Privacy Policy

Storage on your device

Arcade saves, completed runs, best scores and preferences stay in this browser. The offline Arcade shell and static assets are cached on this device. You can discard a saved run from the menu; clearing this site’s browser data removes local history and offline assets.

This version includes no advertising or analytics SDK. Functional browser storage supports saved games, language, theme and other choices. Online sign-in also uses Clerk session/security cookies. Opening an online page contacts the hosting and sign-in services, even though Arcade saves stay on your device.

Accounts and online play

Clerk handles your sign-in details and credentials. Our game database stores your Clerk identifier, separate game identity, chosen Hero Name, privacy settings, friends, blocks, challenges, optional published photo URL, and completed match results and ratings. Arena sends your inputs to the authoritative game server. Passwords are not stored in the game database.

What other players can see

Your game identity, Hero Name, published photo and competitive category ratings can be public. TV spectators can see live boards, player profiles and scores. Friend presence is shared with confirmed, unblocked friends. Email addresses, Clerk identifiers and private social settings are not public profile fields. You can remove your published photo and change invitation privacy in the app.

Purposes and legal bases

We process account and game data to provide the requested online service (GDPR Article 6(1)(b)). Optional public photo publication is based on your choice and consent (Article 6(1)(a)); removing it withdraws that publication. Security, abuse prevention and preserving fair competitive records serve legitimate interests (Article 6(1)(f)). Device storage is used for the service and functions you request (§ 25(2) TDDDG).

Service providers and international processing

Cloudflare provides hosting, security, the EU-jurisdiction game database and login email delivery. Clerk provides authentication. Support email is forwarded to Gmail. Providers also process connection information such as IP addresses and request metadata. The EU database setting does not confine all hosting, authentication or email processing to the EU; processing can occur in the USA and other countries. The linked provider documents explain their transfer safeguards, including standard contractual clauses where applicable.

• Cloudflare
• Clerk
• Google / Gmail

Retention and deletion

Device data remains until you discard it or clear this site’s browser data. Online profile, social and match data is retained for account operation and competitive history. Contact support@0hero.dev to request removal of game data; deleting the Clerk sign-in account alone does not automatically remove game records. Historical results may need to be retained without your public name or photo to preserve opponents’ records. Operational Cloudflare logs currently remain for up to seven days; D1 recovery history can retain older data for up to 30 days. Support correspondence is retained as needed to resolve your request and meet legal obligations.

Your rights

You may request access, correction, erasure, restriction or portability where applicable, withdraw consent, and object to processing based on legitimate interests. Contact support@0hero.dev; we may need to verify that the account is yours. You can also complain to a competent data protection supervisory authority.