Thunk — Privacy Policy
Last updated: October 29, 2026 · Applies to Thunk: Knife Throw (com.nomadarcade.thunk)
The short version. You can play the whole game without an account and without giving us anything. If you choose to sign in, we store your game progress so it follows you to a new phone. From version 1.1.0 Thunk shows ads from Google AdMob: one after some bosses, and ones you can choose to watch for a reward. From version 1.2.0 four more ad networks can supply those ads through AdMob. We do not sell your data. From version 1.2.0 the iPhone version asks you once whether it may track you for ads, and the game plays the same if you say no. It sells optional packs of in-game acorns and, from version 1.2.0, No ads, which turns off the ads after bosses and runs. The iPhone version tells Meta when it is installed, when you reach a few steps in the game and when you buy something, so we can measure our own Facebook and Instagram ads (see Advertising).
From version 1.3.0 you can turn on the Nomad Passport, one level across our games that pays rewards in Thunk. It is optional and works without an account (see Nomad Passport).
Who we are
Thunk is published by Alden Morris Enterprises LLC, a New York limited liability company trading as Nomad Arcade ("we," "us"). For anything in this policy, write to support@get-creative.co, or by post to Alden Morris Enterprises LLC, 4465 E. Genesee St, Dewitt, NY 13214, United States.
Playing without an account
By default the game has no account. Your progress (levels cleared, stars, acorns, knives, high scores, achievements and settings) is saved only on your phone. We cannot see it, and it is deleted when you delete the game.
If you choose to sign in
Signing in is optional and lives in Settings → Cloud save. It exists for one reason: so your progress survives a lost or replaced phone. You can play forever without it.
| What | Why |
|---|---|
| Your Apple ID (through Sign in with Apple) or your Google account ID (through Google Sign-In), with the name and email address that provider shares. If you choose Apple's "Hide My Email", we only ever see the private relay address | To recognize you when you sign in on another phone |
| Your game progress: acorns, knives owned and selected, levels cleared and their stars, endless-mode high scores, achievements, lifetime stats and your daily-gift streak | So it can be restored on a new phone |
Sound and haptics settings are not uploaded; they stay on each phone.
Progress is stored in Google Cloud Firestore in the United States (the nam5 multi-region). Security rules restrict each record so that it can only be read or written by the signed-in account it belongs to.
Nomad Passport
From version 1.3.0, Thunk has the Nomad Passport: one level across Nomad Arcade's games that pays fixed rewards in Thunk (acorns and three knives) as it grows. It is optional and stays off until you turn it on in Settings → Nomad Passport, and it works without signing in. How it works and every reward are at nomadarcade.com/passport.
| What | Why |
|---|---|
| A random account ID made when you turn the Passport on, and the short Passport number worked out from it | To keep your level |
| For each round or level played to the end, win, boss beaten, achievement unlocked and the day's first finished round: what kind of event it was, which game, the day it happened, when it reached us and a random ID for the event. Never your score, your device or your location | To add up your XP so that no event counts twice. Events are deleted after 30 days |
| Your XP, which of our games the Passport is turned on in, the XP each game gave each day, and which rewards each game has given | To work out your level and give each reward once |
| Each time the game signs in to the Passport: the time, your network (IP) address, and the names and versions of the app and phone system that asked | To keep the Passport's sign-in secure |
| If you sign in with Apple or Google while the Passport is on: that account's ID and the email address it shares, and from Google also your name and profile picture link. If you choose Apple's "Hide My Email", we only see the private relay address | To bring the same Passport to another phone |
Before the Passport turns on, the game asks the year you were born (and the month, only if the year leaves it unclear) to check that you are 13 or older. Neither is sent or stored: Thunk keeps only whether the Passport may be used on this phone.
The Passport is stored on a server we run, rented from Hetzner in Ashburn, Virginia, in the United States. On iPhone its sign-in is kept in the phone's keychain, where our other games on the same phone can read it, so they share one Passport. On Android each game keeps its own until you sign in. The Passport is never shared with advertising networks.
