Privacy policy

This page says what personal data Ludomint stores, why, who else handles it, and what you can do. We store only what the site needs to work.

What we store

When you create an account

• Your email address, display name and handle.
• Your date of birth is asked once, to check that you are old enough. It is checked and not stored.
• A scrambled (hashed) form of your password. We never store the password itself. If you turn on two-step sign-in, we store its secret and backup codes.
• For each sign-in: when it happened, and the browser and network address it came from, so you can see and end your sessions.

When you use the site

• Your profile: picture, description and links, if you add them. These are public.
• What you publish: games, files, pictures, posts and comments. These are public unless a game is private.
• What you do: likes and dislikes, reviews and the reviews you marked as helpful, saved and wishlisted games, creators you follow, your library, posts and pictures in a game's community, and notifications.
• Reports, appeals, copyright notices and support messages you send, and decisions made about your content or account.
• How long you have played each game on this site while signed in. The refund rule uses it, and so does the rule that a free game can be reviewed after ten minutes of play.
• Your profile shows everyone your level, points and badges, with how many trophies you earned, games you played, reviews you wrote and jams you entered.
• What games save for you through the site: your progress in a game, the trophies you earned and your best scores. Score tables show your display name and score to everyone. A game receives your display name and an id made for that game alone, which it cannot use to find you in another game or to reach your account.
• Upload tokens you create for the upload tool: a name, its last four characters, when it was made and last used, and a scrambled form of the token that cannot be turned back into it.
• Game jams you host or enter and your votes in them. When you ask to join a playtest, the game's creator sees your name, your handle and the note you wrote.
• Your friends, the friend requests you sent or received, and the people you blocked. A person you block is not told.
• Private messages between you and your friends. They are stored as written so that both of you can read them later. Our staff do not read private messages. When the person who received a message reports it, staff see that one message and nothing else of the conversation.
• Collections you make: titles, descriptions, the games in them and your notes, which are public when you make the collection public; and the collections you follow.
• Ideas you post and the ideas you voted for. An idea is public with your display name.
• Computers you connected with the desktop app: the name the computer gave, its system, when it was connected and last used, and a scrambled form of its token.
• Cloud saves: the saved files of downloaded games that the desktop app sends, with their names and sizes and the name of the computer that saved last. Only you can download them. Play time in a downloaded game started from the app is counted like play on the site.
• Your controller layout, if you set one.
• If a parent or guardian supervises your account: who supervises it, the limits they set, and how long you played each day while signed in. The supervising account sees today's play time and this month's spending, not which games you played or what you wrote to anyone. Daily play totals are kept only for supervised accounts, and are deleted when the supervision ends.

When you buy or sell

• Your purchases: what you bought, when, the price, and the country the payment provider saw, which decides tax and any regional price. We never see or store your card details; the payment provider handles those.
• If you earn money here: your sales, your balance, your payouts, and the payout details you type in (for example a PayPal address or bank account), which only the staff who send payouts can see.
• A record of sensitive actions on your account (for example a changed password), kept for security.

When you visit without an account

• We count page views, plays, downloads and, where ads are shown, ad views per game as daily totals. To avoid counting the same visit twice we keep a short-lived, scrambled value made from your network address and browser. It is not stored with the totals and cannot be turned back into your address.
• If you joined the waiting list before the site opened, we keep that email address until you ask us to remove it.

We do not use outside analytics and we do not sell personal data. The only advertising is the ad network described below, on some free games, and nothing from it is loaded unless you agree.

Why we use it

• To run your account and show the site to you (needed for our agreement with you).
• To keep the site safe: stopping spam and abuse, handling reports, enforcing the rules (our legitimate interest, and in some cases a legal duty).
• To email you about your account. Emails about creators you follow and announcements are sent only if your settings allow it, and you can turn them off in Settings.

Who else handles it

These companies process data for us so the site can run. Some of them store data outside your country, including in the United States.

• Vercel runs the website.
• Neon stores the database.
• Cloudflare stores game files and pictures.
• Resend sends our emails.
• An ad network (Google AdSense), only on the pages of free games whose creator switched ads on, and only where ads are open. It shows a labelled advertisement below the game and, in some games, one more during a pause. It receives what any ad needs: your internet address and the page you are on, and it may set its own cookies, for example to limit how often you see an ad. We ask for ads without personalisation, so they are not chosen from a profile of you. Nothing from the ad network is loaded until you press "Show ads" in the place where the ad would be; your answer is remembered in your browser. Games marked as made for children under 13 never show ads.
• Paddle, our payment provider, takes payments as the seller of record, and receives what it needs for that: your email, country, payment details and what you bought.
• GitHub runs the automatic checks on uploaded games.

We give data to others only when the law requires it, or to the other side of a copyright dispute as that process requires (a counter-notice is passed to the person who complained).

How long we keep it

• Account data: until you delete your account.
• Deleted games: their files are removed 30 days after deletion.
• Records of moderation decisions about you: while your account exists.
• Copyright notices, and records of purchases and payouts: as long as the law requires for accounts and disputes, normally up to seven years. After you delete your account these no longer carry your profile.
• Short-lived counters used against repeat counting and spam: hours to days.

What you can do

• See and correct your data in Settings.
• Download a copy of your data in Settings, under Account.
• Delete your account in Settings. Your profile, games, comments, reviews, votes, community posts, collections, ideas, saved progress, cloud saves, trophies, scores, friends and private messages are removed, including the messages you sent that sit in other people's conversations. Connected computers are signed out. Someone hosting a game jam that others have entered must wait until it ends. A creator whose games have been bought, or who is owed money, must contact support first, so that buyers do not lose their games.
• Object or ask a question through the support form. If you are in the European Economic Area or the United Kingdom you also have the right to complain to your data protection authority; in Georgia, to the Personal Data Protection Service.

Children

The site is not for children under 13, and we do not knowingly keep accounts for them. If you believe a child under 13 has an account, tell us through the support form and we will remove it.

A parent or guardian can supervise the account of someone aged 13 or older, from the Family page, and limit age ratings, daily play time, monthly spending, and friends and messages. The supervised account has to accept first and sees its limits at any time. The limits apply while that account is signed in.

Cookies

See the Cookie notice. We set only the cookies the site needs to work. An ad network may set its own, only after you agreed to ads.

Changes

When this policy changes in a way that matters, we will say so on the site or by email before the change takes effect.