Privacy Policy

This site has no accounts and no database. We do not ask you for anything and we store nothing about you ourselves. Third parties involved in delivering the site and the games do collect data, and every one of them is named below.

Last updated: 2026-07-31

1. The short version

• There is nothing to sign up for, so we never ask for your name, email address, phone number or password.
• We set no cookies of our own and run no tracking pixels of our own.
• We do not sell personal information, and we hold no personal information to sell.
• Our hosting provider, our advertising provider and the platforms that serve the games all see your requests. They are named in section 4.
• This site is not intended for children under 13, and we deliberately keep child-directed games out of the catalogue. See section 9.

2. Who we are

Arcadoria is a catalogue of browser games at arcadoria.com. The site is a set of static files. There is no application server of ours between you and the page, and no user database anywhere in the system.

Questions about this policy, or a request about your data, go to [email protected].

3. What we do not collect

• No accounts. There is no registration, no login and no profile. Nothing on this site asks you to identify yourself.
• No contact details. We do not collect names, email addresses, postal addresses, phone numbers or dates of birth.
• No payment data. Everything here is free. We have no checkout, no subscription and no payment processor.
• No mailing list. We do not run a newsletter and will not add you to one.
• No saved progress. We do not store scores, favourites or play history. If a game remembers your progress, it does so inside its own frame, under the game platform's control, not ours.

The one exception is email you choose to send us. If you write to [email protected] we receive your address and whatever you put in the message. We keep it only as long as we need it to deal with your enquiry, and we do not add it to any list.

4. Third parties, by name

These are all of them. If this list ever changes, this page changes with it and the date at the top moves.

Cloudflare — hosting, delivery and analytics

The site is hosted and delivered by Cloudflare. Like any web server, Cloudflare's network records the requests it serves: your IP address, your browser's user agent string, the URL you asked for, the time, and the page you came from. This is used to deliver the page, to absorb denial-of-service and bot traffic, and to diagnose faults. Retention is governed by Cloudflare's privacy policy.

For traffic measurement we use Cloudflare Web Analytics, which was chosen specifically because it does not use cookies, does not write to local storage, and does not fingerprint your device or browser. It reports aggregate page views and loading performance. It cannot follow you to another site, and neither can we. It is not currently enabled on this site, so no analytics of any kind are running.

We do not use Google Analytics. That was a deliberate choice, not an oversight.

Google AdSense — display advertising

Status: not currently active on this site. No advertising cookies are being set by us or by Google through these pages today. This section describes what happens when it is switched on, and the date at the top of this page will move when that happens.

Display advertising on the page itself is served by Google AdSense. Google and its advertising partners use cookies, device identifiers and similar technologies to serve ads, to limit how often you see the same ad, to measure whether an ad worked, and — where permitted — to personalise what you are shown based on your previous visits to this and other websites. In doing so Google receives your IP address, your user agent, and the page you are viewing.

Google's own description of what it collects when it serves ads on a site like this one is at How Google uses information from sites that use its services. You can review and switch off ad personalisation for your Google account at My Ad Center.

Two things we will not do with advertising, because they are the practices that make ad-supported sites unpleasant: we do not refresh ads automatically while you sit on a page, and we do not run pop-ups, interstitials or full-page ads. We also do not place any advertising of our own above a game.

GamePix and GameMonetize — the game platforms

Status: currently supplying games — GamePix.

We do not host games. Each game runs inside a frame served directly from the platform that distributes it. Nothing is requested from that platform until you press Play — the game page loads with a thumbnail and a button, and the frame is created only when you click. If you never press Play, the game platform never sees you.

Once you do press Play, your browser connects to the platform's servers directly. It receives your IP address, your user agent, the page you came from, and whatever the game itself reports back to it. Both platforms run their own advertising and their own analytics inside that frame, and both may set their own cookies there.

We want to be plain about one thing: the advertising inside the game frame is not ours and we cannot switch it off. It is how the game's developer gets paid, and our distribution agreements require that it is neither blocked nor covered up. What happens inside the frame is governed by the platform's policy, not ours: GamePix privacy and cookie policy and GameMonetize privacy policy.

What we do control is the frame's permissions. Games are sandboxed and are not allowed to navigate the top-level page, which is the mechanism a hostile in-game ad would use to hijack your tab.