Analytics and crash reports
| Service | What it receives |
|---|---|
| Google Analytics for Firebase (Google) | How the game is played: which screen you are on and for how long, when you open and leave the game, your first knife throw, a level started, cleared or failed with its number, length, whether it was a boss and the stars earned, an endless run's score, playing again, a knife bought with acorns, opening the acorn shop, which acorn pack you started to buy or bought, and from 1.1.0 whether you watched an ad to double your acorns and when an ad played after a boss. From 1.2.0 it also receives the acorns you earn and spend, the new features you see and use (such as a boss's second chance), which item you started to buy and whether the purchase went through or was restored, whether you own No ads, when an optional ad is offered, which ad network showed each ad and what it earned us, when the game asks for a rating, your side of each split test, where you tap, and what you do in More games (see Our other games). Google also works out a rough location (country or city) from your IP address. If you are signed in, these are linked to your account identifier |
| Firebase Remote Config (Google), from 1.2.0 | The game's settings, such as how often ads may show, which new features are on and how many players are on each side of a split test. To fetch them, the game sends an identifier Firebase makes for this install. The settings hold nothing about you |
| Firebase Crashlytics (Google) | Crash and error reports, with the device model, operating system version and the state of the game when it crashed |
Where you tap. From 1.2.0, when you tap anywhere outside a level, Analytics receives the screen's name, the button you tapped or that the tap hit no button, and which box of a 10 by 20 grid over the screen it landed in. During a level it receives the box of one throw in ten. It never receives the exact spot or anything you type.
Split tests. From 1.2.0 we try some changes on part of our players, such as a shorter time between ads. The game makes a random number for this install and keeps it on your phone. It never sends that number. From it the game puts you on side a or b of each test, and your side goes to Analytics with the events above.
We use these to find levels that are unfairly hard, to see where new players get stuck, to test changes and to fix crashes. None of it is sold to anyone. On iPhone, Firebase does not use Apple's advertising identifier. On Android, it may use the phone's advertising ID. Google AdMob's use of identifiers is described under Advertising.
Advertising
From version 1.1.0 Thunk shows ads served by Google AdMob. An ad can play just before or after the card that follows a boss or the end of an Endless run, never during a level. In some of those breaks the game shows one of our other games instead (see Our other games). Those cards offer an optional ad that doubles the acorns you just won. From version 1.2.0 you can also choose to watch an ad to get back a knife that bounced in a boss fight, or to borrow a knife you do not own yet for the rest of a boss. There are no banners. Version 1.0.1 and earlier show no ads.
No ads. From version 1.2.0 the shop sells No ads. It turns off the ads after bosses and runs, and a boss's second chance needs no ad. The ads you choose to watch stay.
To choose, show and count ads, and to stop fraud, Google receives information about your phone and how you use the game: device model and settings, an approximate location worked out from your IP address, the ads shown and how you interact with them, and diagnostic data. On iPhone, from version 1.2.0, the game asks you once whether it may track you (Apple's App Tracking Transparency prompt). Only if you allow it does Google receive Apple's advertising identifier (IDFA), which it uses to show you ads that suit you better and to measure them. Earlier versions never ask, and Google gets no IDFA from them. You can change your answer at any time in the iPhone's Settings → Privacy & Security → Tracking. On Android, Google may use the phone's advertising ID, which you can reset or delete in Android's settings. In the EEA and the UK, Google asks for your consent before personalized ads are shown; you can change your choice in Settings → Your data → Ad privacy choices. Google handles this data under its own privacy policy.
Other ad networks. From version 1.2.0, AppLovin, Unity Ads, Liftoff and Mintegral can also bid through AdMob to show an ad in Thunk. When one of them bids for or shows an ad, it receives the same kinds of information as Google: device model and settings, an approximate location worked out from your IP address, the ads shown and how you interact with them, and diagnostic data. On iPhone it receives Apple's advertising identifier only if you allowed tracking, and on Android it may use the phone's advertising ID. Each handles this data under its own privacy policy: AppLovin, Unity, Liftoff and Mintegral.
