🔒 Privacy Policy

1. Information We Collect

1.1 Device & Usage Information

When you access Game Arcade, we automatically collect:

• Device Identifier: A randomly generated device ID stored in your browser's localStorage, used to identify your device across sessions.
• IP Address: Your public IP address, which is hashed together with the device ID to create an anonymous user key. Raw IPs are stored for order management and abuse prevention.
• Access Logs: Standard web server logs including the pages you visit, game types accessed, and timestamps.

1.2 Payment Information

When you make a payment (¥1 for 7-day access), we generate an order ID linked to your user key. Payment processing is handled by third-party payment providers (e.g., Alipay). We do not store or process your credit card numbers, bank account details, or full payment credentials on our servers.

1.3 Quiz & Assessment Data

Game Arcade includes personality tests (Big Five, MBTI-style, DASS-21, career assessment) and educational assessments. Your answers to these assessments are processed by our AI service (DeepSeek API) to generate personalized analysis reports. These responses are not stored permanently beyond the duration of your session unless explicitly stated.

2. How We Use Your Information

• Service Delivery: To authenticate your access, manage your subscription status, and deliver game content.
• Analytics: To monitor platform usage, diagnose technical issues, and improve our game offerings.
• AI Analysis: To generate personalized reports from quiz and assessment answers via third-party AI services (DeepSeek).
• Security: To detect and prevent fraudulent activity, abuse, or unauthorized access.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Sharing & Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We use third-party services including DeepSeek (AI analysis), Alipay (payment processing), and infrastructure hosting providers. These providers are contractually bound to protect your data and use it only for the services we engage them for.
• Legal Requirements: If required by law, court order, or government regulation, we may disclose your information to comply with legal obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4. Data Retention

We retain your data only as long as necessary:

• User accounts & subscription records: Retained for the duration of your subscription plus a reasonable period thereafter for billing and audit purposes.
• Order records: Retained for financial record-keeping as required by applicable regulations.
• Anonymous device identifiers: May be retained indefinitely in anonymized form for aggregate analytics.
• Raw IP addresses: Retained temporarily for operational purposes and periodically purged.

Our database has a built-in capacity limit of 2,000 user records to prevent indefinite data accumulation. Older records are overwritten as new users register.

5. Data Security

We implement reasonable technical and organizational security measures to protect your data, including:

• Hashing and salting of user identifiers (SHA-256).
• HTTPS encryption for all data transmitted between your browser and our servers.
• Database stored with WAL (Write-Ahead Logging) for integrity.
• Limited administrative access with manual review processes for payment activation.

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Cookies & Local Storage

We use browser localStorage to store a randomly generated device identifier for session continuity. We do not use third-party tracking cookies. The device ID cookie (device_id) is set with a 1-year expiry and is used exclusively for authentication purposes.

You can clear this data at any time through your browser settings. Clearing it will generate a new device ID, which may reset your trial status.

7. Third-Party Services

Game Arcade integrates with the following third-party services:

• DeepSeek API — Used for AI-powered analysis of personality tests and assessments. Quiz answers are sent to DeepSeek servers for processing. Review DeepSeek's privacy policy at deepseek.com/privacy.
• Alipay — Used for payment processing. Payment transactions are handled directly between you and Alipay; we only receive confirmation of payment status.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Objection: Object to the processing of your data for certain purposes.
• Data Portability: Request transfer of your data to another service provider.

To exercise any of these rights, please contact us using the information in Section 11.

9. Children's Privacy

Game Arcade is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be posted on this page with an updated "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

---

← Back to Game Arcade