Privacy Policy

Effective: 2026-10-06

This policy explains how NoInternet Arcade ("we", "us"), available at nointernet.space, handles personal data. We collect as little as possible: you can play every game without an account and without giving us any personal information.

1. Data we collect

When you just play

• On your device only: high scores, game settings, Invoker training stats and your sound preference are stored in your browser's local storage. They never leave your device unless you sign in and choose to sync.
• Analytics: we use self-hosted Umami analytics, which does not use cookies and does not store IP addresses. It records page views, referrer, country, browser and device type, and anonymous game events (for example "game started" or "game over" with the score) in aggregate.
• Server logs: our web server logs technical request data (a truncated IP address with the last part removed, user agent, URL) for security and troubleshooting. Logs rotate automatically and are kept only briefly.
• Play counter: we count how many games are started per day, without any user identifier.

When you sign in

• Your email address (to send sign-in links and identify your account), the account creation date and a public nickname shown on leaderboards (randomly generated, you can change it).
• Scores you submit to the online leaderboards and, for the Invoker Trainer, your training statistics if you are signed in.
• A session cookie (ni_sid) that keeps you signed in, plus two small helper cookies (ni_in, ni_af) that let pages show your account state and hide ads before they load.
• If you use "Sign in with Google", Google shares your email address with us. We do not receive your Google password or contacts.

When you buy the Ad-Free Pass

Payments are processed by Stripe. Your card details go directly to Stripe and never reach our servers. We store only your Stripe customer ID, the subscription status and the date the current period ends. Stripe's processing is governed by the Stripe Privacy Policy.

When you contact us

We store the name, email address and message you send through the contact form so we can answer you.

2. Advertising

For visitors without the Ad-Free Pass we show ads served by Google AdSense. Google and its partners may use cookies or similar technologies to show ads based on your visits to this and other websites. In the European Economic Area, the United Kingdom and Switzerland, ads are only personalised after you give consent through the consent banner (a Google-certified consent management platform) and Google Consent Mode; without consent only non-personalised, limited ads are shown. You can change your choice at any time with the Privacy choices link in the footer. Learn more in How Google uses information from sites that use its services and manage personalised ads at Google Ad Settings. Ad-Free Pass holders do not load any ad code.

3. Why we use your data (legal bases)

• Providing the service (accounts, leaderboards, the Ad-Free Pass): performance of a contract.
• Security, fraud and cheat prevention, aggregated analytics: our legitimate interests in running a safe, working website.
• Personalised advertising: your consent, where the law requires it.
• Accounting records for payments: legal obligations.

4. Sharing

We do not sell your personal data. We share data only with service providers that help us run the arcade: Stripe (payments), Google (sign-in with Google, advertising), our email delivery provider (sign-in emails) and our hosting provider (servers located in the European Union). Some of these providers process data in the United States under appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

5. How long we keep data

• Account data, scores and stats: until you delete your account.
• Sign-in links expire after 20 minutes; sessions after 60 days of inactivity.
• Subscription and payment records: as long as required by tax and accounting law.
• Contact messages: up to 24 months.

6. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or the California Consumer Privacy Act), you have the right to access, correct, delete or export your personal data, to object to or restrict processing, to withdraw consent at any time and to lodge a complaint with a data protection authority. You can delete your account and all associated scores and stats yourself on the account page (please cancel an active Ad-Free Pass first). For any other request, use the contact form and choose "Privacy request".

California residents: we do not sell personal information. Advertising cookies may be considered "sharing" for cross-context behavioural advertising under the CCPA/CPRA; you can opt out with the Privacy choices link in the footer, and we honour Global Privacy Control signals where supported by our consent platform.

7. Children

The arcade is a general-audience website and is not directed at children under 13. We do not knowingly collect personal data from children under 13 (or under 16 in the EEA). Playing does not require an account. If you believe a child has created an account, contact us and we will delete it.

8. Security

The whole site uses HTTPS. Session tokens and sign-in tokens are stored only as cryptographic hashes, cookies are HTTP-only where possible, and access to our servers is restricted.

9. Changes

We may update this policy. Material changes will be announced on this page with a new effective date.

10. Contact

Questions about privacy? Reach us through the contact form.