Privacy Policy

Effective date: July 12, 2026 · Last updated: October 5, 2026

This Privacy Policy explains how Arcade Sandbox (“we”, “us”, or “our”) collects, uses, and shares information when you use our website and our iPhone app (together, the “Service”). By using the Service you agree to this Policy. Terms not defined here have the meaning given in our Terms of Service.

01Information we collect

Account information. Your name, email address, profile picture, and a unique identifier from whichever provider you signed in with. If you sign in with Google, that comes from Google. If you sign in with Apple, that comes from Apple, and may be a private relay address that forwards to your real one. We also store a token from Apple for one purpose only: revoking your Apple sign-in when you delete your account, which Apple requires us to do.
Content you create. Your prompts, change requests, game titles, the games themselves, and any art or sound you generate.
Images you upload. Reference images you attach to a build, and the cover art you choose for a game. Cover art is shown publicly.
Transaction records. What you bought, how many tokens it was worth, and when. Web purchases go through Stripe and App Store purchases through Apple; we never receive or store your full card number. For in-app purchases we receive a validated receipt from RevenueCat, along with your account id so the purchase reaches the right balance.
Play and moderation data. Which games you play and unlock, the initials and scores you post to leaderboards (shown publicly), reports you file, and the creators you block. A report stores your account id, or your IP address if you were not signed in, plus whatever you type into it.
Waitlists. If you ask to hear when Arcade Sandbox comes to Android, the email address you enter, the language the page was in, and when you asked. If you were signed in, we also note which account asked. You do not need an account for this.
Usage and device data. IP address, request metadata, and basic logs used to run and secure the Service. We also count daily visitors in aggregate using a one-way hash. No cookie is set for this and we cannot identify you from it.
Cookies. See Section 06.

02How we use information

To run the Service: sign you in, generate and store your games, and operate the arcade;
To generate games and art, by sending your prompts, images, and game content to our AI provider (see Section 04);
To screen content automatically before it reaches the arcade (see Section 04);
To process purchases through Apple, RevenueCat, and Stripe, and to keep your token balance correct;
To prevent fraud and abuse, enforce our Terms, and secure the Service;
To maintain, analyse, and improve the Service; and
To email you. That includes account and purchase messages and replies to support requests, and also optional updates about your games: when someone unlocks one, a weekly summary of plays and earnings, and occasional reminders. Every optional email carries a one-click unsubscribe link, and you can turn them off at any time. If you joined a waitlist, we email you once, when that app is out, and use the address for nothing else.

03Legal bases (where applicable)

Where required (for example under the GDPR), we process personal data to perform our contract with you (providing the Service), on the basis of our legitimate interests (securing and improving the Service, and moderating content), to comply with legal obligations, and with your consent where we ask for it.

04AI processing and moderation

Games and art are generated using AI models provided by Anthropic. When you build or change a game, your prompt, any images you attached, and the relevant game content are transmitted to Anthropic to produce the output and return it to you.

We also use an Anthropic model to screen content automatically: game ideas, change requests, titles, and cover art images are checked before a game can reach the public arcade. We do not use any of this to build advertising profiles about you.

05How we share information

We do not sell your personal information. We share it only as follows:

Service providers that operate the Service on our behalf: Google and Apple (sign-in), Apple and RevenueCat (in-app purchases and receipt validation), Stripe (web payments), Anthropic (AI generation and content moderation), and Cloudflare (hosting and infrastructure).
Publicly, for content you choose to publish. A published game, its title, its cover art, and its creator display name are visible to anyone through the arcade and shareable links. Leaderboard initials and scores are visible to everyone who plays that game.
Legal and safety: when we believe disclosure is necessary to comply with law, enforce our Terms, or protect the rights, safety, or property of users or the public.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

06Cookies

The website also stores a few values in your browser’s own storage rather than in a cookie: an anonymous session id and a note of how you first arrived, used to measure which parts of the site work. These never leave your browser except as part of those aggregate measurements, and clearing your browser data removes them.

We use cookies only to make the Service work, never for advertising. They are: a session cookie that keeps you signed in; short-lived cookies used during the sign-in handshake; a browser identifier that records which games you have already had your one free play of; and a per-game cookie that remembers a private share link you opened. We do not use third-party advertising cookies. If that changes, we will update this Policy and, where required, ask for your consent.

07Data retention

We keep your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Deleting your account removes your personal data as described in Section 08, while records we must keep for accounting, tax, and fraud prevention are retained with your personal details removed. A waitlist address is kept until we have sent that one email and is then deleted. You can ask us to remove it sooner.

08Deleting your account

You can delete your account yourself. In the iPhone app, open Settings › Delete my account. On the web, email support@arcadesandbox.com and we will do it.

Deleting is permanent. Your profile, email address, and sign-in identities are erased, your Apple sign-in token is revoked with Apple, and your drafts, generated art, leaderboard scores, blocks, and unlock records are deleted. Games you had already published stay in the arcade with your name removed, because other players spent tokens to unlock them. Transaction and usage records are kept, with your personal details removed. A subscription bought through Apple keeps billing until you cancel it with Apple.

09Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email support@arcadesandbox.com. We will respond as required by applicable law. You can also unpublish a game at any time, which removes it from the arcade, and turn off optional emails from any unsubscribe link.

10Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11Security

We use reasonable technical and organisational measures to protect information, including sandboxing user-generated games and letting Apple and Stripe handle payment card data rather than storing it ourselves. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12International transfers

We and our service providers may process information in countries other than yours, which may have different data-protection laws. Where required, we rely on appropriate safeguards for such transfers.

13Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date and, for material changes, give additional notice where appropriate.

14Contact

Questions or requests about your privacy? Email support@arcadesandbox.com.