5. Cookies

We set no cookies. Not for preferences, not for measurement, not for anything. Cookies you may nonetheless encounter on this site come from:

• Our CDN. Cloudflare may set a bot-management cookie (commonly named __cf_bm) to distinguish automated traffic from human visitors. It is short-lived and is not used for advertising.
• Google, when advertising is active. Advertising and measurement cookies as described in section 4.
• The game platform, once you press Play. Cookies set inside the game frame by the platform and its own advertising partners.

Your browser's settings can block or clear all of these. Blocking cookies will not stop the site working; it may affect a game that stores your progress locally.

6. If you are in the EEA, the UK or Switzerland (GDPR)

Where the GDPR or UK GDPR applies, the legal basis for the request logs described in section 4 is our legitimate interest in delivering and securing the site. Advertising that is personalised requires your consent, not legitimate interest.

Advertising is not currently running on this site, so no consent for advertising cookies is being requested. Before the first ad is served we will present a consent message built with Google's certified consent management platform, and personalised advertising will not run without consent.

You have the right to:

• ask what personal data is held about you, and get a copy of it;
• have inaccurate data corrected;
• have data erased;
• restrict or object to processing, including objecting to processing based on legitimate interest;
• withdraw consent at any time, without affecting processing already carried out;
• complain to your national data protection authority.

Practically, because we hold nothing ourselves, most requests have to go to the party that actually holds the data — Google for advertising data, Cloudflare for request logs, the game platform for anything collected inside a game frame. Write to [email protected] and we will tell you which one applies and point you at the right form rather than pretending we can action it ourselves.

7. If you are in California (CCPA / CPRA)

We do not sell personal information for money, and we never have. When advertising is active, however, passing advertising identifiers to Google so that it can personalise ads may count as sharing personal information for cross-context behavioural advertising under the CPRA, and we would rather say so than hide behind the narrower definition of a sale.

California residents have the right to:

• know what categories of personal information are collected and for what purpose;
• request deletion or correction;
• opt out of the sale or sharing of personal information;
• not be discriminated against for exercising any of these rights.

To opt out of personalised advertising, use Google's My Ad Center or the consent controls shown on this site while advertising is active. To make any other request, email [email protected].

One honest limitation: this site is entirely static, so we have no server of our own that could detect a Global Privacy Control signal and act on it. Opt-out is handled through the consent message and through Google's own controls, and we are not going to claim a capability we do not have. Details of the rights themselves are at the California Attorney General's CCPA page.

8. Do Not Track

Browsers send a Do Not Track header inconsistently and there is no agreed standard for honouring it. We do not track you across sites in the first place, so there is nothing for us to switch off in response to it.

9. Children

This site is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. It is built for teenagers and adults.

This is not just a sentence in a policy. The catalogue is filtered at the point where games are ingested: any game that our suppliers classify under their junior or girls categories is rejected outright and never reaches the site, and a game is rejected if any of its categories is on that list, not merely its primary one. Casino and slots games are excluded by the same mechanism. The result is a catalogue with no children's section, because there is no way for one to get in.

We also do not direct this site at anyone below the age of digital consent in their own country, which is between 13 and 16 across the EEA.

If you are a parent or guardian and believe a child has provided personal information to us, write to [email protected] and we will delete anything we hold. If you think a game on the site is aimed at young children and slipped through the filter, tell us and we will remove it from the catalogue.

10. Retention

We operate no database, so we retain nothing on our own systems. Request logs are retained by Cloudflare under its own schedule. Advertising data is retained by Google under its own schedule. Email you send us is kept for as long as it takes to resolve the matter and then deleted.

11. International transfers

Cloudflare and Google operate global networks, and a page or an ad may be served to you from a data centre outside your own country. Data handled by those providers may therefore be processed outside the country you are in, under the transfer mechanisms set out in their respective policies.

12. Security

The site is served over HTTPS only. There is no login to compromise, no password to leak and no personal data store to breach, which is a meaningful part of why the site is built this way. Games are sandboxed and cannot navigate away from the page on their own.

13. Changes to this policy

If this policy changes we update the date at the top of the page. For a change that materially affects what is collected — a new third party, a new category of data — we will say so plainly here rather than editing a sentence quietly.

14. Contact

Email [email protected]. A person reads it. Copyright complaints have their own route, described on the DMCA page.