Privacy policy

Last updated October 13, 2026

We collect as little as we can to run the service.

What we store

• Account: email, username, a hash of your password (never the password itself), profile text you choose to add.
• Sign in with Google: if you use it, Google (through Firebase Authentication) tells us your Google account id, email address and name. We use them only to log you in and to fill in your new account; we do not get your Google password or contacts.
• Your uploads: the game files and page text you publish.
• Usage: anonymous play counts per game per day, and anonymous play sessions (a random id, device type — phone, tablet or desktop — whether the game loaded and how long it was played) so creators see aggregated stats; sessions are deleted after four months. Your IP address is used briefly in memory to limit abuse and is not stored with your account.
• Community: comments, ratings, collections and jam votes you make. Comments and public collections are visible to everyone with your username; ratings and votes are only shown as totals.
• Cookies: one session cookie to keep you logged in. No advertising or tracking cookies.
• Site statistics: we use Google Analytics for Firebase in cookieless mode to count page views and see which pages work. It sets no cookies and is not used for advertising (Firebase keeps a random installation id in your browser’s storage); Google receives the page address, your browser and device type and an approximate location derived from your IP address.

Games

Games run on a separate domain and cannot read your ArcadeForest account or cookies. Data a game saves (for example progress in local storage) stays in your browser.

Your rights

You can edit your profile and delete your games at any time. To delete your account or get a copy of your data, contact us from your account email.

Where data lives

All data is stored on our own server and in backups we control. We do not sell it. Apart from Google (sign-in and the statistics above) and Amazon SES (sending our emails), we do not share it.