Privacy Policy

Arcade OS is built to need almost nothing about you. An account is a made-up name — no email, no real name, no phone number, no payment details. There are no ads, no third-party analytics, and no trackers. Everything the account records can be deleted by you, at any time, at /account/delete.

This site and the Arcade OS games are operated by King Figure Empire LLC (“we”). Questions about this policy or your data: contact@kingfigureempire.com.

Your chosen username. That is the whole identity. We never ask for an email address, real name, phone number, birthday, or payment details, and have nowhere to store them.

Sign-in credentials, if you add them. Passkeys store a public key plus a credential identifier, an optional device label, and created/last-used timestamps — the private half and any biometric data never leave your device. Access codes are stored only as keyed (peppered) cryptographic hashes; we cannot read the code back, and a database leak alone is not enough to recover one. If you link a crypto wallet, we store its public address and the identifier our sign-in provider assigns.

Play history. Which levels you started and completed, when, and how long they took; the achievements and statistics computed from that; any playlists you build (their names and level lists) and labels you give your access codes.

Abuse-prevention counters. Whenever any sign-in or account-creation attempt occurs — access code, passkey, or wallet — we record a keyed cryptographic digest of the IP address (never the address itself), the type of attempt, and whether it succeeded. These digests exist to slow down credential-guessing and are deleted after 24 hours.

We set two cookies, both essential: a signed session cookie that keeps you signed in for up to 7 days, and a short-lived (5-minute) challenge cookie used during passkey ceremonies. No advertising or analytics cookies exist. Our own use of your browser’s local storage holds one thing — your username, so the arcade can greet you instantly — and our offline helper caches a copy of our offline page (nothing personal, just the page).

If you use wallet sign-in, Privy’s and WalletConnect’s software keep their own data in your browser, including sign-in tokens that they transmit to those services as part of authenticating you.

Arcade OS has leaderboards and per-player achievement pages. Your username and play statistics (levels completed, achievements earned) are visible to other visitors. Since the username is a pseudonym you chose, that is the only thing exposed — but note that if you choose to use your wallet address as your username, that address becomes publicly visible on those pages. Deleting your account removes these public entries.

Only if you choose to use wallet features: wallet sign-in is handled by Privy, and wallet connections by WalletConnect. Those interactions are governed by their privacy policies, and they only occur when you initiate them. Players who never touch wallet features send data to no third party at all.

We do not sell or share your data, run ads, profile you, or send marketing. We could not email you if we wanted to — we do not have your address.

kingfigureempire.com/account/delete deletes your account while signed in: the username, every credential, all play history, playlists, achievements, statistics, and leaderboard entries. It is immediate and permanent. If you signed in with a wallet, our sign-in provider Privy keeps its own record of that wallet; deleting your account here does not delete Privy’s copy — see Privy’s privacy policy for its deletion process. If you have lost every credential, email contact@kingfigureempire.com and we will verify and remove the account manually.

Account data is kept for as long as the account exists and removed when you delete it. The hashed abuse-prevention counters are deleted after 24 hours.

The arcade is a general-audience brain-training site and is not directed at children under 13. We knowingly collect nothing about any player beyond the self-chosen pseudonym and play history described above.

If our data practices change, this page changes with them and the effective date above is updated. Meaningful changes will be visible here before they apply.