Privacy Policy

Last updated: 31 July 2026

This policy explains what Alt Horizon Games LLC (“ChudGames”, “we”, “us”) collects when you use chudgames.org, why, how long we keep it, and what you can do about it.

It describes what the system actually does. Where something is not yet built, it says so.

1. The short version

• You can play every game without an account.
• If you make one, we hold your email encrypted, your birth year only, and a hash of your IP address — never the address itself.
• There are no passwords, so there is no password database to breach.
• Games run in an isolated sandbox and cannot read your account or your session.
• We are US-only. Visitors from the EEA and the UK are blocked.

2. Information we collect

If you only play games

A single session cookie so the site works. Nothing else identifies you.

If you create an account

As you play

Which games you have played and when — one row per game with a counter, not a log of every session — plus your scores, favourites, and any progress a game asks us to save. We do not inspect the contents of saved game data.

If you watch an ad for a reward, we record that a reward was granted or refused, and why.

Automatically

Standard server logs, including a request identifier, timing, and a hashed IP. We use these to operate and secure the Service.

3. What we deliberately do not collect

• Passwords — there are none.
• Your date of birth — only the year is kept.
• Your IP address in readable form.
• Precise location. We use the country your connection resolves to, only to apply regional restrictions.
• Anything a game sends that we did not ask for. Games run on a separate origin, sandboxed, and cannot reach your account.

4. How we use information

• to run the Service — sign you in, save progress, show leaderboards;
• to keep it safe — rate limiting, fraud and abuse detection, enforcing our Content Policy;
• to show advertising, which funds the Service;
• to comply with legal obligations and respond to lawful requests.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under US state privacy laws.

5. Advertising

The Service is funded by ads served by Google. Ads are placed by us, on our own pages, outside the game frame. A game cannot serve its own ads.

Advertising consent signals default to denied. We do not set an advertising identifier ourselves, and we do not send your account identifier, email or handle to the ad network. The ad network receives what any web request carries — including your IP address — and may use it under its own policies.

Some games require a browser security mode incompatible with the ad script. Those games run with no ads at all, and the page says so.

6. Cookies

One cookie, __Host-chud_session, which keeps you signed in. It contains a random identifier and nothing else — no email, no user id, no claims. See the Cookie Policy.

7. Who we share information with

We also disclose information where required by law, to enforce our terms, or to protect the rights, safety or property of users or the public.

If we are involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction. We will give notice before your information becomes subject to a different policy.

8. How long we keep things

Reports concerning the safety of minors, and their evidence, are retained under legal hold and are not automatically deleted.

9. Your rights and choices

Regardless of where you live, you can:

• Access and export your data — GET /v1/me/export, from your account page;
• Delete your account and data — from your account page;
• Sign out everywhere, revoking every session immediately.

Moderation audit records about enforcement actions are retained after deletion. They exist to show enforcement was fair and consistent, and they identify the moderator and the action rather than describing you.

If you are a California resident, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing — we do neither. We will not discriminate against you for exercising these rights. Exercise them using the controls above or by emailing privacy@chudgames.org.

We will verify your identity through your registered email address before acting on a request.

10. Security

• Email addresses are encrypted at rest; the lookup key is a one-way hash.
• IP addresses and user-agents are hashed, never stored in readable form.
• The session cookie is HttpOnly, Secure, SameSite=Lax, carries the __Host- prefix, and is scoped to a single host so game code can neither read nor overwrite it.
• Games execute on a separate, per-game origin, sandboxed, with a restrictive content security policy.
• Every moderation action is recorded in an append-only audit log.

No system is perfectly secure, and we cannot guarantee absolute security.

11. Children

You must be 13 or older. We do not knowingly collect personal information from children under 13. If we learn that we have, we delete the account and its data.

If you believe a child under 13 has given us information, contact privacy@chudgames.org.

12. Where we operate

ChudGames is available in the United States only. Visitors from the European Economic Area and the United Kingdom are blocked at the network edge and are not served the site.

Information is processed in the United States and other countries where our provider operates infrastructure.

13. Changes

We will update the date at the top and, for material changes, give notice on the site before they take effect.

14. Contact

Alt Horizon Games LLC privacy@chudgames.org

(A registered business address is required here before publication.)