Buddy Towers privacy

Applies to the Buddy Towers website (buddytowers.com), the Buddy Towers iOS app, and its iMessage extension. Last updated October 13, 2026.

What Buddy Towers collects

Your name, chosen crew, difficulty, and best solo times are stored on your device.
A random identifier lets you rejoin a live race after a dropped connection. It is stored on your device and sent only to the race server when you join a race (see below).
On iOS, the app stores which crew packs you own and which crew you chose in a container shared with its iMessage extension, so challenge bubbles show the crew you picked. This list is a copy of what Apple's App Store reports to the app. It stays on your device.

When you join a live race, your device sends the race server your name, your moves, and the rejoin identifier. The server shows your name, moves, and times to the other players in the room. The rejoin identifier is never shown to other players; the server uses it only to give your seat back if you reconnect.
The server holds the room in memory only. It is discarded when everyone leaves or the room sits idle. Nothing is written to a database.
The server runs on Cloudflare, which processes network requests (such as IP addresses) to deliver the service.

A challenge is a message in your conversation. The card, and each player's name, time, move count, chosen taunt, and the anonymous identifier that Messages assigns to each participant for the app, are stored in that message's link and sent through Apple's Messages service. Buddy Towers servers do not receive them.
The link points to buddytowers.com. If someone opens it in a web browser instead of the app, the browser sends the link to buddytowers.com like any other web request.

Crew packs are bought through Apple's App Store. Apple handles payment; Buddy Towers never receives your payment details, Apple ID, or purchase history.