Blue Wizard Digital

Privacy Policy

Updated September 15, 2026

This notice explains the current TOMB RUN website and its original Zom.Run city mode, provided by Blue Wizard Digital Inc. Read it alongside the Blue Wizard Privacy Policy, which covers the studio’s services more broadly.

Game saves and browser storage

Your browser stores progress, gold, upgrades, statistics, settings and an unfinished run. Browser storage and the offline cache also help the game load quickly. Older saves may be migrated from cookies or other browser storage. These saves are not automatically uploaded to a game account or cloud-save service.

To erase local data, use the game’s reset controls or clear this site’s data in your browser. Clearing site data removes settings and progress; uninstalling a shortcut alone may not do so. Storage remains until you or your browser removes it.

Delivering the website

When your browser requests pages, images or audio, the hosting service receives information such as your IP address, requested URL, request time and browser headers. Hosting and security systems may keep request logs to operate and protect the service. These records are separate from your local save and follow the hosting provider’s operational retention practices.

Website analytics

Google Analytics loads when you open the game. Google receives information such as page views, referrers, browser and device details, interaction events and connection information, and uses analytics cookies to distinguish visits. See how Google uses information from sites that use its services. We do not send your game save or transfer code to Google Analytics.

You can manage or block cookies using your browser’s settings, or use Google’s Analytics opt-out browser add-on where supported. Removing cookies does not delete information already received by Google.

Performance measurements

TOMB RUN is in testing, and while it is, the game measures how smoothly it runs and sends that measurement to our own server when a run ends. This is how we find out that the game stutters on a particular phone without having to ask somebody to send us a report by hand.

A measurement contains frame timings (averages, percentiles and the worst frames), how much of each frame was the game’s own code, what your browser reports about the device (rough memory size, number of processor cores, screen size and pixel density, and whether the page is running in a browser tab or as an installed shortcut), which browser engine and graphics backend were in use, the game version, and what was happening in the run at the time – the room number, the score and how many monsters, bullets and particles were on screen. For a sample of runs, and for any run that stuttered badly, the fuller report is sent as well; that one also includes your browser’s user-agent string and, if a script error occurred, the file name and line number.

It contains no name, no country, no save, no transfer code and no identifier of any kind – not even the random token the score board uses. Measurements are not linked to each other or to you, and are deleted automatically once about a week of newer ones has arrived. Nothing from them is ever shown to other players. As with any request, the hosting service also receives your IP address and browser headers (see Hosting and logs below); it is not stored with the measurement.

To switch it off, set tombrun_perf_optout to 1 in this site’s local storage using your browser’s developer tools, or write to us and we will tell you how. Blocking the request has the same effect: the game does not notice and plays identically either way.

There is also a performance test you can start deliberately, which never runs on its own: the game plays itself for about nine minutes through a fixed set of scenes and reports how each one ran. It is started by a link, by a hidden gesture on the results screen, or from the Options menu, and it shows you the whole result on the screen before sending anything, with buttons to copy, share or save the same file. What it sends is the same kind of information as above – frame timings, device capabilities and what was on screen – for each scene rather than for a run, plus any short label you type yourself. It carries no identifier of any kind, so one test cannot be linked to another or to you, and it does not touch your saved game: your progress is put back exactly as it was when the test ends.

Optional diagnostics and advertising

The game’s separate error-reporting feature is disabled by default. Error reports, when enabled, may include an error message, stack trace, page URL, browser details, game version and gameplay context. Avoid including personal information in game URLs or reports you share.

The current advertising-style intermissions are fictional, local game content. They do not contact an advertising network.

Transfers, sharing and external services

The global score board

The board is the only feature that publishes anything, and only when you press Post score. Nothing you type, and nothing anyone else can see, is sent unless you do.

A post contains the name you type, the country you choose (or none), the figures from that run (kills, rooms, seconds, gold and bosses) and a random identifier this game generates and keeps in your browser so each board can hold your best run rather than every run. That identifier is not linked to you, is never shown to other players, and is cleared when you clear this site’s data. Your save, your transfer code and your settings are not sent.

The country is a suggestion worked out on your device from its time zone and language settings; nothing about that leaves your device, and you can change the suggestion or leave the country blank before posting. If the hosting service tells us which country a request came from, we may suggest that instead. The country you post is shown next to your name.

A published entry shows the name, country and figures to everyone who opens the results screen, so choose a name you are happy to be public. Names are up to 8 characters: letters, numbers, spaces and emoji. Names matching a list of offensive words are refused, and we may remove a published name at our discretion. As with any request, the hosting service also receives your IP address and browser headers (see Hosting and logs below); your address is not stored with the entry.

Email data-controller@bluewizard.com to have an entry removed. Tell us the name and roughly when it was posted.

Transfer creates a code containing your progress on your device. Anyone you give that code to can read or import it. Copying uses your clipboard; sharing sends content through the app or service you choose.

The original city mode requests Google Fonts, which receives normal connection information such as your IP address. The default dungeon mode hosts its fonts locally. External links, email and sharing services have their own privacy practices.

Contact, choices and requests

Email data-controller@bluewizard.com for privacy questions or to request access, correction or deletion of personal information Blue Wizard holds about you. Depending on your location, you may have additional rights, including objection, restriction, portability or a complaint to a privacy regulator. We may need enough information to verify and answer your request. We cannot retrieve a save that exists only in your browser.

If you contact support, we receive the address and information you send and use it to respond. Send only what is needed for your question. You can also use Blue Wizard’s data-request page.

Children

Blue Wizard does not knowingly collect personal information from children under 13. This game does not verify a player’s age. If you believe a child has provided personal information to us, contact the privacy address above so we can investigate and address it.

Changes

We will update the date above when this notice changes. Material changes to data collection will be explained and any required consent will be requested.