PasNinja Arcade← Back to the arcadePrivacy Policy
PasNinja Arcade ("we") is operated by PasNinja, based in Algeria. This policy explains what we collect when you use the arcade website, the PasNinja desktop app and our online game services, why, how long we keep it, and your rights. We follow Algerian Law No. 18-07 on the protection of natural persons in the processing of personal data and, for players in the European Union, the GDPR.
Contact: [CONTACT EMAIL: fill in before launch]
What we collect
| Data | Why | How long |
|---|---|---|
| Account: username, optional email, avatar, your password stored only as a scrypt hash (we can't read it) | Your account and sign-in | Until you delete the account |
| Game progress: XP, level, coins, achievements, statistics, match results | Saving progress, leaderboards | Until you delete the account |
| Beta access: which invitation code you redeemed and when | Closed beta access | Until you delete the account |
| Sign-in sessions (stored as a one-way hash) | Keeping you signed in | 60 days, or until you sign out |
| IP address | Security: rate limits, stopping password guessing and abuse, logs of admin actions | Security logs are rotated (roughly the most recent months); not used for advertising |
| Device type (PC/phone/tablet), browser name, a random device ID stored in your browser, which games you open and for how long | Knowing what works and what breaks, live player counts | Aggregated statistics; guest device records are capped and overwritten |
| Error reports from games (error message, page, technical details) | Fixing bugs | The latest 1,000 error groups |
| Reports, appeals and feedback you send (message, optional screenshot, optional contact) | Moderation and support | Deleted 180 days after we close them |
We do not sell your data, show targeted ads, or use third-party trackers.
Multiplayer and chat
- Many games connect players directly (peer-to-peer). Like any direct connection on the internet, other players in the same match can see your public IP address. If a direct connection isn't possible, traffic goes through our relay (TURN) server.
- Lobby chat travels between the players of a lobby; our servers don't store it. You can mute a player by clicking their name.
- Online play needs an account, and only one device at a time can play online with the same account.
Legal bases
Running the service you asked for (account, progress, multiplayer); our legitimate interest in keeping the arcade secure and working (security logs, error reports, statistics); and your consent where the law requires it.
Who else handles data
Our hosting provider (the server), a relay (TURN) server for multiplayer, and encrypted off-site backups at a cloud storage provider: backups are encrypted on our server before they leave it, so the storage provider can't read them. Server alerts sent to the operator (Discord/Telegram) contain technical information, not your personal data. Server backups are kept for 14 days on the server and, encrypted, for a limited time off-site.
Your rights
You can access, download, correct and delete your data, and object to processing. Most of it you can do yourself below or in your profile (rename). Otherwise contact us. You can also complain to the Algerian data-protection authority (ANPDP) or, in the EU, to your local data-protection authority.
Signed in on this browser? Download a copy of everything we hold about your account, or delete it for good.
Children
You must be at least 13 to create an account. If you are under 18 you need a parent's or guardian's permission. If we learn that an account belongs to a child under 13, we delete it.
Security
Passwords are hashed, sessions are stored as hashes, connections use HTTPS, the admin dashboard is separated from the games and protected by two-step verification, and backups are encrypted. No system is perfect: if a breach affects you, we will tell you and the authorities as the law requires.
Changes
We'll announce important changes in the arcade before they apply. The version at the top says which one you're reading.