Site document
Privacy policy
Last updated 20 August 2026
Who runs this
TURNSTONES 007 is made and owned by TURNSTONES007, an independent one-person studio based in India. India is the country of origin for the game, for this website and for the Android app, and it is where any question about any of them is answered from. The only way to reach us is turnstones007@gmail.com.
What this policy covers
There are two ways to play, and this page covers both:
- This website — OUTPOST, the first battlefield, free in your browser.
- The Android app — all seven battlefields, installed from the Play Store.
Both are free. Neither has an account, a login or anything to buy — the six battlefields you cannot reach here are not behind a price, they are in the app. Both are paid for by advertising, and the advertising is the one part of either that involves data about you. Where the app and the website differ, it is said below.
The short version
We collect nothing about you. No accounts, no sign-up, no name, no email, no password, no payment details, no analytics of our own. There is no database behind this game and nowhere for your information to go.
What is not ours: the advertising, which Google serves in both the site and the app, and the two typefaces on the website, which load from Google Fonts. Both are explained below. Everything else on this page exists to be precise about how little happens here.
What the game itself sends
Nothing. Every battlefield runs entirely on your own device — OUTPOST in your browser on this site, all seven on your phone in the app. Your position, your time, the number of guards you eliminated, your result card: all of it is computed where you are, and none of it leaves. There is no server keeping score, because there is no server. Nothing checks whether you are allowed to play a battlefield either: which ones this site offers is simply which ones it carries.
There is no account and no save server, in either version. Everything the game keeps — battlefields cleared, keys, best times, your break-reminder setting, your choice of light or dark, and how long you have spent on the field — is written into your own device's storage, in that one browser or that one app. None of it is sent anywhere. Installing the app does not carry your browser progress across, and nothing you do here unlocks anything there: they are two copies of a game that have never met.
If you clear your browsing data, or uninstall the app, that progress is gone and it cannot be recovered by us or by anyone else. Private and incognito windows throw it away the moment you close them. Progress made in one browser, or on one device, never appears in another — the website and the app do not share anything, and never see each other.
This is a privacy decision, not an oversight: storing nothing on a server is exactly why we hold no data about you. The cost of that is the paragraph above, and you should know it before you spend an evening on it.
The result card the game draws for you is generated on your device as an image. We never receive a copy. If you save it or post it, that is you doing it, not us.
Advertising on this website
The website is paid for by Google AdSense, and that advertising does involve data:
- Google and its partners use cookies to serve ads, including ads based on your previous visits to this and other websites.
- Those cookies may register things like your approximate location from your IP address, your device, your browser and which pages you looked at.
- We do not control those cookies, cannot read them, and never see the data in them. We see only a total earnings figure in an AdSense dashboard.
You can turn personalised advertising off in Google's Ads Settings, and opt out of many other networks at aboutads.info/choices and optout.networkadvertising.org. The ads do not disappear; they stop being targeted. The game plays exactly the same either way, and it does not need cookies at all.
Google's own account of how it handles data on sites using its services: policies.google.com/technologies/partner-sites.
Advertising in the Android app
The app is free and is paid for the same way, by advertising served by Google AdMob. The mechanics on a phone are not cookies, so this is what actually happens:
- The advertising SDK reads your device's advertising ID — a resettable identifier Android provides for exactly this purpose — along with coarse device information such as model, operating system version, language and approximate region derived from your IP address.
- That information goes to Google, not to us, and is used to select and measure ads. We never see it. As with the website, we see a total earnings figure and nothing else.
- The app needs internet access to fetch ads. That is the only reason it asks for it. It does not ask for your contacts, your photos, your files, your microphone, your camera or your precise location, and it does not read anything else on your phone.
- The game itself works offline. With no connection you get no ads and the same game.
On Android you control this in Settings → Privacy → Ads, where you can reset the advertising ID or delete it entirely. Deleting it stops personalised advertising; the app keeps working and the game is unchanged.
If you installed from the Play Store, the listing carries a Data safety disclosure generated from what the app actually does. If the two ever disagree, tell us and we will correct whichever is wrong.
The Play Store listing is the only place we distribute the Android app. We do not hand out an .apk here or anywhere else, so a copy of TURNSTONES 007 offered on a mirror, a forum or an apk aggregator is not ours: it is a file we have never seen, cannot vouch for, and nothing in this policy can be a promise about what somebody else's repackaged build does with your phone.
Going through the store is also what keeps it honest — the listing is reviewed, updates arrive on their own, and the data-safety disclosure sits beside the download where you can read it before you install.
Hosting and fonts
This site is hosted on Cloudflare Pages. Like every web server on earth, Cloudflare logs requests — an IP address, a browser string, which file was asked for. That is ordinary server operation, used to serve the page and to stop abuse. We do not build profiles from it and in practice we never look at it.
The two typefaces load from Google Fonts, which means your browser makes a request to Google's servers and Google sees your IP address in the process. If that bothers you, write to us and we will host the fonts on this site instead — it is a small change and we are happy to make it. The app carries its typefaces inside the install and requests nothing.
Your choices and your rights
Block or delete cookies whenever you like; the website will not notice. If you use an ad blocker, the page still works and the ad boxes simply stay empty. On the app, reset or delete the advertising ID as described above.
If you are in the EEA, the UK or Switzerland, you have rights over personal data held about you — to see it, correct it, delete it, or object to its use. Because we hold none, almost every such request really belongs to Google, and Google's own privacy tools are the fastest route. Write to us anyway if you want help finding the right door.
If you are in California: we do not sell or share personal information, because we do not collect any.
Children
Neither the website nor the app is directed at children under 13, and since we collect nothing, we do not knowingly collect anything from them either. The advertising in both is configured as not directed to children. If you believe a child's information reached us somehow, write and we will look into it.
Changes
If this page changes, the date at the top changes with it. There is no mailing list, so if the detail matters to you, re-read it now and then. A change to what the app does will land here and in the Play Store data-safety disclosure at the same time.
Contact
Anything on this page: turnstones007@gmail.com, or the contact page.