We also advertise Thunk itself on Facebook and Instagram. To learn which of those adverts lead to installs and to players who keep playing, the iPhone version (from version 1.0.1) includes Meta's app events SDK. It tells Meta when the app is installed and opened, and a few steps in the game: the first knife throw, the first level started, the end of a level and playing again, clearing a level for the first time, opening the acorn shop, starting to buy something, and buying it (which item and its price, never your payment details). These go together with basic device information (such as model, iOS version, language and time zone) and an identifier the SDK generates for this install. If you allow tracking (from version 1.2.0, see above), Meta also receives Apple's advertising identifier (IDFA) with these events, so it can tell us which of our ads brought you to the game. If you do not, or on an earlier version, Meta gets no IDFA and reports these results to us only in aggregate. Meta handles this data under its own privacy policy.
The Android version does not send anything to Meta.
Our other games
From version 1.2.0, More games, on Home and in Settings, lists our other games. Tapping one opens its page in the App Store inside the game, or its Google Play page on Android. Apple or Google is told which of our games sent you there, so we can count the installs each game brings. We see only those totals. More games can also play a short demo of another of our games. The demo is part of Thunk and loads nothing from the internet. In some ad breaks the game may show one of our other games instead, marked "Ad", with a close button. Nothing is given for opening, playing or installing any of them, and the game never checks which of our games you have.
Analytics receives when you open More games, which game you tapped and whether its store page opened, and how you used a demo or one of these ads: when it opened, each run and how long it lasted, whether you tapped Get, and when you closed it. None of this goes to Meta.
Purchases
Thunk sells optional packs of acorns, the in-game currency, and from version 1.2.0 No ads, which you buy once. Acorns are also earned by playing. Payment is handled entirely by Apple (App Store) or Google (Google Play): we never see your card or payment details.
| What | Why |
|---|---|
| The store's transaction identifier for each pack you buy, and whether you own No ads, kept on your phone | So a purchase is credited exactly once, even if the app closes mid-purchase. Restore purchases gets No ads back from the store on a new phone |
| Analytics events naming the item you started to buy and whether the purchase went through or was restored, and whether you own No ads (no payment data) | To understand which items players find useful |
| On iPhone, Meta's SDK records the purchase: which item and its price (no payment data) | To measure our own Facebook and Instagram ads (see Advertising) |
Refunds are handled by Apple or Google under their own policies.
Children
Thunk is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has signed in, contact us and we will delete the account and its data.
From version 1.3.0, the Nomad Passport asks the year you were born and stays off for anyone under 13.
Deleting your data
You are in control of all of it:
- Delete your account and cloud save: Settings → Cloud save → Delete account. After you confirm with Apple or Google, this removes your stored progress and your account from our systems, and revokes the game's Sign in with Apple authorization. The progress already on your phone is kept so you can carry on playing.
- Sign out: Settings → Cloud save → Sign out. Nothing further is uploaded; the copy on your phone is untouched.
- Reset your progress: Settings → Reset all progress. While you are signed in, this resets the cloud copy too.
- Remove everything on your phone: delete the game.
- Delete your Nomad Passport (from version 1.3.0): Settings → Nomad Passport → Delete Passport, or see nomadarcade.com/passport/delete. This deletes the Passport, its level, its play history and its sign-in from our server, for every one of our games, unless another of our apps also uses that sign-in. What it already gave you in Thunk stays.
- Ask us: email support@get-creative.co and we will delete your data.
More detail is on the Data Deletion page.
How long we keep it
Cloud saves are kept while your account exists, and deleted when you delete it. The Nomad Passport is kept until you delete it, and its play events are deleted after 30 days. Analytics data is retained by Google for up to 14 months and crash reports for up to 90 days, then removed automatically.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete the data we hold, and to object to how we use it. Email support@get-creative.co and we will respond within 30 days. You may also complain to your local data protection authority.
Who else sees your data
We do not sell your data. It is processed on our behalf by Google (Firebase Authentication, Cloud Firestore, Analytics, Crashlytics, from 1.1.0 AdMob and from 1.2.0 Remote Config), by Apple for Sign in with Apple if you use it, by Apple or Google Play for payments and, on iPhone, by Meta to measure our own ad campaigns (see Advertising). From 1.2.0, AppLovin, Unity, Liftoff and Mintegral receive data when they bid for or show an ad through AdMob. Those companies are bound by their own privacy terms. From 1.3.0, Hetzner hosts the Nomad Passport's server for us.
Changes
If this policy changes in a way that affects what we collect, we will update the date at the top and, where the change is significant, tell you in the game.