Private-beta policy draft
Privacy & data practices
These statements describe the proposed curated-beta baseline, not finalized legal terms or a claim of compliance. Public self-service submissions remain locked until policy approval. The owner must approve age handling, creator licensing, retention and escalation procedures.
Information used by the platform
- OAuth provider identity and session data support sign-in. Provider email is not public by default; you choose your own handle, display name and bio.
- A secure, HttpOnly guest cookie supports this browser’s activity for a proposed 90-day period. The server stores a hash of its secret. Losing it loses guest edit access unless you explicitly claim the activity after login.
- Turnstile verification is separate from guest identity. Guest play grants last 60 minutes and posting freshness is 15 minutes; the CAPTCHA token is not an application session.
- Public ratings and comments, upload processing records, private reports and moderator audit records support the core service and safety operations.
- Page, launch-request, frame-load and outbound-click signals are labeled aggregates—not proof of a unique person, successful gameplay, purchase or follow. No ad pixels or game-embedded platform tracking are part of this baseline.
Proposed retention
Uncompleted uploads: 24 hours. Failed/sealed builds: seven days unless held. Guest credential hashes: up to 90 days. Play records and raw analytics: seven days. Daily aggregates: up to 13 months. Rotating network abuse signals: 24 hours. Sampled redacted logs: seven days. Reports and moderation audit: 180 days, with lawful or security exceptions. Published builds retain current and previous approved data and a minimum retirement delay. Backups propose a 30-day expiry.
Final retention and regional obligations require owner/legal approval. These are proposed engineering defaults, not unconditional deletion promises.
Your controls
Settings lets members edit their public profile, explicitly link or unlink providers, revoke sessions, claim this browser’s guest activity or request deletion after recent sign-in. Deletion revokes sessions immediately and schedules personal-data cleanup; the proposed target is 30 days, subject to lawful holds and backup expiry. Retained thread structure may be anonymized.
Creator games run on isolated origins. Browser storage is best effort, not a cloud-save service. Approved outbound links go to independent sites with their own policies. Turnstile and OAuth providers process information under their own notices.
Contact and escalation
The owner must assign a moderation and rights/takedown escalation contact before launch. In-product reports are available when participation is configured; do not treat this beta as having an operational response-time guarantee.