Privacy Policy

Last updated: October 28, 2026

This policy explains what data Gamealia handles when you play, sign in or publish games, what we use it for, who we share it with and what you can do about it. We wrote it in plain language; if anything is unclear, write to us (see Contact).

Who we are

Gamealia is a web games portal operated by Cetin, based in the Argentine Republic. Cetin is the controller of the data described in this policy.

• Privacy contact: [email protected]

The games in the catalog are made by independent developers. When a game uses its own servers (for example for multiplayer or voice chat), that developer is responsible for the data it handles there (see Games and developers).

Summary

• You can play without an account. If you don't sign in, we don't ask for any personal data.
• Signing in is optional and done with Google. We store your Google account id, your email, a username and the URL of your profile picture.
• Statistics are anonymous: we count plays with a daily identifier that does not tell us who you are and changes every day.
• We show Google ads (AdSense). Google may use cookies; in the European Economic Area, the United Kingdom and Switzerland it asks for your consent first.
• We don't sell your data.

What data we handle

If you play without an account

• Anonymous gameplay statistics. When a game starts or ends a session, or asks for an ad, the portal sends an event with: the game, the event type, the session length, whether the device is mobile or desktop, and the country (derived from the connection, without storing your IP address). To count distinct players without identifying you we compute a daily identifier: a truncated SHA-256 hash of your IP address, your browser (User-Agent), the date and a secret key. It changes every day and we cannot reverse it to get your IP.
• Votes. If you vote on a game (like / dislike) without signing in, we store the vote against a hash of your IP and browser with a secret key, so there is one vote per device.
• Multiplayer rooms. If you create a public room without signing in, we link it to a hash of your IP with a secret key so we can close it or limit abuse.
• Data on your device. Your play history, language, preferences, votes and game saves stay in your browser's local storage (see Cookies and local storage).
• Technical data. Like any website, our servers receive your IP address and browser details with every request. We use them transiently to deliver the site, limit abuse (per-IP rate limits) and protect the service; we do not store them in our database linked to you.

If you sign in with Google

When you sign in, Google sends us a verified credential. We store:

• your Google account id and your email (verified by Google);
• a username we generate from your first name plus four digits (for example "Tino4821"), which you can change from your account page, and the URL of your Google profile picture;
• a random friend code and the date the account was created.

And while you use your account:

• History and preferences: which games you played, how often and when, and your preferences (for example tags you like), to show them on all your devices and recommend games.
• Cloud saves: the data each game saves through the Gamealia SDK (up to 1 MB per game).
• Friends and presence: your friend requests and friendships; and, while the portal is open, whether you are online, which game you are playing, a short status the game may set, and the code of a public room you are in. Only your accepted friends see this. We also remember which players you recently shared a room with, so you can send them a friend request.
• Votes: one vote per game linked to your account.
• Session: a session cookie (gl_session) that lasts 30 days or until you sign out.

We never receive your Google password or access any other data in your Google account.

If you are a developer

If you create a developer account we also handle:

• the public name of the studio or developer and the account type (individual or business);
• tax details: for individuals, legal name, country, tax id and address; for businesses, legal and trade names, registration number, tax id or VAT number, billing address and billing email;
• the payout method (for example a PayPal, Payoneer or Wise email, or an Argentine CBU/CVU/alias);
• the team's members and invitations (emails of invited people), and an audit log of actions taken in the account;
• API keys (we only store their hash and a prefix);
• the games you upload, their texts and images, their versions, the autotest reports, and the account's statistics, earnings, balance and payouts.

We review game code with automated tools, including AI models that run on Cloudflare Workers AI, and machine-translate listing texts. None of those tools receive player data.

Why we use it and on what legal basis

Ads

Gamealia is funded by Google AdSense ads (H5 Games Ads, publisher account ca-pub-9910641508291773). Ads are shown on the portal page, before and during games, and as rewarded ads you choose to watch; games do not load ads of their own.

Google and its partners may use cookies and similar identifiers to serve ads, limit how often you see one, measure results and, if you allow it, personalize ads based on your activity. Google acts under its own policies:

• How Google uses information from sites or apps that use our services
• Google Ads Settings, where you can turn off personalized ads
• Google Privacy Policy

If you are in the European Economic Area, the United Kingdom or Switzerland, a Google consent message (a consent management platform certified under the IAB Europe TCF) is shown before cookies are used for ads. You can accept, reject or choose per purpose, and change your choice later from the privacy link that message provides. If you reject, you can still play: non-personalized or limited ads are shown.

The portal also records anonymously how many ads were requested and shown in each game, to work out each developer's earnings.

