We collect the minimum we need to run the Service: name, email, username, password (hashed), date of birth, and basic gameplay data.
We never sell your personal information. We share anonymized, aggregated statistics with research partners — counts and averages, not names and behaviors tied to you.
You can ask us to delete your account and all your data at any time, and we will.
This Privacy Policy describes how Polygames ("we," "us," "Polygames") collects, uses, shares, and protects information about you when you use our website at polygames.online and the games and services we offer through it (the "Service").
By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
We collect three categories of information.
When you create an account, we ask for:
| Data | Why we need it |
|---|---|
| First and last name | Personalization and account verification if you contact support |
| Email address | Account login, password recovery, magic-link verification, and important account notices |
| Username | Public display name within the Service |
| Password | Account security — stored as a bcrypt hash, never in plain text |
| Date of birth | Age verification (must be 21+) and to prevent underage access |
When you use the Service, we automatically collect:
If you sign in through a third-party service (we do not currently offer this, but may in the future), we may receive basic profile information from that provider. We do not buy or rent user data from data brokers.
We use your information to:
We do not use your information to make automated decisions that have legal or significant effects on you.
⬢ We do not sell your personal information. We do not rent it, lease it, or trade it. We do not share it with real-money gambling operators, sportsbooks, or any third party that would use it for their own marketing.
We share information only in these specific situations:
Polygames may be supported in part by advertising. When ads are shown, ad networks may use cookies and similar technologies to deliver, target, and measure ads. The data they collect is generally device-level (browser ID, IP address, general location, ad interactions) — not your personal account details.
We do not give ad networks your name, email, date of birth, password, or play history tied to your account. We do not run pop-up ads, autoplay-with-sound video ads, or ads disguised as game elements. If you ever see an ad that appears deceptive, broken, or inappropriate, send us a screenshot and we will get it pulled.
You can opt out of personalized advertising from most ad networks through industry-standard tools:
We share anonymized, aggregated data with research firms and industry partners. This is one of the ways we keep the Service free. Examples of what goes out:
Before any data leaves our servers for analytics purposes, identifying details are removed and the data is aggregated across many users so that no individual can be re-identified.
If you would prefer that your account not be included in aggregate analytics at all, email support and ask to be opted out. We do not make this a checkbox at signup because the data is already anonymized before it leaves us, but the option exists.
We use cookies and similar storage technologies for the following purposes:
You can control cookies through your browser settings. Most browsers let you block all cookies, block third-party cookies only, or clear cookies on exit. Blocking strictly necessary cookies will break login and gameplay.
We take security seriously. Passwords are stored as bcrypt hashes, never in plain text. All connections to the Service are encrypted in transit using TLS. Database access is restricted to authorized personnel and audited. We perform regular backups and security reviews.
No system is perfectly secure, however. If we discover a security incident that affects your personal information, we will notify you and the relevant authorities as required by law, generally within 72 hours of confirming the breach.
We keep your account information for as long as your account is active. If you close your account, we delete or anonymize your personal information within 30 days, except where we need to retain certain records for legal, tax, or fraud-prevention purposes (in which case retention periods are limited to what the law requires).
Aggregated, anonymized analytics data may be retained indefinitely because it no longer identifies you.
Depending on your location, you may have the following rights regarding your personal information:
To exercise any of these rights, email support. We will respond within 30 days. We do not charge fees for reasonable requests.
Polygames is for adults 21 and over. We do not knowingly collect information from anyone under 21. If we discover that a user is under 21, we will close the account and delete the associated data immediately.
If you are a parent or guardian and believe a minor has provided us with personal information, please contact us so we can remove it.
Our servers may be located in countries other than yours. By using the Service, you consent to your information being transferred to and processed in those countries. Where required by law (for example, transfers out of the EU/UK), we use standard contractual clauses or other approved safeguards to protect your data.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and post a prominent notice on the site at least seven days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.
Questions about this Policy, requests to exercise your rights, or any other privacy-related concern can be sent through the contact form on the site. We will respond within 30 days, usually sooner.
⬢ Bottom line: we collect what we need, we don't sell your data, we share only anonymized aggregates with research partners, and we will delete your account whenever you ask. If we ever change any of that, this page changes first — no buried updates.