01 · privacy
What we process
Before a privacy choice, Play Mode can increment daily aggregate request counters for public landing pages and accepted non-automated player-page responses that finish with HTTP 200. A landing counter uses only the query-free public path and a coarse source class; a player-open counter uses only the query-free player path. These aggregates store no IP address, user agent, cookie, session token, full referrer, search query, or user identifier, are requests rather than people or sessions, and cannot be joined to later consented activity. Fixed global, bounded submitted-path-attempt, and valid-game anti-amplification buckets protect those endpoints without adding a per-visitor analytics key. While a public page is loaded, it also sends a same-origin heartbeat using a cryptographically random per-page lease. The browser keeps that lease only in the page's JavaScript memory, and the server keeps only its hash in web-process memory for up to 120 seconds. To stop one connection source from crowding out genuine landing requests or page leases, the server also places a keyed, non-reversible digest of its network address in capped process-memory rate buckets for up to 60 seconds. These transient values are not exposed to the dashboard, written to a cookie, browser storage or database, or reused as analytics dimensions or a cross-page profile. The live dashboard therefore reports recent accepted page heartbeats or tabs, not unique people. After you make a privacy choice, Play Mode records bounded first-party events such as a catalog view, game-detail view, play intent, provider-frame open, favorite change, partner inquiry intent, or catalog-correction intent. They use a pseudonymous browser-session token, not an account identity. Essential technical data also delivers pages, protects sessions, remembers consent, supports favorites, prevents abuse, and keeps the service reliable. Server logs may include request time, route, browser information, approximate network information, and security events.
02 · privacy
Optional analytics
For a visitor classified outside the strict-consent region who has not chosen Essential only or withdrawn analytics and whose browser sends no Global Privacy Control or Do Not Track signal, basic Google Analytics 4 visit measurement starts automatically with analytics storage granted. CompactFaith sends an explicit page view using a query-free page location, a coarse page-surface title, and only an external referrer origin. Google Analytics may set analytics cookies and generate its standard automatically collected session and engagement events; Enhanced Measurement settings can also control additional automatic events. Google advertising storage, advertising user data, ad personalization, and Google Signals stay denied or disabled. This baseline lets the visit be reported in Google Analytics Realtime. Choosing Essential only turns analytics storage off for future measurement. Visitors in strict or unknown regions, visitors with a browser privacy signal, and visitors who chose Essential only instead receive only a consent-denied cookieless page measurement for aggregate modelling. Microsoft Clarity, CompactFaith custom performance events, richer first-party-to-Google events, and full optional analytics remain off until you choose Allow analytics. You can withdraw optional consent at any time from Privacy choices; withdrawal hard-disables vendor runtimes for the page and does not disable essential storage or retroactively identify a browser session.
03 · privacy
Provider games
A third-party game frame does not load until you choose Play. Once loaded, the provider may process device, gameplay, advertising, and network data under its own policy. Play Mode does not receive your provider account password or payment information.
04 · privacy
Retention and your rights
First-party behavior events have a 90-day target and are removed by an audited retention job. Security, consent, legal, accounting, and provider records can require different periods. Depending on applicable law, you may request access, correction, deletion, restriction, or objection.
Send a privacy request