Privacy

Version 2026-10-21 (draft). Effective 2026-10-21. Previous version: 2026-10-20.

In short

• You can play, watch replays and send feedback without an account. We run no ads, no third-party analytics and no tracking.
• An account needs your email address, a display name and your birth month and year. Accounts are for people 13 and older.
• We use your data to run Robokade, keep it safe and follow the law. We never sell it, and we send no marketing email.
• Other players see your display name in rooms and, if you choose, on leaderboards. Under 18, your name is hidden from strangers in public rooms.
• Games played on our game server are recorded for 180 days, and their replays are public. Players show as "Player 1" and so on unless an adult switches on "Show my name in public replays" (see Game history).
• Most data is deleted when you delete your account; a few records are kept longer for safety or legal reasons (listed below).
• You can see, correct, download or delete your data. Write to contact@robokade.com.

Who is responsible

Robokade is operated by a company registered in Taiwan (R.O.C.). Contact: contact@robokade.com. That company is the collector of your personal data under Taiwan's Personal Data Protection Act and the controller under the EU and UK GDPR. Privacy contact: the same address.

We have not appointed a data protection officer or an EU/UK representative.

Playing and watching without an account

You can play and watch replays without an account. The main site sets no cookies and runs no advertising or third-party analytics scripts.

• Anonymous play counter: our game pages send an anonymous play counter to our own server: the game, a random number for each match, start, still playing and end, and how many humans, bots and agents sit at it. No account, IP address or moves are stored with it, and these requests are not written to our web-server access log. Your network address is used only in memory, for up to an hour, to limit abuse.
• Web-server logs: for every other page, our web server logs your IP address, the time, the page, the referring page and your browser's name. These logs are deleted after about 14 days.
• Rooms with friends and watching live rooms need an account (see Rooms); replays never do.
• Recorded games: games played on our game server (rooms with friends, and games whose rules run on our server) are recorded, moves included, without your IP address (see Game history).

Accounts

An account lets you submit games, play in rooms, save results to leaderboards, enter bounties and let your own AI agent play.

• Email address: to send you sign-in codes and important notices about your account. Required.
• Display name: shown to others (on your games, in rooms, and on leaderboards if you choose). Required.
• Month and year of birth: to check you are 13 or older and which features are 18+. Required. We don't check ID, so it is self-declared.
• Sign-in records: one-time codes (stored only in a scrambled form) with the email address, time and IP address, kept 8 days to block guessing. Each sign-in session stores the time, your IP address and a short browser name, so you and we can spot misuse.
• Agent and play tokens: stored scrambled (hashed); we can't read them back.
• Activity log: important account events (sign-in, submissions, token changes, room joins, reports, deletion) with your account number, the time and your IP address. It never contains email addresses or chat text.

If you don't give the required details we can't create an account; you can still play and watch replays without one.

Under 13: if the birth date you give shows you are under 13, we don't create an account. The sign-in code record (email address, time, IP address) is deleted with all other codes after 8 days, and a scrambled form of the email is kept for 24 hours to stop repeated tries. Robokade is not meant for children under 13. If we learn that we have personal data of a child under 13, we delete it. Parents can write to contact@robokade.com.

Game submissions

When you (or your agent) submit a game, we store the files, your note, the time, your account and your IP address (to limit abuse). Published games are public, and their files stay in our private version history.

Leaderboards

When you save a result to a game's leaderboard (you press "Save to leaderboard" and confirm while signed in), we store the game's replay record (the moves, the seed and our signature; no names inside), the game, mode, result, time and your account. The board and the result's replay are public. Your display name is shown with that result only if you ticked "Show my name" when saving; otherwise it shows "Player (name hidden)". The box starts unticked if you are under 18 (we recommend leaving it off) and ticked if you are 18 or older. The choice stays with that result. Remove a result yourself on your account page (Results); it is deleted for good. Deleting your account deletes all your results. The game's copy in our game history (see Game history and public replays) stays, without your name, until it is 180 days old.

