OpenTPW

Privacy

Last updated 10 October 2026 (news and top parks on the website).

OpenTPW is a hobby project. This page explains what opentpw.io and the official server at play.opentpw.io keep about you. The short version: very little, no tracking, and you can delete your account and everything on the server yourself.

Questions or requests: [email protected]. The maintainer of OpenTPW is responsible for the processing described here.

This website (opentpw.io)

The website has no cookies, no analytics and no advertising. It is served by Cloudflare Pages; like any web host, Cloudflare processes your IP address to deliver the pages and to protect them against attacks. Downloads come from GitHub, which processes your IP address when you download a release.

The home page shows news and the top parks from the official server: your browser fetches them, and the park pictures, from play.opentpw.io, without cookies. That server keeps no access logs (see below).

Playing in the browser (play.opentpw.io)

The browser version runs on your computer. The game files you choose are copied into your browser's memory only; they are never uploaded and are gone when you close the page. The server at play.opentpw.io runs in a data centre of Hetzner Online GmbH in Germany. Its web server keeps no access logs.

Playing online (accounts)

Going online is optional. If you create an account on the official server, it keeps:

WhatWhyHow long
Your player name, a salted hash of your password (never the password itself), when you registeredTo let you log inUntil you delete your account
The secret of your authenticator app (two-step login), which the server needs to check your codesTo let you log inUntil you delete your account or the operator resets it
Your buddy list and daily vote countFor buddies and park votesUntil you delete your account
Parks you publish, with their name, description and preview pictureTo show them to other playersUntil you remove them or delete your account
Whether you chose to show a published park on opentpw.io (off unless you choose it)Only then can the park appear in the website's top parks, with its name, description, picture, votes and visits and your player name, visible to anyoneUntil you remove the park or delete your account
Postcards sent to youTo deliver themUntil you delete them or your account
Reports you make about parks, players or chatFor moderationAs long as needed for moderation
Login sessions (a hash of the session key, never the key itself)To keep you logged in, also when the server restartsAt most 7 days, or until you log out

Chat messages are passed on to the other players in your room and not stored. Your IP address is used in memory only, to limit how many requests one address can make; it is not stored. Postcards you send are delivered to their recipients and stay with them.

The server keeps nightly backups of its data for seven days, so deleted data is also gone from the backups within a week.

Deleting your account

In the game, open Go online and choose Delete account, then confirm with your name and password. This removes your account, your published parks and your inbox at once. Reports you made remain without your name.

Your rights

You can ask what the server keeps about you, ask for it to be corrected or deleted, or object to its use, by writing to [email protected]. The legal basis is providing the online service you signed up for (account, parks, postcards) and the legitimate interest in keeping the service safe (rate limits, reports, moderation). If you are not satisfied with the answer, you can complain to your data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

Under 16? Please ask a parent or guardian before you create an account.