← TuffGamez

Privacy Policy

Effective September 24, 2026 · applies to www.make67.com and every game on it

The short version

  • Sign-in is Google only. We receive your name, email address and profile picture. We never see your Google password.
  • We store what the games need: scores, solves, ranks, streaks, items, History Quest answers, chat messages and Mood Meter check-ins.
  • Other players see your first name and last initial ("Alex V."), your rank and your scores. Your teacher sees your full name and your class data.
  • We never sell data, never show ads, never build advertising profiles and never use student data to train AI.
  • Delete on request. Email aaron@writingtools.org and the account and its data are removed.

Who runs this site

TuffGamez is a set of classroom math and history games run by an individual middle-school teacher in Mendocino County, California. It is not a company and has no employees, investors or advertisers. Questions about this policy go to aaron@writingtools.org.

What we collect

From Google, when you sign in

Sign-in uses Google's standard OpenID Connect flow with the openid, email and profile scopes only. Google sends us your name, email address and profile picture URL. We store those three things plus a role (student by default; teacher or administrator when assigned). We never receive or store a password, and we cannot read your Gmail, Drive or anything else in your Google account.

From playing

Make 67, Make 6 or 7Solve counts, rank, daily-puzzle streak, shop items and effects, tournament results, cosmetic choices (sound, colour theme), solve-speed records.
Trash Blaster, Cave Runner, Number RecyclerHigh scores, altitude and run records, unlocked skins.
History QuestWhich questions you answered and whether you got them right, mastery per question and per standard, Chrono-Coin balance, achievements, artifacts, class-session participation and any custom questions or assignments a teacher creates.
ChatMessages posted in the Make 67 and Make 6 or 7 chat rooms (available after 50 solves). Messages our language filter blocks are kept for teacher review; chat bans are recorded.
Mood MeterEach check-in: the grid position you chose, the feeling label, the time, and the IP address the check-in came from. Check-ins made while signed out are stored without a name.
Class rostersTeachers place students into classes by email address, so we store which students belong to which teacher's class.

Automatically

  • Server logs. Our host records each request's IP address, browser type, page and time. We use these to keep the site running and to investigate abuse. They are kept for a short period and then discarded.
  • Google Analytics (measurement ID G-8W6XCSVZZ0) tells us how many people visit and which games they play. We do not use its advertising features and do not link it to your account.
  • Cookies and browser storage. A signed session cookie holds your sign-in state (and, in History Quest, your current game). A remember_token cookie keeps you signed in on that browser. Preferences such as your solve sound, colour theme and which celebrations you have already seen live in your browser's local storage and never reach our servers. There are no advertising cookies.

What we do not collect

No passwords, home address, phone number, date of birth, precise location, payment details, photos beyond the Google profile picture URL, or anything typed outside the games' own inputs.

How we use it

  • To run the games: keep score, unlock ranks and rewards, remember your progress.
  • To show leaderboards and chat to other players, using a shortened name (first name plus last initial), rank title, scores and streak.
  • To give teachers a view of their own classes: full student names, rosters, History Quest mastery by standard, Mood Meter check-ins and chat moderation.
  • To keep chat safe: a word filter blocks messages before they post, flagged text is kept for the teacher to review, and repeated violations lead to a temporary chat ban.
  • To keep the site working and stop abuse (rate limits, cheat detection, log review).

We do not use any of this data for advertising, marketing, or building a profile of a student for any purpose other than the games and the teacher's classroom use.

Who can see what

Other studentsShortened name, rank, scores, streak, tournament placings, trophies, and anything you post in chat.
Your teacherEverything above plus your full name and email, your class roster, your Mood Meter check-ins, your History Quest progress, and any chat message the filter blocked. A teacher sees only the students on their own rosters.
Site administratorEverything, for support, moderation and maintenance.
Everyone elseNothing beyond the public leaderboards, which show shortened names and scores only. There is no public profile page.

Who we share it with

Only the services that make the site run:

  • Google LLC for sign-in and for Google Analytics, described above.
  • Render, Inc., which hosts the application and its database in the United States.

We do not sell data, share it with data brokers, hand it to advertisers, or use it to train AI models. We would disclose data if the law required it, and we would tell the affected school if we could.

Students, schools and the law

Children under 13 (COPPA)

Students use this site in class, at a teacher's direction, for educational purposes. Under COPPA's school-consent provision the school consents on the parents' behalf, and we collect only what the games need. A parent or guardian may review or delete their child's data by asking the teacher or emailing us.

California students (SOPIPA and AB 1584)

We do not target advertising to students, do not build profiles for anything other than the games and the classroom, and do not sell student information. Student records remain under the school's control, and we delete them when the school asks. We will sign a school district's student data privacy agreement on request.

Education records (FERPA)

Where a school uses the site, we act as a school official with a legitimate educational interest, under the school's direct control, and use education records only for the purposes the school authorises.

If something goes wrong

If we learn of a breach affecting student data, we will notify the affected schools without unreasonable delay so they can inform families.

How long we keep it

Account and game data stay for as long as the account is in use, because streaks, ranks, mastery and mood history only mean something over time. A school or teacher may request that a class's accounts be removed at the end of a year. Individual deletion requests to aaron@writingtools.org are completed within 30 days. Server logs are discarded on a short rolling window.

Security

Every connection uses HTTPS. Sign-in is delegated to Google, so we store no passwords. Access to student data is limited by role, and teachers can only reach students on their own rosters. The database runs on a managed hosting service and is not exposed to the internet.

For school technology administrators

Google Workspace for Education blocks students from signing in to third-party apps until an administrator configures them. To allow this site for your students:

  1. Admin console → Security → Access and data control → API controls → Manage Third-Party App Access.
  2. Configure new app, then search by OAuth client ID:
    584875541165-6b95b2d7k5vlbs7ebqmpu8md94k2q4k5.apps.googleusercontent.com
  3. Set access to Trusted (or Limited) for the student organisational units, and save.

Scopes requested: openid, email, profile. No sensitive or restricted scopes. If your content filter blocks the site, allow make67.com and www.make67.com.

Changes to this policy

When this policy changes, the new version is posted here with a new effective date. Material changes affecting schools will be emailed to the teachers using the site.

← Back to TuffGamez