Privacy

Effective October 28, 2026 · Betarian LLC

The short version

Who we are

Betarian LLC operates arcade.fun and is responsible for the platform processing described here. Independent creators and payment providers may be responsible for their own services and publish separate policies. Questions and privacy requests: hello@arcade.fun.

Your microphone

Games measure how loud you are, which note you're humming, and sharp sounds like “pew!”. That happens in your browser. These game-control readings do not send live audio to our servers. Optional opponent voice chat is a separate choice, described below. If you explicitly submit a run recording afterward, it can include your voice.

Games that listen for words use the speech recognition built into your browser. In Chrome, the audio goes to Google to be turned into text, under Google's privacy policy. Other browsers may use their maker's service, or not offer it.

Call the Lane's “Say anything” mode, when offered, streams your voice to OpenAI while that mode is connected, under OpenAI's privacy policy. It's off until you choose it.

Your camera

Camera games track your hands and face in your browser, using Google's MediaPipe software. The live tracking happens on your device, and we do not receive or store face or hand measurements. A run recording may include the camera picture and only reaches us if you explicitly submit it.

The first time you open a camera game, your browser downloads the tracking software and models from jsDelivr and Google's servers. As with any download, those services see your IP address.

The camera turns off when you go back to the arcade floor. The CAMERA light in the header shows whenever it's on.

Free-play scores

Finished score-based free-play runs automatically send a numeric score, round identifier, game build and input mode to the unverified free-play leaderboard. Scores are associated with your Arcade account or a browser guest identity; the public board uses a generated player nickname. This does not send a recording, face, voice or wallet balance. Each board keeps one personal best per identity, game build and mode. These scores are player-reported and are not evidence for prizes, wagers, launch eligibility or payments.

Run receipts are retained for up to 90 days to prevent duplicate posts, and personal bests remain while the leaderboard operates. Up to 100 interrupted score posts per identity stay in browser storage until acknowledged or site data is cleared. Retries remain with their original account or guest identity. Contact hello@arcade.fun for score-data requests.

Recordings of your runs

Runs are recorded in your browser: the game, its sounds, and microphone/camera input only when enabled for that run. Opponent voice chat is not mixed into these recordings. You can save the video or share it. Turn recording off in the setup row at the bottom of the arcade floor.

If you explicitly submit a recording to the separate video-reviewed leaderboard, we receive:

Choosing Submit score & video accepts sharing that run's video and audio with arcade.fun for human anti-cheat review. The submission notice explains that recordings may include faces and voices, and verified runs are shown publicly with their video, score and your name. We save the accepted wording, its version and the time with your submission. This review helps detect cheating; it does not guarantee a cheat-free score. Social publishing requires separate permission.

Suggestions and optional social videos

The update log lets signed-in Arcade players vote on published updates and send private change requests. We store the account reference, selected update, vote, request text, timestamps and review history to operate these features and limit spam. Only aggregate vote counts are public; voter identities, request text and private review notes are not published. If you separately choose public credit, we store your chosen nickname and permission with that request. An operator can link an implemented idea to an already-published update, where the nickname appears as a credit. Approval alone does not claim the change has shipped. You can remove public credit permission from Your change requests in that game’s update log; this removes the current public credit. Copies others previously made may remain. Contact hello@arcade.fun for account-data requests. These records do not authorize a payment or guarantee rewards.

After a game, you can send a private suggestion and optionally provide a public Solana address for possible rewards. We store your suggestion, game, reported score and duration, optional reward address, submission and review dates, and review decisions. A hashed sending address helps limit spam. Rewards are considered manually for implemented suggestions and are not guaranteed. No wallet signature or payment is needed to send feedback.

Social video permission is a separate checkbox, off by default for each run. Checking it alone uploads nothing. If you choose permission and press Send, we receive that run’s recording, which may show faces and include voices, along with the permission wording, version and time. The clip stays private for team review; it may be published on arcade.fun’s social accounts under that permission. Permission to submit a leaderboard score does not give social permission.

Your private receipt link shows the submission’s status and lets you withdraw video permission and delete the stored clip. Keep the link private. Withdrawing stops future use; for an existing social post, contact hello@arcade.fun for removal. Copies already shared may remain. Stored feedback clips expire after 30 days, with hourly cleanup. Permission and withdrawal records remain with the suggestion.

The last 30 submitted or retrying feedback forms and their private receipt links are kept in your browser to recover interrupted submissions. Draft text is not sent as you type. Clearing site data removes these saved links; a private link you kept elsewhere still works.

Evolver Mic and private editions

Evolver Mic is off until you click its microphone control. Click again to stop. Options include hold-to-talk and a remappable shortcut. Capture can continue while you pause or write feedback. Your browser’s speech service transcribes what you say (Google in Chrome); arcade.fun does not receive or store raw Evolver audio. Transcribed notes, including unfinished words retained when you stop, are kept in this tab’s session storage as a game-specific draft. Spoken and typed notes share the same visible editor. Hiding the tab, leaving the page, opening unrelated panels or changing games stops capture. Fn is a preferred shortcut with a V fallback, and can be changed.

