Privacy
Last updated 26 August 2026
Opus Arcade collects the minimum needed to run player accounts and keep leaderboards honest. There is no analytics package, no advertising, and no third-party tracking.
What you give us
- Email address — used to identify your account and for account recovery. It is never sold, shared, or used for marketing.
- Display name — shown publicly on leaderboards and standings. Choose accordingly.
- Password — stored only as an Argon2id hash (bcrypt where Argon2id is unavailable). The plaintext is never written to disk or logs.
- Invite code — recorded so an invite's remaining uses can be counted.
- Age attestation — a single yes/no flag recorded at signup.
What we derive
We do not store your IP address. When you register, sign in, or start a run, your IP is combined with a secret server-side value and hashed with SHA-256; only that hash is written. It is used for rate limiting and to detect score manipulation. The hash cannot be reversed to an address, and it is not shared with anyone.
Gameplay data
- Runs, scores and personal bests for each cabinet
- Your coin balance and cosmetic purchases made with coins
- Per-cabinet saved progress, where a cabinet supports it
- Star ratings you give cabinets
- Feedback you submit through the in-arcade feedback button
Scores, display names and star ratings are public by design — that is what a leaderboard is. Everything else is visible only to you and to site administrators.
Cookies
One cookie, arcadesid, holds your sign-in session. It is
HttpOnly, SameSite=Lax and Secure, and it
carries a session identifier and nothing else. There are no advertising,
analytics, or cross-site cookies. Games may use your browser's local storage to
keep settings on your own device; that data never leaves your machine.
Third parties
The arcade sends no data to anyone for advertising, analytics, or profiling. Two exceptions are worth naming plainly, because both mean your browser contacts a company other than us and that company therefore sees your IP address:
- Google Fonts — seven cabinets load a web font from
fonts.googleapis.com. - Cloudflare (cdnjs) — one cabinet, Trophy Champions, loads an icon set from
cdnjs.cloudflare.com.
Both are being self-hosted so that these requests stop. Nothing else on the site contacts a third party, and the site's Content Security Policy blocks any request to an origin not named here.
Retention and deletion
Account and gameplay data is kept while your account exists. Rate-limiting records are pruned automatically after 24 hours. To delete your account and everything attached to it, email privacy@opus-arcade.com from your registered address and it will be removed.
Children
Opus Arcade is not directed at children under 13 and accounts are not knowingly created for them. If you believe a child has registered, email privacy@opus-arcade.com and the account will be removed.
Changes
If this policy changes materially, the date at the top of this page changes with it.