The small print

Privacy notice

Last updated:

Unabated Games Ltd (company 08502769) runs Unabated Games Arcade and is responsible for your information (the "controller"). Contact us at [email protected] or at the address on our contact page.

The short version: we only collect what the arcade needs to work. We don't sell your information, we don't show adverts from other companies, there are no analytics or tracking cookies, and we don't send marketing emails.

What we hold, and why

Each line says what the information is, what we use it for, and the legal reason that lets us use it.

Your account: your handle (the name other players see; we don’t ask for your real name), email address, password (stored scrambled, never readable), avatar, and any profile details you add (tagline, bio, location, pronouns, links).
To run your account, show your handle and avatar to other players, and email you about your account.
Legal basis Our contract with you
Your date of birth. Other players never see it.
To check you’re old enough to have an account, and to give players under 18 safer settings.
Legal basis Legal obligation (protecting children); our contract with you
How you found us, recorded once when you make your account: the player whose invite link or shared score brought you, if one did; the code or campaign tag in the link you followed; the name of the website you came from (not the page); the first arcade page you saw; and when you arrived.
To learn which links bring players, so we can thank the players and partners who bring them, and plan the arcade. Partners never learn who you are: at most, they get totals.
Legal basis Legitimate interests (knowing how players find us)
Sign-ins: the IP address and browser of each session.
To keep you signed in and protect accounts from attack.
Legal basis Legitimate interests (security)
Playing: games you play and for how long, scores, replays of scored runs, achievements, streaks, game saves, your library and wishlist.
To save your progress, run leaderboards and daily challenges, and stop cheating.
Legal basis Our contract with you
Game notifications: when a friend passes your best score, and your daily streaks.
To tell you when a friend beats your score and remind you before a streak ends, if you’ve turned those on. When you beat a friend’s best score, we tell them, in the arcade and by notification if they’ve turned that on; they can already see your scores on the friends leaderboard. We keep a note of which of these we’ve sent you for 14 days, so nothing is sent twice.
Legal basis Our contract with you
Events games send while you play (for example "level cleared" with the level number).
So studios can see, in totals, how their games are played and make them better. Guests are counted without any identifier.
Legal basis Legitimate interests (improving games)
Friends, groups, messages (including direct messages), reactions, mentions and notifications, the players you block or mute, and, for each device you turn notifications on for, its push address, your notification settings and your time zone (from the device), so quiet hours and reminders follow your clock.
To deliver them to the people you chose to share them with.
Legal basis Our contract with you
Conversations with us: messages in your arcade inbox, and emails you send us or reply to.
To answer you, and to tell you about decisions on your account or your reports.
Legal basis Our contract with you; legitimate interests (support)
Purchases: coins bought, spent and gifted, gift cards, the Arcade Pass, and your Stripe customer number. We never see your card details.
To give you what you paid for, keep your wallet right, pay studios, and keep the records tax law requires.
Legal basis Our contract with you; legal obligation
Studios: the studio’s name, logo, website, team members and API keys, the players it invites to test its games (and the email addresses it invites, until the invitation is accepted or expires), and its Stripe account for payouts.
To publish its games and pay it.
Legal basis Our contract with the studio
Reports, and what we did about them.
To keep the arcade safe and meet our legal duties.
Legal basis Legal obligation; legitimate interests (safety)
The email address of a friend you invite.
To send them one invitation. We don’t keep it.
Legal basis Legitimate interests

If you play a free game without an account, we record the play (which game, and when) but nothing that identifies you. Until you make an account, how you found us stays in the page you have open: nothing is stored on your device, and it's forgotten when you close the tab. What we keep in your browser is on the cookies page.

Some games in the arcade are marked Promoted: we've chosen to show them more. They're picked by where they appear on the page, your country, whether you're signed in or have the Arcade Pass and, if you've told us, whether you're 18 or over. Never by what you've played. When one is on screen or clicked we add one to a daily count of which promotion, where, your country and whether you were signed in. The count doesn't say who you are, and nothing is stored on your device for it.

Who can see it

  • Other players see your handle, avatar, profile and scores, and the messages you send to them or to groups you're in.
  • Studios see their games' leaderboards (with players' handles) and totals of how their games are played, and the handles of players they invite to test their games. They don't get your email address.
  • Companies that run parts of the arcade for us, only to do that job:
    • Hetzner (Germany) hosts our servers and database.
    • Cloudflare carries traffic to the arcade, protects it, and stores pictures and backups.
    • Resend sends our emails, and receives replies to them.
    • If you turn on notifications, your browser's push service (Google for Chrome and Android, Apple for Safari and iPhones, Mozilla for Firefox) delivers them. It carries them encrypted, so it can't read them.
    • IONOS hosts our support inbox.
    • GIPHY gets what you type into the GIF search, but not who you are. Your browser loads GIFs from GIPHY.
  • Stripe takes payments and pays studios. It's responsible for the payment details it collects, under its own privacy policy. We give it your handle, email address and account number.
  • The police and other authorities, when the law requires it, and the National Crime Agency when we report child sexual abuse.

Cloudflare, Resend, Stripe and the push services may handle information in the United States. When they do, it's protected by safeguards UK law approves, such as the UK–US data bridge or standard data protection clauses.

How long we keep it

  • Most information is kept while your account is open. When you delete your account, we delete it within 30 days, and it leaves our backups within 30 days after that.
  • Some things stay after an account is deleted, without your handle on them: plays and game events, and records of payments, which tax law requires us to keep for six years.
  • Reports, and what we did about them, are kept for six years after they're closed, as a record of our moderation. If you made a report and delete your account, the report stays without your name on it.
  • When you delete a message, its text is removed (including from other people's notifications) and a note that it was deleted stays.
  • Sign-in records (IP address and browser) are deleted three months after a session ends.
  • Our server logs record errors, not visits, and are overwritten as they fill.

Your rights

You can ask us to:

  • give you a copy of the information we hold about you;
  • correct it (you can change your name, email and profile yourself);
  • delete it, including your whole account;
  • stop or limit using it, or object to how we use it;
  • give it to you in a form you can take elsewhere.

Email [email protected] from the address on your account. We'll reply within a month. If you're not happy with how we've handled your information, tell us, and you can also complain to the Information Commissioner's Office, the UK's data protection regulator.

Children

You need to be 13 or older to make an account, and we ask your date of birth when you sign up. If we learn that an account belongs to someone younger, we'll close it and delete its information. Parents can contact us about a child's account. Players under 18 get safer settings: for example, we don't prompt them to turn on notifications, we don't send them streak reminders, and notifications about friends' scores are off unless they turn them on.

Decisions made by computer

The arcade automatically rejects scores outside a game's limits, so impossible scores don't reach the leaderboards. We don't make any other decisions about you by computer alone. See our terms for how we moderate.

Changes

We'll update this notice when what we do changes, and email you about anything important first.

Questions? Contact us.

en