Privacy policy
Effective Oct 6, 2026.
PlayThePrompt (playtheprompt.com) is a site of free browser games. We collect as little as we can: you can play every game without an account and without accepting any optional cookie. This policy explains what we collect, why, for how long, and your rights. Questions and requests: [email protected].
What we collect
When you just visit and play
- Technical data: like every website, our servers receive your IP address and browser details with each request. We use the IP address to protect the site against abuse (limits on login attempts and similar), in a temporary store that deletes it automatically within hours. Our web server also keeps technical access logs for a limited period, for security and troubleshooting.
- Views: we count how many times each game is opened. These are anonymous totals per day; they do not identify you.
- Statistics cookie (only with your consent): a random identifier (
ptp_vid) that lets us count unique players per game. It is not linked to your name, email or account, and it is not shared with anyone. - Your choices: necessary cookies remember your language and your cookie choices. See the cookie policy.
- Game saves: games may store saves in your browser (on the games domain). They stay on your device; we do not receive them.
When you create an account
- Username, email address and password (we store only a secure hash of it, never the password itself).
- Your language, when you accepted the terms and confirmed you are 16 or older.
- The games you played (and when), your favorites and your ratings.
When you ask to become a developer
- Your request, the optional message you write to the admins, and the answer.
When you report a game
- The game, the reason, your description and your email address, so we can handle the report and contact you about it.
Why we use it, and on what legal basis
| Purpose | Legal basis (LGPD art. 7 / GDPR art. 6) |
|---|---|
| Providing your account, history, favorites and ratings | Performance of a contract (the terms of use) |
| Security, abuse prevention, technical logs | Legitimate interest in keeping the site safe and working |
| Counting views (anonymous totals) | Legitimate interest; no personal data is kept |
| Counting unique anonymous players (statistics cookie) | Consent, which you can withdraw at any time |
| Handling reports of games | Legal obligation (child protection law) and legitimate interest |
| Reviewing requests to become a developer, and account emails (confirmation, password reset, answers to requests) | Performance of a contract (the terms of use), at your request |
Who we share it with
We do not sell or rent personal data, we show no ads, and we use no third-party trackers, analytics or social widgets. Data is stored on servers we operate, rented from a hosting provider that processes it only on our behalf. Emails are sent through Resend (Resend, Inc., United States), which receives your email address and the content of each email only to deliver it, on our behalf. We may disclose data when the law requires it.
Our servers, and our email service, may be located outside your country (the email service is in the United States). We protect your data in the same way wherever it is processed, with the safeguards the law requires for international transfers.
How long we keep it
- Account data, history, favorites and ratings: until you delete them or the account.
- Statistics cookie data (unique players): 13 months, then deleted automatically.
- Resolved reports: 1 year after they are resolved.
- Answered requests to become a developer: 1 year after the answer. A note that an account may not send new requests, when an admin decides so: until an admin removes it or the account is deleted.
- Confirmation and password-reset links: until they expire (1 to 24 hours).
- IP addresses for abuse prevention: a few hours at most.
- Technical logs of the application (which may include your email address, for example when an email is sent to you): 90 days.
- Anonymous view counts: indefinitely, since they identify nobody.
Your rights
Under the LGPD (Brazil), the GDPR (EU and UK) and similar laws, you can: confirm whether we process your data and access it; correct it; delete it; get a copy in a portable format; withdraw consent; object to processing based on legitimate interest; and ask about sharing.
- In your account page: download all your data (JSON) and delete your account, at any time.
- Cookies: change your choices with "Privacy choices" at the bottom of every page.
- Anything else: write to [email protected]. We answer within 15 days.
You can also complain to a data protection authority: in Brazil, the ANPD (gov.br/anpd); in the EU or UK, the authority of your country.
Children and teenagers
Accounts are only for people aged 16 or older. Playing without an account collects no personal data beyond the optional statistics cookie. If we learn that an account belongs to someone younger than 16, we delete it. Parents and guardians can contact us.
Do Not Track and Global Privacy Control
We do not track you across other sites, so a Do Not Track signal changes nothing here. We honor Global Privacy Control (GPC): when your browser sends it, we record it as an opt-out of selling or sharing personal data and of targeted advertising. We do neither today, and GPC will keep blocking them if we ever add ads.
Security
Connections are encrypted (HTTPS), passwords are stored as salted hashes, sessions are protected against hijacking and cross-site attacks, and access to data is restricted. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
Changes
When this policy changes, we update the date above. For material changes, we will warn you on the site (and by email if you have an account) and ask for your cookie choices again when they are affected.
Contact
Privacy questions and requests: [email protected].