Privacy Notice

Version 2026-10-15

Who is responsible

Rivalless Games is responsible for the account and service information described here. For privacy questions or requests, contact support@rivallessgames.com.

Information used to provide the service

• Account information: your email, workspace/display name, account membership, verification status and a password hash when password access is used. We do not store a readable account password.
• Connected websites: registered domain names, integration identifiers, credential hashes, encrypted recoverable API keys, synchronization information and account permissions.
• Usage and support: launch counters, usage periods, launch receipts, game-availability reports and information you send to support.
• Subscriptions: selected plans, payment/agreement references, amounts, currencies, payment status, period dates, verified billing-event records and policy-acceptance version and time.
• Security information: authentication sessions, short-lived verification/reset information, rate-limit identifiers and technical request/error information. IP addresses may be processed for request handling, security and abuse prevention.

Optional Google sign-in

If you choose Continue with Google, Google supplies your verified email and a stable Google account identifier. We request only OpenID and email access, not Gmail, Drive, contacts or calendar permissions. We store a derived identifier to recognize the same Google account, plus the account email. We do not retain Google's access, refresh or ID tokens as ongoing account credentials. Temporary authorization details are held server-side to complete and protect the sign-in flow.

Google sign-in is optional; email/password access remains available. An existing Games account is not automatically merged merely because an email matches. You sign in to the existing account and confirm the connection. Google processes its own authentication activity under Google's Privacy Policy.

Why we process information

We use information to create and secure accounts, connect authorized websites, deliver the catalogue and launch service, measure allowances, manage subscriptions, send service emails and answer support requests. Where applicable data-protection law requires a legal basis, necessary account/service processing supports our contract with you, security and abuse prevention support legitimate interests, and required accounting or regulatory records support legal obligations. Optional authentication is initiated by your choice; it is not permission to read unrelated Google services or send marketing.

Service providers and third parties

Hosting and email infrastructure providers process the information needed to operate the service. PayPal processes subscription approval and payment information under its own terms and Privacy Statement. We receive payment references and status information, not your complete payment-card credentials.

When a visitor starts a provider-hosted free-play game, the browser connects to that game provider or its delivery services. Those parties can receive the network and device information needed to load their content and may use their own storage or cookies. Publishers must explain their site's integrations to visitors and obtain any consent required for their use. This notice does not replace a publisher's own privacy notice or a provider's policy.

Cookies, location and retention

The account portal uses a session cookie for sign-in, security and account navigation. Google and PayPal may use their own cookies when you choose those services. Hosting, payment, authentication and game providers may process information in countries different from yours. Contact us for information about the providers, processing locations and applicable transfer safeguards relevant to your account.

We retain account, website and usage information while it is needed to provide the service and resolve account or billing issues. Retention also depends on applicable accounting obligations, dispute periods, security needs and backup cycles. Verification and reset links are time-limited; expired links cannot be used to authenticate. Cancelling a subscription does not automatically erase its payment history. Contact support to request closure or deletion; records that must be retained for legal obligations or unresolved disputes may be kept for those purposes.

Your choices and rights

You can choose email instead of Google sign-in, remove connected websites and cancel renewal through your account controls. Contact us for account closure or help with access, correction, deletion, restriction, portability or objection requests where those rights apply. We may need to verify that a request comes from the account holder. Where processing relies on consent, you may withdraw it without affecting prior lawful processing. You may also complain to the competent data-protection authority. We do not use Google sign-in data to make automated decisions with legal or similarly significant effects.

The service is intended for adult website publishers, not children. Please contact support if you believe an account contains information supplied by a child. Material changes to this notice will be identified by an updated version and communicated where required.