At the end of a run, a draft of at least 10 characters is sent to arcade.fun to calculate a credit reservation. You can also request a quote while paused. Quotes use source size and the maximum AI output allowance; calculating one does not call the AI or spend credits. Unprepared quotes expire after 15 minutes and are removed when new quotes are requested. Preparing a quote signs it into a wallet-owned Studio project; its brief, source references, versions and jobs are retained with that project. Only approving a build sends the brief and source context to Anthropic. Payment receipts use the existing Studio process.

Built-in game evolutions are private AI adaptations from the original reference source. Studio creators can revise their own source. Other community games need creator source access before paid evolution is offered. The original public game and its saves, coin and leaderboard are unchanged. Saved job status powers in-app ready notices; optional browser notifications require permission and an open app page. No email or background push subscription is created. Drafts and notification dismissals remain in browser storage.

Games you upload

If you send in a game (when uploads are open), we store the file and the details you enter, including your name. After review, they're shown publicly.

Creator Studio

Studio sign-in verifies a message signed by your Solana wallet. We store your public wallet address, expiring sign-in records, project briefs, prompts, generated files, saved versions, credit usage and payment receipts. The sign-in token stays in your tab's session storage; pending payment receipts and unacknowledged build requests stay in local storage so you can recover them after a reload. We never receive your wallet's private key.

When you request a build, your project's brief, current source files and recent build requests go to Anthropic's Claude API. Don't put secrets or private personal information into a brief or game source. Your publishing contact email and payment details are not included in these AI requests. Preview files use unguessable version links on the games host: anyone you share a preview link with can play that version and fetch its files. Studio test controls simulate input readings without recording you.

Item shops and payments

Item-shop sign-in uses a message signed by your Solana wallet. We store the public wallet address, short-lived sign-in challenges and a hashed session token. The item-shop session token and wallet address are stored in this browser's local storage to let platform pages share an inventory sign-in; the server session expires after one day. Signing out invalidates that session. We never receive your recovery phrase or private key.

We store order IDs, the purchasing wallet, experience and item identifiers, exact amount and currency, payment option, creation and expiry times, the accepted purchase-terms version and time, payment status, confirmed payment references and refund/dispute status. For token payments, we also store the mint, network, creator recipient and finalized transaction signature. We use these records to verify payment, grant and restore items, prevent duplicate charges, provide support and address fraud, disputes and accounting obligations. Browser storage keeps unfinished request IDs, payment signatures and selected items so interrupted purchases can be recovered. Experience code receives its own reviewed catalog and item-ownership results, not your payment credentials or platform sign-in token.

Where card checkout is enabled, Stripe collects payment details directly on its hosted checkout and may process billing/contact, payment, device and fraud-prevention information under Stripe's Privacy Policy. Our shop does not store full card numbers or security codes. We send Stripe an order reference and the item and amount being purchased; payment and refund events update our order records. Ordinary item checkout does not buy cryptocurrency. A separately approved crypto onramp, if offered in the future, will have its own notice and identity-verification flow.

Inventory and purchase records are retained while needed to provide item access and for applicable accounting, fraud, refund/dispute and legal obligations. You may request access, correction or deletion at hello@arcade.fun; some payment records must be retained for those obligations. Public blockchain transactions cannot be deleted or altered by us. Clearing browser storage does not cancel a payment or delete a server inventory, and may remove the only local copy of an unfinished receipt.

What stays in your browser

Player accounts, automatic wallets and cloud progress

Optional Google and Solana-wallet sign-in is provided by Privy. Google processes its own login and consent. Privy receives the account information and wallet identities needed to authenticate you, create a Solana wallet for a new player without a wallet, and recover access. We verify signed account tokens and store a stable internal player ID, the provider's app-scoped identifier and verified public wallet addresses. We do not store your Google password, Google access token, private key or recovery phrase. Account linking requires proof through the provider; matching emails do not merge accounts or transfer assets.

Your account session uses a Secure HttpOnly cookie in production, scoped to the player API and expiring within one hour. Privy's client also keeps authentication storage to support return visits. We retain account progress, completed-run identifiers for duplicate protection, device import identifiers, versioned saves and bounded earlier save copies while your account remains active and the feature is supported. Native save imports use an explicit allowlist; financial receipts, wallet credentials, Studio authentication, videos, voice recordings and private project source are excluded. Supported hosted experiences receive only their own cloud save through the parent bridge, never your account token.

Guest progress remains in browser storage. Signed-in players can sync supported game saves and cosmetic EXP across devices; formats without an adapter stay local. Cloud conflicts preserve both copies for review. Local guest/account backups and pending EXP run retries remain on this device; clearing site data removes those local recovery copies. Download a backup from account settings or the game's save controls. Cloud saves are editable game state, never proof of a paid item, leaderboard score, prize entitlement or token balance. EXP has no cash value.

