Privacy policy

Updated 5 November 2026. Pushing Tin over Grafton is operated by Grafton Machine Shed. The game collects anonymous usage analytics and keeps game journals. Playing requires no game account, name, email address or other personal details. We do not set persistent cookies.

Game journals

A journal records the exercise, the information available to each controller, instructions and actions, timing, pilot replies and outcomes. Lessons also record learner answers, decisions and teaching text sent to the simulator by the tutor. Random session and run identifiers link the activity within your games; they are not player names or account identities. A connected AI client can supply its software name and version.

The simulator receives the information sent in its tool calls; it does not receive your whole ChatGPT conversation. Learner answers sent by the tutor retain the words you wrote. Keep answers about the simulation and leave out personal or sensitive information.

We use game journals to operate the simulation, support replay and review, improve the product, and train AI internally. We keep these journals indefinitely for internal AI training. We do not publish them or supply them to others for their own training.

Browser storage

The browser workstation uses local storage to remember current game and resume information, including session and run identifiers, and preferences such as display settings and simulation pace. This lets you return to a game and retain your choices. These saved values are separate from the page-load analytics identifiers described below.

Saved browser values remain until the game replaces or removes them, or you clear the site's stored data in your browser. Clearing site data removes saved preferences and may remove your browser's saved information for returning to a game. It does not delete server-side game records.

Anonymous usage analytics

We collect limited usage and performance reports without player names or email addresses: random page-load identifiers, device class, country, referring hostname, campaign tags, loading and display events, errors, event timestamps and sequences, durations, audio playback events and game lifecycle counts. Page-load analytics identifiers are generated afresh on each page load and are not stored as analytics cookies. Game-related events can also carry a random game identifier and scenario name, so events about the same game can remain associated when you return to it. These identifiers describe page loads and games, not a player's identity.

Our server sends limited usage reports to Google Analytics to help us understand use and improve reliability. Those reports exclude learner answers, controller instruction contents, Watch links and full page URLs. Google receives the random page-load and game identifiers and event metadata described above. It processes these reports as our analytics provider; processing may take place outside Australia.

Google Analytics event-level data is retained for two months. Aggregate reports may be retained longer; the event-level retention setting does not limit aggregate reports.

Hosting and access

Amazon Web Services hosts the game and stores its records on our behalf in Sydney, Australia. Application logs are configured for seven-day retention. Hosting and analytics providers process the information needed to deliver their services.

Your AI client receives the game information returned to it. Its handling of your chat and tool results is governed by that client's own policies. A Watch link gives its holder access to the associated live display; share it only with people you intend to invite.

Your choices and contact

You can stop playing at any time. Closing a game does not delete its recording. There is no in-game record-deletion control, analytics opt-out setting or account profile. We have no player-name directory; a request about a record may need information that identifies the particular run.

For privacy questions or a request about a particular record, contact admin@grafton.ai. Do not post Watch links publicly. If you choose to email support, that separate correspondence includes your email address and the details you send; playing the game does not require an email address. Our email service providers process correspondence to deliver messages and replies. We keep support emails while handling the request and for 12 months after it is resolved.

Published by Grafton Machine Shed.