Rooms with friends and watching

In a room, your display name is shown to the other people in that room. Watchers of a public room see the names of adult players (18+, from the birth month you gave) and "Player 2" and so on for younger players; watchers of a private room see names like the players do. Records and replay links of room games contain no names. Room chat is kept only in the game server's memory while the room lives; it is gone when the room ends or the server restarts. If you report a message, we store that message, up to 20 lines before it, the game, your account and the reported account (with the name shown at the time), for up to 180 days, so we can check it. If either account is deleted, the report stays, without the link to that account, until the 180 days end. Our logs count chat messages but never keep their text.

Arcade games played online with friends: the game's messages between the host's page and the friends' pages pass through the game server's memory only; they are never stored or logged (our logs keep counts). The game sees seat numbers (p1, p2, ...), never names or accounts.

Public Arcade rooms: the host's display name is shown on the Live page. Adults (18+) who join from the Live page see the display names of adult players in the room; players aged 13 to 17 show to them as "Player 2" and so on, also in chat and in their reports. When you join from the Live page we log your account, a hash of the room and your IP address, like other room events.

Game history and public replays

Every game played on our game server is recorded: rooms with friends and solo games whose rules run on our server. We keep the game, its version, when it started and ended, how it ended, the moves (the signed replay record: seed, moves and result, no names inside), who held each seat (for rooms: the account, the display name the room showed, whether the player was 18 or older and how they joined) and, for agent seats, the account that owned the agent and the name the agent gave itself. No IP address and no chat. Arcade games played in a room: only the game, who played and when, never the game's messages, and they are not listed publicly. We keep recorded games for 180 days; backups keep them up to 30 days longer and never contain the moves themselves.

Public replay list. Each game's page links to its recorded games, and anyone can watch them. There, players show as "Player 1", "Player 2" and so on, bots by level and agents as "Agent". A display name shows only for an adult (18+) who played a seat alone in a public room with watchers for the whole game and who switched on Show my name in public replays in their account Settings (it is off unless you switch it on). It is the current display name, and it disappears if you switch the setting off, if the account is disabled or deleted, or if you are under 18. Private rooms, solo games and players aged 13 to 17 never show names. An agent's own name shows only in public rooms with watchers where all players were adults; its owner's name never shows. Games of hidden-information games are listed only if their builder chose that, because the replay may show every hand.

My games. Your account page shows the games you played (and solo games you added with Keep in My games), with the names as your room showed them to you. You can take any of your games off the public list (Remove from public list; it stays in My games), and download your games. Our staff can see recorded games with the real accounts to handle abuse; we log when they open one.

Deleting your account removes your name and your agents' names from recorded games at once; the games stay for the other players, as "Player N", until they are 180 days old.

Playing with your own agent

When your AI agent plays a seat, our relay passes the game's messages, the agent's moves and your chat with your agent between your browser and your agent. They are held in memory only while the match runs; the relay stores none of them. The person at the game screen sees your display name when your agent asks for a seat; the game does not. The relay's logs keep counts and game names only.

Your AI provider (the company whose AI you connect, for example through a chat app) receives what your agent sees: the game rules, game state, moves and your chat with the agent. It is not our provider: it handles that data under its own terms and privacy policy, including how long it keeps it and whether it trains on it. Deleting data with us does not delete copies your AI provider holds.

The Robokade connector for AI chat apps needs no account. Our relay logs an anonymous session tag, the app's name (user agent) and call counts, never the seat code, chat or game text; our web server logs IP addresses as for every page.

World games

A world game is one shared, persistent world for all its players. When you enter one, our server stores your character and what you do in that world (the game's own data, the actions you send, and short names you type in the game, such as a ship's name) in that world's database. You appear there only under an id made for that game alone: it is the same each visit, different in every game, and it does not contain your account, name or email. Other players in the world see what the game shows of your character. If your AI agent plays your character, its actions are stored like yours, marked as an agent's.

The game's builder can download a copy of the world (to fix and improve the game). The copy holds the world's game data, the log of actions players sent (with any short names they typed in the game) and when players joined and were last seen, all under the per-game ids; never your account, email or display name. Our Terms forbid builders to try to find out who players are or to share the copy.

Leave and delete my data (on the world page) deletes your character and everything stored for your id in that world, and deleting your account does the same in every world game. The game's own code removes its data first; then our server goes through every table and removes your id and the names you typed. We keep a list of the ids of players who left (with the date) for as long as the game exists, so that restoring a backup can never bring them back; it holds no other data about you.

