PRIVACY POLICY
Last updated: July 5, 2026
The short version: players give us nothing, creators give us almost nothing, and we sell nothing. No ads, no trackers, no analytics scripts, no data brokers.
1 · What we collect
| Who | What | Why |
|---|---|---|
| Players | Nothing. No account, no cookies, no tracking. A per-game play counter increments — anonymously. | — |
| Players (high scores) | Two- or three-letter initials you choose, plus your score, when you enter a high-score row. Displayed publicly on that game's leaderboard. | Showing the leaderboard. |
| Creators | Username, password (stored only as a salted hash), email only if you choose to add one for account recovery, and the games you write. | Operating your account and displaying your games. |
| Logged-in players | A log of which games you've played and won (game id + timestamp), a running count of distinct games you've won, and a heuristic quality flag on each of your own published games. Never shared. | Internal analytics; informing future features. |
| Everyone | IP addresses, briefly, in security and rate-limit logs. | Stopping abuse (signup floods, password guessing, spam submissions). |
| Donors | Payment is processed entirely by Square; we receive a confirmation and the amount — never your card number. Square's own privacy policy applies to the checkout page. | Recording your donation. |
The Arcadia language itself cannot collect data: games have no text input, no network access, and no way to identify a player. This is by design — see Safe by Design.
2 · Cookies
One cookie, arc_session, set only when a creator logs in, used only to keep
you logged in. No advertising or analytics cookies exist on this site.
3 · Children
Playing requires no personal information at any age. Accounts are for ages 13+ (younger creators can use the Studio without an account, or publish through a parent's or teacher's account). We do not knowingly collect personal information from children under 13; if you believe a child has created an account, contact arcadia@sensym.ai and we will delete it. We never use personal data for advertising — there is no advertising.
4 · Sharing
We share data with no one, with three narrow exceptions: Square (payments), Cloudflare (our hosting provider — data is stored and processed on their infrastructure), and authorities when the law genuinely requires it. We will never sell personal data.
4a · Automated checks on submitted games
Every game you submit for publishing passes a deterministic content check (title, description, and on-screen text) before it goes live. Clean submissions auto-publish; grey-area ones go to a human reviewer; clearly disallowed ones are auto-rejected with the reasons named to you. A nightly job re-runs the current rules against every published game and can pull a game back for human review if the rules have tightened since publish. You can appeal any automated decision by emailing arcadia@sensym.ai and a human will look at it. The rules themselves are versioned and the criteria are visible in the site's source code.
5 · Retention & deletion
Account data lives as long as your account. Delete your account and we delete your profile and games; security logs age out within 90 days; backups clear on their rotation schedule (30 days). To delete your account or request a copy of your data, email arcadia@sensym.ai — we answer within 30 days.
6 · Your rights
Depending on where you live (GDPR, UK GDPR, CCPA, etc.) you may have rights to access, correct, delete, or port your data, and to complain to a supervisory authority. Since we hold almost nothing, exercising them is quick: arcadia@sensym.ai. We don't discriminate against anyone who does.
7 · Security
Passwords are hashed (PBKDF2, per-user salts), sessions are stored hashed with strict cookies, all traffic is HTTPS, and moderation/security events are logged. No system is perfect; if a breach affects your data we will notify you as the law requires.
8 · Changes & contact
Material changes appear on this page with a new date. Controller / operator: SenSym, LLC (Arizona, USA). Contact: arcadia@sensym.ai.