Ranking and online duels you start, including your player key and nickname or CrazyGames account: to provide these game features (Art. 6(1)(b)),
• limiting abuse with your scrambled IP address, and delivering and protecting our website and server: our legitimate interest in a secure and fair service (Art. 6(1)(f)),
• duel records for fair play and prize claims: our legitimate interest in fair duels and in paying prizes only to those who won them (Art. 6(1)(f)),
• personalised ads in the iPhone app: your consent in Google's consent form and Apple's tracking permission (Art. 6(1)(a)),
• ads that are not personalised, including limited ads: our legitimate interest in financing a free game (Art. 6(1)(f)).

Transfers outside the EEA

Cloudflare, which runs our website and server, and Google, which provides the ads in the iPhone app, may process data in the USA. Both companies are certified under the EU-US Data Privacy Framework. Where it does not cover a transfer, they use the EU standard contractual clauses.

Cloudflare and Google are bound by contract and by law to protect your data at least as well as this policy describes.

Your rights

You can ask us for access to your data, its correction or deletion, restriction of its processing and a copy in a portable format, and you can object to its use, by writing to the contact above.

You can withdraw your consent at any time, without affecting processing before that: for ads in the iPhone app under Settings, "Ad choices", where your region requires it, and for tracking under iPhone Settings, Privacy & Security, Tracking.

You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).