Last updated: August 4, 2026

1. Scope

This Privacy Policy describes how Playfrog ("we", "us") processes personal data in connection with the Service. The Service includes the website at playfrog.gg, the game pages and hosted games served from playfrog.games, and the interfaces used to publish games: the command line tool, the HTTP publishing API, the Playfrog connector for AI assistants (our MCP server), and browser upload.

2. Data We Collect

Visitors and players. Standard server logs (IP address, user agent, timestamps) and aggregated gameplay statistics (games played, session duration, and country derived from IP address). Playing games does not require an account.

Account holders. Email address; where Google sign-in is used, the name and profile picture provided by Google; a display name you choose; and session identifiers.

Creators. The game files and publishing metadata (such as title, description, genre, and cover image) submitted through any of the publishing interfaces, and a coarse indication of the publishing environment (for example, the coding tool used). This indication can be disabled by setting the environment variable PLAYFROG_NO_TELEMETRY=1. Publishing requires no account; an unclaimed game is associated only with a management token until it is claimed.

How a game was discovered. When a game is published, we may record a single label describing how the publisher found Playfrog, chosen from a fixed list of values we maintain (for example, a documentation site or a community). The label is supplied by the publishing tool. Values we do not recognise are stored as "unknown", and the original value is discarded. We do not read or store the referring page address, and we do not use cookies, tracking pixels, or device fingerprinting for this purpose. The label describes a channel, not a person, and is not linked to your identity. It is stored with the game record and is retained for as long as that record exists, so that we can understand which channels bring creators to the platform. Set PLAYFROG_NO_TELEMETRY=1 to omit it.

3. Public Nature of Published Content

Publishing a game makes its files and metadata publicly accessible at a shareable address and, once the game is claimed, in the public gallery. Titles, descriptions, cover images, play statistics, and version history are shown publicly. Do not include personal, confidential, or sensitive information in game files or metadata that you do not intend to be public.

4. Purposes of Processing

We process data to operate the Service (hosting and serving games, displaying statistics, and account and game management), to protect it (abuse prevention, rate limiting, scanning published files for malware, and security logging), and to improve it (aggregate usage analysis). We do not sell personal data, and we do not display third-party advertising.

5. Cookies

The Service uses strictly necessary cookies only, as described in the Cookie Statement. No advertising or cross-site tracking cookies are used.

6. Sharing and Processors

We do not sell personal data, and we do not share it with third parties except the service providers that process data on our behalf and under our instructions, and where disclosure is required by law or is necessary to protect the Service and its users. Our processors are Cloudflare, Inc. (hosting, content delivery, storage, and email routing), Neon, Inc. (database), Google LLC (Google sign-in, when you choose it, and Safe Browsing checks used to scan published files for malware), and, for transactional email, a dedicated email delivery provider. Data may be processed in the United States and the European Union under the safeguards these providers offer.

7. Security

We apply reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, and serving each hosted game from an isolated origin so that games cannot access the main site's data or one another's data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Retention

Account data is retained until the account is deleted. Unclaimed games and their files are deleted after seven days. Raw event logs are retained for a limited operational period and are then aggregated or deleted. The discovery label described in section 2 is stored with the game record and is deleted when that game is deleted. Backup copies expire on a rolling basis.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, rectify, delete, or export your personal data, and to object to or restrict certain processing. Requests may be sent to privacy@playfrog.gg and are answered within the timeframes required by applicable law. Deleting your account removes your personal information and your published games.

10. Children

Playing requires no account and no submission of personal data. Accounts are not available to children under 13 (or under 16 where required by applicable law), and we do not knowingly collect personal data from them.

11. Changes

We may update this Policy from time to time; the date above reflects the latest revision. Material changes will be reflected on this page.

12. Contact

Privacy inquiries: privacy@playfrog.gg