Privacy Policy
What we collect
Creators (signed in): when you sign in with GitHub we receive your GitHub id, login, and display name (and email only if you provide it). We store the projects, API keys, and deployments you create.
Players: players need no account. A game assigns a per-room player id and a display name (which you choose, default "Guest N"); these are tied to the room, not to a personal profile. Scores you submit are stored for the game's leaderboard.
Operational data: we process IP addresses transiently for rate limiting and abuse prevention, and to derive an approximate country (used only as an aggregate count to plan server locations — the IP itself is not stored against it). We keep aggregate, non-identifying counters (page views, traffic source, country, rooms, concurrent players) for capacity, billing, and understanding usage. These are daily totals only — no cookies, no per-visitor tracking, no profiles.
No cookies on game pages
By design, no cookies are set on the origin that serves games — authentication uses a bearer token held in your dashboard's local storage, never an automatically-sent cookie. Hosted games run in a sandboxed frame with no access to your antics session.
Why we process it (legal basis)
To provide the service you asked for (performance of a contract), and for our legitimate interest in keeping it secure and abuse-free. We do not sell your data or use it for third-party advertising.
Who we share it with (sub-processors)
We use service providers strictly to run antics: GitHub (sign-in), MongoDB Atlas (database hosting), and Amazon Web Services (server & file hosting). They process data on our behalf under their own terms.
Where & how long
Data is hosted in the United States, so if you are in the EEA your data is transferred outside it. For those transfers we rely on appropriate safeguards — our hosting providers (Amazon Web Services and MongoDB Atlas) offer Standard Contractual Clauses through their data-processing agreements.
Keyless rooms and their data expire (currently after 24 hours). Account data (projects, keys, leaderboards) is kept until you delete it or close your account.
Your rights
If you are in the EU/EEA (or a similar regime), you have the right to access, correct, delete, export, or object to the processing of your personal data. Sign-in account data can be removed by deleting your account in the dashboard, or email privacy@antics.gg. You may also complain to your local data-protection authority.
Children
antics is not directed at children under 16, and we do not knowingly collect their personal data.
Changes
We may update this policy; we'll change the "last updated" date above and, for material changes, give notice where appropriate.