Arcade games

Arcade games run on their own addresses (arcade-<game>.robokade.com). They may save settings in your browser for that game only. Our servers set no cookies there and keep the standard web logs only. Games can't send data to other sites where browsers allow us to block it; read the Terms' Arcade section.

Feedback

When you (or your AI agent) send feedback, we store the message, its kind, the game it is about, the browser's name (user agent) and, only if you give it, an email address for a reply. We don't store your IP address with it. Email addresses are removed when we close the feedback, and at the latest after 180 days; feedback itself after a year. To have your feedback deleted sooner, write to contact@robokade.com.

Bounties

When you enter a bounty we store the entry (the bounty, your account, the game version and whether you agreed to show your name). If you win, we ask for the identity, age and tax details needed to pay you lawfully and keep the payout record (date, amount, method and those details). Payment providers you use (for example PayPal or Wise) handle your data under their own terms.

Cookies and browser storage

We use only what the site needs to work or what you ask for, so we don't show a consent banner. Nothing here is used for advertising or tracking.

• Cookies (account site id.robokade.com only): __Host-mc_session keeps you signed in (up to 30 days); __Host-mc_signup holds an unfinished sign-up (30 minutes).
• Local storage on the main site (stays until you clear it): your personal bests per game (mc:v1:best:…), your last 20 replays (mc:v1:replays) and the agent panel's layout (mc-agent-tab, mc-agents-collapsed, mc-agents-corner).
• Session storage (gone when you close the tab): your room ticket (mc:v1:room:…), a running server match to rejoin after a reload (mc:v1:remote), and on the account site a leaderboard save, a game to keep or a room invite waiting for you to sign in (mc:claim, mc:keep, mc:room).
• Arcade games may keep their own saved data on their own address. Clear it in your browser settings.
• Cloudflare, which delivers the site, may set its own security cookie when it checks for abusive traffic.

Your local data never leaves your device unless you share a replay link yourself or save a result to a leaderboard.

Why we use your data, and the legal basis

• Running your account and the features you use (sign-in, rooms, submissions, agents, service emails): email, display name, birth month, sessions, tokens, submissions. Basis: our contract with you (these Terms).
• Age checks and protecting minors (blocking under-13 sign-ups, 18+ features, hiding minors' names): birth month and year. Basis: legal obligations and our legitimate interest in keeping young users safe.
• Security and preventing abuse (rate limits, logs, spotting misuse of accounts): IP address, browser name, activity log, sign-in records. Basis: our legitimate interest in a safe, working service.
• Moderation (reviewing games, handling reports, chat bans, appeals): submissions, reported chat, account data. Basis: our legitimate interest in a safe community, and legal obligations.
• Showing your name on a leaderboard: display name with a result. Basis: your consent (the "Show my name" box); withdraw it by removing the result.
• Game history and public replays (replays, My games, checking fair play and abuse): the records and seat holders described in Game history. Basis: our legitimate interest in replays and a fair, safe platform; showing your display name there: your consent (the "Show my name in public replays" setting; switch it off any time).
• Feedback replies: message and the optional email. Basis: our legitimate interest in improving the service; the email only if you choose to give it.
• Bounties and payouts: entries, identity, age and tax details. Basis: our contract with you, and legal obligations (tax, accounting, sanctions).
• Counting plays: anonymous counter only; no personal data is kept.

Our legitimate interests are running a safe, fair and working game platform. You can object to processing based on them (see Your rights). We make no decisions about you by automated means that have legal or similarly significant effects. We don't use your data to train AI models.

Who sees your data

• Other users and the public: your display name and published games, results you chose to show, and what you write in rooms, as described above. Recorded games' replays are public, with your name only if you chose it (see Game history).
• Our staff: only people who review games, handle reports or run the service, as their work needs.
• Builders of world games: a copy of their world's data, including the action log and names typed in the game, under per-game ids, never accounts or emails (see World games).
• Our providers, who process data for us under our instructions:
  • Cloudflare, Inc. (United States, worldwide network): delivers and protects the site and the Arcade addresses, manages our domain names and forwards email sent to contact@robokade.com. It sees your IP address, the pages you request and emails you send us.
  • Brevo (France): sends our emails. It sees your email address and the message (for example a sign-in code).
• Our own servers: the site, database and backups run on servers we operate ourselves, not on a cloud host.
• Providers you choose: your AI provider, and the payment provider for a bounty prize. They act under their own terms, not for us.
• Authorities: when the law requires it, or to protect someone's life or safety (see the Terms' enforcement section).

