Privacy
Last updated 3 September 2026
Opus Arcade collects the minimum needed to run player accounts and keep leaderboards honest. There is no analytics package, no advertising, and no third-party tracking.
What you give us
- Email address — used to identify your account and for account recovery. It is never sold, shared, or used for marketing.
- Display name — shown publicly on leaderboards and standings. Choose accordingly.
- Password — stored only as an Argon2id hash (bcrypt where Argon2id is unavailable). The plaintext is never written to disk or logs.
- Invite code — recorded so an invite's remaining uses can be counted.
- Age attestation — a single yes/no flag recorded at signup.
What we derive
We do not store your IP address. When you register, sign in, start a run, or a play is counted on the trending board, your IP is combined with a secret server-side value and hashed with SHA-256; only that hash is written. It is used for rate limiting, to detect score manipulation, and to tell one player from another on the trending board. The hash cannot be reversed to an address, and it is not shared with anyone.
Gameplay data
- Runs, scores and personal bests for each cabinet
- Your coin balance and cosmetic purchases made with coins
- Per-cabinet saved progress, where a cabinet supports it
- Star ratings you give cabinets
- A tally of which cabinets get played, used for the trending board
- Feedback you submit through the in-arcade feedback button
Scores, display names and star ratings are public by design — that is what a leaderboard is. Everything else is visible only to you and to site administrators.
The trending board
The trending board counts how many different people played each cabinet, so it has to be able to tell two players apart. It does that without recording who either of them is: a row on that board carries a one-way hash — of your account id if you are signed in, of your IP address if you are not — and no account id, name or address. It is a tally of cabinets, not a record of what you played, and rows are deleted automatically after 90 days.
A play is counted once per visit to a cabinet, and only after roughly twenty seconds of actual play. Guests are counted the same way signed-in players are. Nothing about it is shared with anyone, and it feeds no score, coin or ranking of players.
Cookies
One cookie, arcadesid, holds your sign-in session. It is
HttpOnly, SameSite=Lax and Secure, and it
carries a session identifier and nothing else. There are no advertising,
analytics, or cross-site cookies. Games may use your browser's local storage to
keep settings on your own device; that data never leaves your machine.
Third parties
The arcade sends no data to anyone for advertising, analytics, or profiling. Two exceptions are worth naming plainly, because both mean your browser contacts a company other than us and that company therefore sees your IP address:
- Google Fonts — seven cabinets load a web font from
fonts.googleapis.com. - Cloudflare (cdnjs) — one cabinet, Trophy Champions, loads Font Awesome Free 6.5.1 from
cdnjs.cloudflare.com. The icon set is credited, with its licence, on the about page.
Both are being self-hosted so that these requests stop. Nothing else on the site contacts a third party, and the site's Content Security Policy blocks any request to an origin not named here.
Retention and deletion
Account and gameplay data is kept while your account exists. Rate-limiting records are pruned automatically after 24 hours, and trending-board rows after 90 days. To delete your account and everything attached to it, email privacy@opus-arcade.com from your registered address and it will be removed.
Children
Opus Arcade is not directed at children under 13 and accounts are not knowingly created for them. If you believe a child has registered, email privacy@opus-arcade.com and the account will be removed.
Changes
If this policy changes materially, the date at the top of this page changes with it.