Signing out stops player-account sync on this device; it does not delete the server account, public blockchain records, or independently authenticated commerce/creator records. Contact hello@arcade.fun for account access, export or deletion requests. We verify control proportionately and never ask for a private key. Legally required payment records may need to be retained separately.

Connecting a wallet in the passport shares your public address through the existing wallet connection. Checking fees uses the blockchain RPC relay to read claimable trading fees. Connecting or linking an account does not approve a transfer; claims and purchases retain their own wallet review.

Action arcade games and incremental games work without microphone or camera access. Reactor Foundry stores factory progress and save times in local storage, applies up to eight hours of offline production, and offers backup export/import. Progress Knight and A Dark Room keep their saves on the separate games origin; they receive no platform player session or wallet credentials. Their hosted editions disable trackers and outgoing network connections. Clearing browser data removes these saves; back them up using each game's save controls. Incremental progress is not a verified competitive score.

Your settings (mic levels, sensitivity, recording, humming range), your best scores and your preferred leaderboard name are kept in your browser's local storage. Settings stay on your device. Your chosen name is sent when you submit a video-reviewed run; numeric free-play scores post automatically as described above. Clearing your browser's site data removes the local copies.

Children

Anyone can play. Sending feedback or videos, submitting runs, uploading games and creating accounts are only for people 13 and older. Only offer social permission if everyone included has agreed.

If you believe a child under 13 has sent us personal information, contact hello@arcade.fun and we'll delete it.

Keeping and deleting

To see, correct or delete what we hold about you, write to hello@arcade.fun.

Online matches and score challenges

Free online play uses a random private player session in browser storage. The server stores its hash, a pseudonymous player ID and a hashed sending address for rate limits. Game inputs, moves, clocks, ready checks, results and replay evidence are stored so games can reconnect. Match/replay access requires a participant’s session; an invite link lets its holder take the open seat in a private room or an ongoing public search. Public matchmaking continues until the first opponent joins. Clearing browser storage loses access to this guest session. Online boxing sends movement, guard and punch controls over an authenticated connection; its game controls do not use camera video or microphone audio.

Online board games and boxing offer optional voice chat after an opponent joins. Each participant chooses whether to join, listen only, or turn on a microphone. Live mono audio is relayed through arcade.fun’s authenticated room connection to the other joined participant; there is no public broadcast, video chat, transcription or audio storage. Voice is separate from game controls and run recordings. Mute stops microphone transmission; Leave voice stops capture and playback. Hiding the tab, leaving the game or ending the match stops voice and requires a new choice to reconnect. Evolver Mic is disabled while opponent chat is in use so conversations are not transcribed into evolution briefs. Another participant could record audio outside arcade.fun; do not share information you want to keep private.

Confirming a free score match sends the game version, speed/input mode and round identifier before play. A completed score sends automatically; leaving an entered run records a forfeit when the connection is available, or at expiry. The opponent's score is hidden until your attempt ends. This does not upload a video or require a wallet. A bounded result retry queue and unfinished entry stay in browser storage. Match and challenge history is kept for up to 30 days; expired records and inactive guest sessions are cleaned up when the match service is used. Active rooms are retained until they end. The wager quote preview moves no funds.

Free-play percentiles compare reported personal bests per account or guest identity. The separate video-reviewed percentiles compare the best approved score per display name. Both use the same game build and input mode; neither proves unique people. Video submission remains an explicit, separate action.

Privacy choices and rights

We use information to provide the features you request, operate and secure the service, meet legal obligations and, where needed, act on your permission. We do not sell personal information or share it for cross-context behavioral advertising. Optional camera, microphone, social publishing and browser notifications have their own controls; you can stop them without buying anything.

Depending on where you live and the law that applies, you may have rights to access, correct, delete, obtain a copy of or port information, restrict or object to processing, withdraw consent, appeal a response or complain to a privacy regulator. Contact hello@arcade.fun to exercise applicable rights. We may need proportionate verification of your request, such as the private receipt link or proof of control of the wallet, and will not ask for your private key. We do not discriminate for exercising applicable privacy rights. Withdrawing consent does not undo processing already lawfully carried out or public blockchain records.

Our hosting and service providers may process information in the United States or other countries. We use access restrictions and other safeguards, but no internet service or blockchain interaction can guarantee absolute security. Contact us promptly about suspected unauthorized access.

Who helps us run arcade.fun

Fly.io hosts the application, database and game files on persistent storage. Anthropic processes Creator Studio build requests through its API. Stripe processes enabled item checkouts. Privy provides optional player authentication and embedded wallets. Google Fonts and other requested asset hosts receive ordinary connection information, including an IP address, when their resources load. Solana payment receipts are public blockchain records; the configured Solana RPC provider handles our network requests.

Changes

If this policy changes, we'll update this page and its date. Last updated: November 7, 2026.