Privacy Policy

Last updated: December 2025

Introduction

Crash BASIC Arcade ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services.

Information We Collect

Account Information

When you create an account, we collect:

  • Username - Your chosen public display name
  • Email address - Used for account verification, password recovery, and important notifications
  • Password - Stored securely using industry-standard encryption (bcrypt)
  • Display name - Optional name shown on your games

Payment Information

If you subscribe to Premium, payment processing is handled entirely by Stripe. We do not store your credit card numbers or banking details. We receive only:

  • Confirmation of successful payment
  • Subscription status
  • Stripe customer ID (for managing your subscription)

Content You Upload

When you upload games, we store:

  • Game files (code, images, audio, and other assets)
  • Game metadata (title, description, author name)
  • Preview images

Automatically Collected Information

We automatically collect:

  • IP address - For security, rate limiting, and abuse prevention
  • Session data - To keep you logged in
  • Game play counts - Aggregate statistics, not tied to individual users

How We Use Your Information

We use your information to:

  • Provide and maintain your account
  • Process your Premium subscription
  • Send important account notifications (password resets, email verification)
  • Display your games and author information publicly
  • Prevent abuse and enforce our Terms of Service
  • Improve our services

We do not sell your personal information to third parties.

Third-Party Services

We use the following third-party services:

Cookies

We use essential cookies only:

  • Session cookie - Keeps you logged in. Expires when you close your browser or after 24 hours of inactivity.

We do not use tracking cookies, analytics cookies, or advertising cookies.

Data Retention

  • Account data - Retained until you delete your account
  • Game content - Retained until you delete the game or your account
  • Security logs - IP addresses and rate limit data retained for up to 30 days
  • Payment records - Retained as required by law for tax and accounting purposes

Your Rights

You have the right to:

  • Access - View the personal data we hold about you
  • Correct - Update your account information at any time
  • Delete - Request deletion of your account and associated data
  • Export - Download your uploaded games
  • Withdraw consent - Cancel your subscription or close your account at any time

To exercise these rights, contact us at the email address below.

Data Security

We implement appropriate security measures including:

  • HTTPS encryption for all connections
  • Secure password hashing (bcrypt)
  • Rate limiting to prevent abuse
  • Account lockout after failed login attempts

Children's Privacy

Crash BASIC Arcade requires all users to be at least 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information or created an account, please contact us immediately and we will take steps to remove the information and terminate the account. Teen accounts (ages 13+) managed through our Family plan are subject to parental controls and content filtering.

International Users

Our services are hosted in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States.

Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. The "Last updated" date at the top indicates when this policy was last revised.

Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us at:

Email: support@crashbasic.com