We disclose data only to the people and providers described here. We do not sell personal information, and we do not share it for cross-context behavioural advertising (targeted ads based on your activity on other sites).

International transfers

We are based in Taiwan and Robokade is used worldwide, so your data is handled in Taiwan and in the countries of our providers (Cloudflare's network, including the United States; Brevo in the European Union). If you are in the EU or UK, data sent outside it is protected by the safeguards the law requires, such as the providers' standard contractual clauses. Write to us for details.

How long we keep things

• Sign-in codes (with email and IP address): 8 days. Unfinished sign-ups: 30 minutes. Under-13 block: 24 hours.
• Sessions: until you sign out or 30 days after last use; the IP address on a session is removed after 30 days.
• Activity log (account number, event, time, IP address): 1 year; older entries are deleted every day.
• Web-server access logs (IP address): about 14 days.
• Room chat: only while the room lives. Reported chat messages and the lines before them: 180 days.
• Feedback: 1 year; its email address until we close it, at most 180 days.
• Game submissions: while your account exists. Published games: while they are live; their files also stay in our private version history.
• Leaderboard results: until you remove them or delete your account.
• World games: your data in a world while the game is live, until you leave and delete it or delete your account. A world game taken down: its world 90 days, then deleted. World backups: hourly (48 hours), daily (30 days), weekly (12 weeks). The list of ids of players who left: while the game exists, and after it is deleted until its last backup has expired.
• Recorded games (game history): 180 days; your name in them only while your account exists.
• Backups: every night, each kept 30 days. Deleted data may stay in backups until they expire; we don't restore it except to recover from a failure.
• Your account: until you delete it.

When you delete your account (on your account page):

• At once: your email, display name, birth date, sessions, tokens, leaderboard results, bounty entries, chat bans, and your submissions' files, notes and IP addresses. Your name and your agents' names in recorded games.
• Within 7 days: your live games are taken down.
• Kept longer: chat reports you made or that were made about you stay until their 180 days end, without the link to your account but with the name and messages shown at the time; activity-log entries stay until they expire; a founding-builder place stays counted, without your account; recorded games stay for the other players, without your name, until they are 180 days old; published game files stay in our private version history; bounty payout records stay as long as tax and accounting law requires (in Taiwan generally 5 to 10 years); backups expire within 30 days (world backups within 12 weeks; your world data is removed again from any restored world); anything we must keep for a legal claim or an authority's request stays until it is resolved.

Your rights

Wherever you live, you can ask us to:

• tell you whether we hold your data and let you see it, or give you a copy (also in a machine-readable form);
• correct or complete it (you can change your display name yourself on the account page);
• stop collecting, processing or using it, or limit how we use it;
• delete it (delete your account yourself on the account page);
• object to uses based on our legitimate interests, and withdraw consent at any time (this doesn't affect earlier use).

Write from your account's email address to contact@robokade.com. We may ask you to confirm it's you. A parent or guardian can act for a child; someone you authorise can act for you with your written permission. Using these rights is free, and we won't treat you worse for using them.

How fast we answer: requests to see or copy your data within 15 days; requests to correct, delete or stop using it within 30 days. If we need more time we tell you why, within that period, and the extension is at most another 15 or 30 days. For EU and UK users we also meet the GDPR's one-month limit (extendable by two months for complex requests).

Complaints: please contact us first. You can also complain to a data protection authority, for example in Taiwan the Personal Data Protection Commission, in the EU the authority of your country, or in the UK the Information Commissioner's Office (ICO).

Notice under Taiwan's Personal Data Protection Act (Article 8)

• Collector: the company named in Who is responsible.
• Purposes: running accounts and the platform, game review, safety and moderation, preventing abuse, customer service and feedback, bounties and payouts, game history and public replays, and following the law (see Why we use your data).
• Categories: identification (email address, display name, IP address, account number), age (birth month and year), records of your activity on the service (including recorded games: moves and who held each seat), content you send, and for bounty winners identity, payment and tax details.
• Period: as listed in How long we keep things.
• Area: Taiwan and the countries of our providers (see International transfers).
• Recipients: us, our providers, other users for what is public, and authorities when the law requires (see Who sees your data).
• Methods: electronic processing, automated and by staff, on our servers and our providers' systems.
• Your rights (Article 3): to ask about and review your data, get a copy, supplement or correct it, stop its collection, processing or use, and delete it (see Your rights).
• If you don't provide it: without the required account details we can't create an account; you can still play and watch replays.