Games and developers

• Each game runs isolated. Games are served from a separate domain (gamealia-cdn.tinchogon34.workers.dev) inside a sandboxed frame (iframe): through the portal they cannot read your session, the portal's cookies or other games' data.
• What a game receives. If you are signed in and the game asks, it receives your username, the URL of your picture and an identifier that is different for every game (so two games cannot combine data about you). It never receives your email or your Google account id.
• Developers' servers. Some games connect to their developer's servers (for example for multiplayer). Developers must declare those servers and may not use trackers or third-party analytics, but what happens on their servers is their responsibility.
• Microphone and camera. A game may ask for the microphone or camera only if it declared it and we approved it at review. Your browser asks for your permission and you can say no. Some games offer voice chat through third-party services (for example LiveKit) chosen by their developer; the audio goes to those services, not through Gamealia, and we do not record it.
• Game saves. Without an account, games save in your browser's local storage. Signed in, in your Gamealia cloud. Each game only sees its own saves.

Who we share data with

We don't sell or rent your data. We only share it with:

• Cloudflare, Inc. (hosting, database, storage, statistics, content delivery, abuse protection and AI models): processes the data on our behalf.
• Google (Sign in with Google and AdSense ads), under its own policies.
• Developers, only what is described in Games and developers, plus aggregated, anonymous statistics about their games.
• Other players: your username, picture and friend code are visible to people who share a room with you or add you; your presence, only to your friends.
• Payment providers (PayPal, Payoneer, Wise, Mercado Pago or banks), only to pay developers.
• Authorities, when a law or a valid order requires it, or to protect people's rights and safety.

International transfers

Our providers operate in several countries, including the United States and the European Union, so your data may be processed outside your country. Where the law requires it we rely on appropriate safeguards, such as the standard contractual clauses in Cloudflare's and Google's data processing terms.

How long we keep it

• Player account, history, preferences, friends and saves: while you have the account. When you delete it from your account page, they are erased right away, together with your votes, API keys and memberships of developer teams. If you ask us by email instead, we erase them within 30 days. In both cases we keep only what the law requires (for example earnings and payouts of a developer account) and the team audit log of developer accounts you belonged to, which keeps an anonymous identifier instead of your email. If a developer deletes a game, we erase its saves, votes and history.
• Ad counters per daily identifier: deleted after 2 days.
• Anonymous statistics events: up to 3 months; after that only daily totals per game remain, with no identifier.
• Votes: while the game stays published, or until you take your vote back.
• Session cookie: 30 days, or until you sign out.
• Developer data, earnings and payouts: while the account exists and, afterwards, for as long as tax and accounting rules require.

Your rights

You can ask us at any time to access your data, correct it, delete it, object to or restrict its processing, and receive a portable copy. Where processing is based on your consent, you can withdraw it whenever you want.

• How: write to [email protected] from your account's email. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days (Argentine Law 25,326), and in any case within one month.
• On your own: on your account page you can change your username, download a copy of your data (a JSON file with your profile, history, saves, friends, votes and developer memberships), clear your play history and delete your account. Deleting it is immediate and cannot be undone; if you are the only owner of a developer account that still has games, a balance or other members, transfer its ownership or delete it first. You can also sign out, remove friends, take back your votes and clear local data from your browser settings. Developers can delete their developer account from the developer portal when it has no games and no pending balance. Writing to us by email remains an alternative for any of these requests.
• Without an account we hold no data that identifies you: the daily hashes cannot be linked to you.

Argentina. The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, under section 14(3) of Law No. 25,326. The AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, as the supervisory authority of Law No. 25,326, handles complaints from anyone whose rights are affected by a breach of the personal data protection rules.

European Economic Area, United Kingdom and Switzerland. You have the rights granted by the GDPR (or its local equivalent) and may lodge a complaint with the data protection authority of your country.

Children

Gamealia is a general-audience portal: games must be suitable for all ages. Even so, the service is meant for people 13 or older, and to sign in you must be at least 13, or the minimum age of digital consent in your country (for example up to 16 in some European Economic Area countries), or have your parent's or guardian's permission. Younger children should use the portal with an adult.

We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has given us data, write to us and we will delete it.

Cookies and local storage

Our own cookies. We only use one: gl_session, which keeps you signed in (30 days, HttpOnly and secure). If you don't sign in, it is never created.

Browser local storage (not sent to our servers unless you are signed in and it syncs with your account):

Developers also have a local setting with the active developer account.

Installable app (PWA) and service worker. The portal installs a service worker that keeps copies of the site's files, the catalog, game listings and images on your device, so it loads faster and works offline. It holds no account data. You can remove it together with the site's data from your browser.

Third-party cookies. Google may use cookies for ads and for Sign in with Google (see Ads).

Security

We use encrypted connections (HTTPS), protected session cookies, API keys stored only as hashes, games isolated on another domain, and a review of every version before it goes live. No system is foolproof: if we detect an incident affecting your data, we will notify you where the law requires it.

Changes to this policy

If we change this policy, we update the date at the top. If the change is significant, we will announce it on the portal or by email before it takes effect.

Contact

For any privacy question or to exercise your rights: [email protected].

See also the Terms of Use.