Privacy Policy

Last updated: June 11, 2026

Whimcade is designed to need very little about you. There are no accounts, no passwords, no advertising, and no sale of personal data. This page describes exactly what we do collect and why.

1. What we collect

• Your email address — collected when you submit a wish, used to tell you when your game is ready and to send updates about your game. Nothing else.
• Your wish and refinement messages — the game idea you type and any follow-up instructions are stored with your game and sent to the AI build agent that creates it.
• An anonymous visitor fingerprint — a one-way salted hash derived from your IP address and browser identifier. It lets us recognize "the same visitor" (your games, free-tier limits, play counts) without storing your raw IP address or browser details on those records.
• Play activity — when you play a published game we record which game, the session length, and the anonymous fingerprint above. This powers play counts and trending rankings.
• Operational logs — standard short-lived server logs (requests, errors) used to keep the service running and abuse-resistant.

2. Cookies

Whimcade does not use tracking cookies or third-party analytics scripts. Games run sandboxed on a separate, cookieless origin, and a game cannot read anything about you.

3. How we use information

We use the data above only to operate Whimcade: building and delivering your game, emailing you about it, enforcing free-tier and abuse limits, ranking the arcade, and debugging the service. AI game generation runs on infrastructure we operate together with our platform provider; your wish text is processed by an AI model to build your game.

4. Sharing

We do not sell or rent personal data. We share data only with the service providers that run Whimcade — cloud hosting (Google Cloud) and email delivery — and only as needed to provide the service, or if the law requires it. Your published games, their titles, and descriptions are public by design; your email address never is.

5. Retention

Game records, wishes, and build history are kept while your game exists so you can keep iterating on it. Email addresses are kept with the game they belong to. Operational logs are kept briefly and rotated. If you ask us to delete your data, we remove your email address and your games' content from the live service.

6. Your rights

Depending on where you live (including the EU/EEA under GDPR and California under CCPA), you may have the right to access, correct, delete, or export personal data we hold about you, and to object to or restrict certain processing. We honor these requests for everyone: email contact@whimcade.com from the address you used on your wish, and we will verify and respond. We do not discriminate against you for exercising these rights.

7. Children

Whimcade is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us an email address, contact us and we will delete it.

8. Changes

We will update this page if our practices change; the "Last updated" date above reflects the current version.

9. Contact

Privacy questions and deletion requests: contact@whimcade.com.