What's stored, and where it goes
Without an account
Nothing leaves your browser and no cookie is set. Pins, history, ratings,
playtime and your skin sit in this browser's localStorage
under the ach: prefix. Clearing site data erases all of it.
With an account
Stored on the hub's own server, nowhere else:
- Username, display name, bio — what you typed.
- Password — as a salted scrypt hash. The original is never stored and cannot be recovered, which is why there's no reset.
- No email address. None is asked for.
- Your save — pins, history, ratings, playtime, so it follows you between devices.
- Game progress — a copy of what the games themselves save, if you leave that switched on in Settings.
- Friends, messages and images — until you or the sender delete them.
- Sign-in records — time, IP address and browser string, so staff can see an account being attacked. This is the one thing kept that you didn't type. It is visible to staff only.
- What you're playing — the current title, shown to staff on the live view, and to friends only if you leave activity sharing on. It clears when you stop.
- Terms agreement — which version, and when.
Cookies
Exactly one, and only once signed in: a session token, HttpOnly
and SameSite=Lax. It identifies your session and nothing else.
There are no advertising or analytics cookies anywhere on the site.
Who can see what
- Messages — the people in the conversation, plus moderators if one is reported. Treat it as a school notice board, not a private channel.
- Your activity — friends only, and only if you leave it on.
- Your friend code — nobody, until you share it.
- Staff — can see accounts, sign-in records, reports and what people are playing. Staff actions are written to an audit log that other staff can read.
Third parties
- The games load from their own hosts and may store their own data on their own origins. What each game does is up to that game.
- Nothing is sent to advertisers, analytics services or data brokers. There are none.
Getting rid of it
- Settings → Export gives you a JSON copy of everything you've saved.
- Settings → Wipe this device clears the local half.
- Settings → Delete my account removes your profile, friendships, messages, images and synced saves. It is immediate and cannot be undone.
Children
This is aimed at school-age players and collects no email, no real name and no location. If you're a parent or teacher and want an account removed, message through feedback and it will be.
Being straight with you
This is a hobby project run by one person, not an audited company. It is built carefully — passwords hashed, permissions enforced on the server, no trackers — but it has not been security reviewed by anyone else. Don't put anything here you'd be hurt by losing or having read.