Privacy Policy

Arcadedo is operated by Gametize Pte Ltd, Singapore (“we”, “us”), which is responsible for the personal data described here. This policy covers the Arcadedo website and builder. Player activity inside a Gametize campaign is also covered by the Gametize privacy policy that applies to that campaign.

We handle personal data in line with Singapore’s Personal Data Protection Act 2012 and, where they apply to you, other data protection laws such as the GDPR.

• Account details: your name, email address, password (stored only as a secure hash), role, and the profile picture you choose to upload.
• Google sign-in: if you sign in with Google, we receive your name, email address and profile picture from Google. We never see your Google password.
• The arcade games you build: titles, wording, questions, facts, settings, colours, logos, images and publish status.
• Documents you attach (PDF, Word or text files): the text is extracted to write game content for that request and is not stored afterwards.
• Credits and purchases: your credit balance and history, and for each purchase the pack, amount, date and Stripe reference. Card details are handled by Stripe and never reach us.
• Usage and security records: AI usage against your daily limits, sign-in times, and the standard technical logs our hosting and database providers produce, such as IP address, browser type and error traces.
• Messages you send us, such as support or refund requests.

When someone plays a published game, the game records play results for the creator’s analytics: when a play started and finished, the score, accuracy, whether the player passed, time taken, and which questions were answered incorrectly. If the game is embedded in a platform such as Gametize, that platform may pass a player identifier it already uses; Arcadedo does not ask players for their name or email.

The creator who published the game decides where it is shared and is responsible for telling their players how results are used. Players with questions should contact the organisation that shared the game with them; we will help that organisation respond.

• To create and secure your account, sign you in, and run the builder and your published games.
• To provide the AI features you ask for.
• To process credit purchases, keep billing records and handle refunds.
• To show creators how their games are played.
• To prevent abuse, fraud and security incidents, and to enforce our Terms of Service.
• To answer your messages and send service emails, such as purchase receipts and important changes. We do not send marketing emails without your permission.
• To meet legal, tax and accounting obligations.

We use your data because it is needed to provide the Service you signed up for, because we have a legitimate interest in keeping it secure and improving it, because the law requires it, or, where needed, with your consent.

When you use Chillo, the content generators, the copy rewriter or the image generator, the text involved is sent to our AI provider, OpenAI, to produce the result you asked for. That can include your messages, your game’s current wording and settings, and text extracted from a document you attached.

• Our AI provider processes this data on our behalf to return the result. Under its API terms, data sent through the API is not used to train its models.
• Logos are read in your own browser to pick out brand colours — the image itself is not sent to the AI provider.
• Generated images are made from the text prompt you write; no image of yours is uploaded to produce them.
• Please do not put confidential or personal information into AI prompts or attached documents.

• Session cookie: keeps you signed in. Clearing it signs you out.
• Sign-in security cookie: a short-lived cookie used only while you sign in with Google, to protect the sign-in against forgery.
• Local storage: remembers small preferences on your own device, such as light or dark theme.

We do not use advertising, profiling or cross-site tracking cookies, and we do not run third-party analytics or advertising scripts. Because these cookies are needed for the Service to work, they do not require a consent banner.

We do not sell your personal data or share it for advertising. We share it only with:

• Service providers who run Arcadedo on our behalf: hosting and content delivery (Cloudflare), database and storage (Supabase), AI (OpenAI), payments (Stripe) and, if you choose it, sign-in (Google). They may only use the data to provide their service to us.
• Gametize group staff who need it to support you, operate the Service or handle billing.
• Professional advisers, or authorities where the law requires it or to protect rights, safety and property.
• A buyer or successor if the Service is sold or reorganised, under the same protections.

Our providers may process data on servers outside Singapore, including in the United States and the European Union. Where data leaves the country it was collected in, we rely on the provider’s contractual commitments, such as standard contractual clauses, to keep it protected to a comparable standard.

• Your account and games stay available while your account is open, so you can edit and republish them.
• When an account is closed, its games, uploads and profile are deleted or anonymised within 30 days, apart from what we must keep.
• Purchase and credit records are kept for as long as tax and accounting law requires, usually 5 years.
• Technical and security logs are kept for a limited period, normally no more than 12 months.
• Extracted document text is not kept after the request that used it.

Data is encrypted in transit, passwords are stored as one-way hashes, access to production systems is limited to staff who need it, and sessions are signed so they cannot be forged. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

Arcadedo accounts are for adults acting for a business, school or other organisation. The builder is not directed at children, and we do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

• Ask for a copy of the personal data we hold about you.
• Ask us to correct details that are wrong or out of date — most can be changed yourself on your Profile page.
• Ask us to delete your account and the content attached to it.
• Object to, or ask us to restrict, certain uses of your data, or withdraw consent you gave.
• Ask for your data in a portable format, where the law gives you that right.
• Delete individual games, logos and images yourself from the editor at any time.

To make a request, email enquiry@gametize.com from the address on your account. We may need to confirm your identity, and we aim to respond within 30 days. If you are unhappy with our answer, you can complain to Singapore’s Personal Data Protection Commission or the data protection authority where you live.

We have appointed a Data Protection Officer to oversee how Arcadedo handles personal data, as Singapore’s PDPA requires. Questions, requests and complaints about your personal data can be sent to the Data Protection Officer, Gametize Pte Ltd, at enquiry@gametize.com with “Attn: Data Protection Officer” in the subject line.

We will update this page when our practices change, and the date at the top shows the latest revision. If a change materially affects how we use your data, we will tell you in the Service or by email. See also our Terms of Service and Refund Policy.