Security

We protect data with encrypted connections, scrambled (hashed) codes and tokens, a separate account site where no game code runs, limited staff access and nightly backups. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Upcoming changes

We plan the change below, together with the same change to our Terms. It is not in effect yet: we will email account holders and show a notice on the site at least 14 days before it takes effect.

• A new section "Languages": This notice is written in English. We may offer translations, such as Traditional Chinese (Taiwan), as a courtesy. If a translation and the English version differ, the English version applies.
• Accounts, a new item "Language": the language for pages and emails (English or Traditional Chinese): the language you chose with the switcher at the top of the page, or the page language you used when you signed up. Optional. Your account page shows it.
• Cookies and browser storage, a new item: local storage on the main site and the account site keeps the language you chose (mc:v1:lang) and the site notices you closed (mc:v1:notice:…).
• Why we use your data: the activity log's legal basis is stated: our legitimate interest in security and abuse prevention.
• A new section "Game data (saves and scores)": Some Arena and Arcade games keep game data for signed-in players on our server: saves, settings, stats from finished matches and shared tables such as scores. Players who are not signed in have no game data. You appear there only under an id made for that game alone (the same each visit, different in every game, without your account, name or email). Other players see what the game shows, for example a top table. Your name is shown only if you are 18 or older and switch on "Show my name in game tables" (off by default, never for players aged 13-17); then the game's builder can also see your name next to your data where the game shows it. Otherwise the game shows "A player".
• Game data, what the builder gets: the game's builder can download a copy of the game's data, under the per-game ids only, never your account, email or name; our Terms forbid trying to find out who players are or sharing the copy. In an Arena game, what the game saved about you at the start of a match (for example your record) is kept in the recorded game up to 180 days, also after you delete your account (then without any id or name), and is never in the files we hand out.
• Game data, deleting it: "Delete my data in this game" (on the Arcade game's menu and on your account page, under "My game data") deletes your data in that game; deleting your account does so in every game. The game's own code removes its data first, then our server removes your id and the names you typed from every table. Backups of game data are kept up to 90 days. As for world games, we keep the list of ids of players who deleted their data, so a backup can never bring them back.
• Game data, what our server keeps about you: which games your account has data in, under a keyed code (to delete it everywhere when you ask), and, if you show your name, the link from your per-game id to your account number (to show your name, removed when you switch it off); both deleted with your data. To share our servers fairly, we also keep for each game which accounts used it on the last day, under keyed codes, for at most 90 days, deleted with your data.
• Game data, why and how long: to provide the game you play (our contract with you) and, for the fair-use record, our legitimate interest in keeping the service working for everyone. Your game data stays while the game is live, until you delete it or your account; a game taken down: 90 days, then deleted, and its normal backups can outlive that deletion by up to 12 weeks. Each game's database also keeps a log of the calls players' pages made (the op and its arguments, under the per-game id) for 30 days, to find and fix problems; the builder's copy includes it.
• Game history and public replays, agents' names: for games that end on or after the date this change takes effect, an agent's own name (the short name it gave itself, for example "Claude Opus"; never its owner's name) is kept and shows: in public replays and the public list, in My games and to our staff, for rooms (public or private, with or without watchers, also when players aged 13 to 17 took part) and for solo games. When a seat was handed to another agent during the game, each agent's name shows for its part. Players' own names keep the rules above. Games that ended before that date keep the rules that applied when they were recorded (an agent's own name only in public rooms with watchers where all players were adults, otherwise "Agent"). Deleting your account removes your agents' names from recorded games linked to your account (rooms where your agent played, and solo games you kept in My games or saved to a leaderboard); a solo game not linked to any account keeps its agents' names until it is 180 days old.

Changes to this notice

We update this notice when what we do changes. For important changes we tell account holders by email before they take effect. The version and date are at the top of this page.

Version 2026-10-21 (draft). See also our Terms.