PRIVACY POLICY

BnW Arcade · bnwarcade.com · Effective 5 July 2026

BnW Arcade is a free browser and mobile arcade with no ads and no accounts. We collect as little as a shared leaderboard allows. This page explains exactly what is processed, why, and your rights under the EU/UK General Data Protection Regulation (GDPR) and applicable US state privacy laws.

1. WHO IS RESPONSIBLE

The data controller is Jan (Zoro Solutions), the developer of BnW Arcade. Contact for anything in this policy: jan@zorosolutions.com.

2. WHAT WE PROCESS, AND WHY

DataWhere it livesPurpose & legal basis
Player name you enter, game scores, submission time Leaderboard database (Supabase, hosted in the EU) Running the public daily/monthly leaderboards you choose to compete on. Legal basis: performance of the service you request (Art. 6(1)(b) GDPR). Names are shown publicly next to scores.
Random per-device ID (not tied to your hardware or identity) Stored on your device; sent with score submissions Rate limiting and duplicate prevention. Legal basis: legitimate interest in keeping the boards fair (Art. 6(1)(f)).
Salted, one-way hash of your IP address (never the address itself) Leaderboard database Rate limiting and abuse prevention. The salt is secret, so the hash cannot be reversed to your IP. Legal basis: legitimate interest (Art. 6(1)(f)).
Name, settings, personal bests; email only if you enter it in the optional reminder box Your own device only (browser localStorage / app preferences) Remembering you between sessions. This data never leaves your device unless you submit a score (name only). Clearing site data or uninstalling removes it.
Anonymous usage statistics (pages viewed, game started, coarse device type) Umami Analytics (cookieless; no personal identifiers stored) Seeing which games get played so we improve the right ones. Legal basis: legitimate interest (Art. 6(1)(f)).
Standard server logs (IP address, request time) Cloudflare (site hosting/CDN), short-lived Delivering the site and protecting it from attacks. Legal basis: legitimate interest (Art. 6(1)(f)).

We use no advertising, no tracking cookies, no fingerprinting, and we never sell or rent data. Donations via the Ko-fi button happen entirely on ko-fi.com under Ko-fi's own privacy policy; we never see your payment details.

3. HOW LONG WE KEEP IT

Leaderboard entries (name, score, time) stay as long as the boards operate, since they are the product. The device ID and IP hash are kept with the score row for abuse analysis and are deleted with it. On-device data stays until you clear it. Umami retains only aggregate, anonymous statistics. You can request deletion of your entries at any time (section 5).

4. WHERE IT GOES

The leaderboard database runs on Supabase servers in the European Union. The website is delivered by Cloudflare's global network, and analytics by Umami — both act as our processors and receive only the minimum described above. Where a processor handles data outside the EU/EEA, transfers rely on EU Standard Contractual Clauses or an adequacy decision.

5. YOUR RIGHTS

Under the GDPR (and similar US state laws such as the California CCPA/CPRA) you can ask us to: access the data we hold about you, correct it, delete it, restrict or object to its processing, or hand it over in a portable format. We do not sell personal information, so there is nothing to opt out of selling. Because we hold no account linking data to you, tell us the player name, approximate dates and game — we will locate and remove your entries.

Email jan@zorosolutions.com; we respond within 30 days. EU/UK residents may also complain to their local data protection authority; California residents will not be discriminated against for exercising their rights.

6. CHILDREN

BnW Arcade is suitable for general audiences and requires no account, real name, or contact details to play. We do not knowingly collect personal information from children under 13 (US) or under 16 (EU). Player names are screened by a content filter. If you believe a child has submitted identifying information as a player name, contact us and we will remove it.

7. CHANGES

If our data practices change, this page changes with them and the effective date above is updated. Substantive changes will be noted on the arcade's About screen.

← BACK TO THE ARCADE