What the game collects, who else receives it, and how to get rid of all of it.
Last updated 11 October 2026 · Applies to the game
Train Hard on Android and iOS (com.tentaculo.trainhard), and to nothing else.
| What | Why, and who can see it |
|---|---|
| An account id | A random string that identifies your save, made by Firebase Authentication the first time the game goes online. If you play as a guest this is all we have. Other players' games use it to show your profile and send you gifts. |
| Email address and name | Only if you sign in. With Google, Google gives your email address and name to Firebase Authentication. With Apple (on iPhone), Apple gives an email address, which can be a relay address if you chose to hide yours; the game keeps no name from Apple. They are kept with the sign-in so you can sign in again. Your email is shown back to you on your own profile so you can tell which account you are using. No other player ever sees either. |
| Your progress | A private copy of the whole save: coins, Workshop levels, NEW GAME+ level, records on each line, runs, THE BOOK, your settings, your leaderboard name, your charisma and the engine looks you own and wear. Only your account can read it. |
| Your leaderboard row | The name you type, your points, your NEW GAME+ level, your best time, most bosses destroyed and wins on each line, your number of runs, the engine looks you wear (a livery, rose steam) and the CHAMPION plate if you ever reached first place. Every signed-in player of Train Hard can see it. |
| Your charisma | The charisma you have received, in total and today, and the id of the last gift you received. That id contains the account id of the player who sent it. Every signed-in player can read it, one player at a time. |
| Gifts received | Each gift sent to you: which kind, the day and time, and the sender's account id. You can list them; a sender can check only the one gift they sent you that day. The sender's name is never stored with the gift: your game reads it from their leaderboard row. |
| On the phone only | The local copy of your save, the players you blocked, and your sound, music and vibration settings. Nobody else receives them. |
| Ad data (through Google AdMob) | To serve the optional reward videos, Google AdMob may collect your phone's advertising identifier, information about the device and its connection (such as model, system version, language and IP address) and how you interact with the ads. Google receives this directly; we do not store it. See Ads below. |
| Crash reports | If the app crashes, Firebase Crashlytics (Google) receives a report: the stack trace (where in the code it failed), device model, system version, app version, the time, and a random Crashlytics id for this install, never your account, name or email. Used only to find and fix crashes. Google keeps crash reports for 90 days. |
| How the app is played Android and iOS apps |
Measured with Google Analytics for Firebase (Google), so faults can be found and the game balanced: sessions and time played, the screens you open, game events (a run starting and ending with its time, level, bosses, kills and coins, and what ended it; the bosses you meet and scrap; the cards you pick and what you buy at stations; coins earned and spent; NEW GAME+; the line you choose; videos offered and watched; gifts sent; signing in or out and deleting the account) and in-game error messages, plus app version, device model, system version, language and approximate country. Filed under a random id for this install of the app, never under your account, name or email. In the EEA and the UK nothing is sent until you have answered Google's consent screen, and it is stored on the phone only if you allowed storing and accessing information on your device. Google Analytics deletes the detailed events after at most 14 months. The browser version sends none of this. |
The game does not ask for your location, your contacts, your photos, your microphone or your camera, and it holds no permission that would let it. It sends you no notifications.
Everything above that is not on the phone, apart from ad data, crash reports and the measurement of play, is stored with Google Firebase (Firebase Authentication and Cloud Firestore), in the European Union.
Nothing is sold, and nothing is handed to anyone not on this list.
The leaderboard name is the one thing one player types and another reads. Names are 1 to 16 letters, digits or spaces, and the game refuses names on a short list of offensive words, both when you type one and when it shows someone else's.
On another player's profile, Report opens your mail app with that player's name and account id, addressed to us, and blocks them. Block hides a player on your phone only: it tells nobody, and it stays through signing out and deleting your account.
The app shows no banners and no ads between runs. It offers reward videos you can choose to watch: one doubles the coins of a run on the results screen, another sends the GOLDEN SPIKE gift without paying its coins. Nothing happens if you never tap them. The videos come from Google AdMob, which keeps one video loaded in the background so it is ready, so the app contacts AdMob even if you never watch one.
To serve them, AdMob may collect your phone's advertising identifier, information about the device and its connection (such as model, system version, language and IP address) and how you interact with the ads, and uses them under Google's own policy: how Google uses information from apps that use its services.
If you are in the European Economic Area or the United Kingdom, Google's consent screen appears before any ad is requested, and what you choose there decides whether ads are personalised, or shown at all. You can change your answer at any time: in the game, open Settings → Privacy settings, which brings Google's screen back, on Android and on iPhone. That button appears wherever the law requires the choice, including the EEA and the UK. The same answer decides whether Google Analytics may store anything on your phone, and until you have given it the game sends no measurement at all.
On iPhone the game then asks for permission to track, with Apple's own prompt, before any ad is requested. The advertising identifier is read only if you allow it; if you do not, the videos still play, without it. You can change that answer at any time under Settings → Privacy & Security → Tracking.
You can also reset or delete the advertising identifier at any time: on Android under Settings → Privacy → Ads, on iPhone by turning tracking off as above. Doing so does not stop the videos; it stops them being tied to what you did before.
The browser version of the game at tentaculogames.pt shows no ads.
There is a Delete account option inside the game, on your profile. It removes your leaderboard row, the gifts you received, your charisma profile, your save and the account itself, and starts the game again from nothing. It asks for a second tap to confirm, and then it is done: there is no undo.
If you would rather someone else did it, write to hellotentaculo@gmail.com and tell us the Google account or Apple ID you signed in with. The full details are on the delete your data page.
Deleting the app on its own does not delete anything stored against your account, only the copy on that phone.
The game is not aimed at children under 13, and we do not knowingly keep anything about them. If you believe a child has an account here, write to the address above and it will be removed.
If you are in the EEA or the UK, you can ask for a copy of what we hold, ask for it to be corrected, ask for it to be deleted, or object to how it is used. One email does any of them. We do not charge for it and we do not need a reason.
If what the game collects changes, this page changes with it, and the date at the top moves.