Privacy Policy

Last updated: July 16, 2026

Tetromino Arcade is a browser game. The game does not ask for account login, payment details, uploads, or private documents.

Information Stored On Your Device

The game uses local browser storage for language, sound preference, tutorial completion, selected mode, starting level, ghost and grid settings, the best local score, and optional battle or leaderboard display names. This data stays in that browser until it is reset in the game or cleared through the browser's site-data controls.

During online battle navigation, the current room code or a pending invitation code may be kept temporarily in session storage so the game can reconnect or open the invitation. Session values are cleared when they are no longer needed and normally end with the browser session.

Cloudflare Hosting

Tetromino Arcade is hosted on Cloudflare Pages. Cloudflare Workers and Durable Objects operate friend battle rooms and the leaderboard. Cloudflare processes normal network and request data, including IP addresses, request headers, browser or device information, and timestamps, to deliver the site, route secure connections, limit abuse, maintain active rooms, and validate leaderboard submissions. Cloudflare also handles network data under its Privacy Policy.

Friend Battle And Leaderboard

Friend battle sends your display name, room code, ready status, score, lines, level, and game status through Cloudflare so both players can see the match. Active battle room data is not intentionally kept as match history after all connections to that room end.

Leaderboard validation creates a temporary run token when a solo run starts and associates it with the selected mode, IP address, and browser information. A public entry is created only when you press Submit Score. It contains the display name, score, lines, level, game mode, play time, and submission time. The action count and run token are used to reject unrealistic or automated scores but are not included in the public entry. Display names are filtered and must not contain personal contact information.

Run tokens and their associated validation data automatically become invalid after 90 minutes. They are held only in temporary service memory, removed when a valid submission uses the token, pruned during later run activity, or discarded when the service instance resets. Public leaderboard entries persist until they are displaced or removed.

Advertising And Consent

The current version has no live display ad slot IDs and no rewarded ad unit connected. Reserved ad containers and code paths remain inactive, so the site does not currently load an advertising provider, make ad requests, or set advertising cookies.

If advertising is enabled, third parties, including Google, may place and read cookies on your browser or use web beacons, IP addresses, or other identifiers to collect information as a result of ad serving on this site. Third-party vendors, including Google, may use cookies to serve ads based on your prior visits to this site or other websites. They may receive the page URL, IP address, browser or device information, cookie or advertising identifiers, consent signals, and ad interactions to deliver ads, limit ad frequency, measure performance, prevent fraud and abuse, and personalize ads where permitted.

Advertising is enabled only with the consent and privacy controls required for the visitor's region. Where consent is legally required, advertising cookies, similar local storage, and personalized advertising are not used before the required choice. In the EEA, United Kingdom, and Switzerland, the consent flow uses a Google-certified consent management platform. Available choices can be accepted, rejected, managed, and later changed through the site's consent controls. Google explains its processing in How Google uses information from sites or apps that use its services, and advertising preferences can be managed in My Ad Center.

Security

Pages are served over HTTPS. Battle and leaderboard requests are sent to the game server using HTTPS or secure WebSocket connections. Leaderboard entries are checked for basic abuse signals. Public scores are casual comparisons rather than official tournament results.

Analytics

The current site does not include a separate analytics tracking script.

Children

The game is designed to be simple and family-friendly, but it is not intended to collect personal information from children. Do not enter real names, phone numbers, addresses, or private information as display names.

Deletion And Contact

To request deletion of a leaderboard entry or other data you believe is associated with you, email lock.in.365d@gmail.com with the subject "Privacy deletion request." Include the exact display name, game mode, score, approximate submission date, or other details needed to locate the data; do not send passwords or sensitive documents. Because the game has no accounts, additional reasonable information may be needed to identify the entry. Use the same address, or the Contact page, for privacy questions, safety reports, or support.