Privacy policy

Effective November 10, 2026

XGames.fun is a place to play browser games made by independent creators, often from a post on X, and to make and publish them. It is run by Lucky Dog Studio LLC (“we”). This policy says what we collect, why, who sees it, and what you can do about it. Questions: Anthony@luckydog.studio.

The short version: we use your sign-in to know it’s you across games. From X or Google we take your account id, name and picture, never your email or your posts. We don’t sell personal data or show ads. Wallet addresses and anything done on the Solana blockchain are public and permanent.

What we collect

When you sign in to play

• With X: your X account id, handle, display name, profile picture address and whether X verified the account. We ask X for read-only access (its “users.read” and “tweet.read” permissions, which X grants together) and read only your profile. We never post for you, read your posts or read your messages.
• With Google: your Google account id, first name and profile picture address. We don’t ask for your email address.
• Your player name, if you signed in with Google and picked one.
• A wallet you link on your account page: its public address, and the signed message that proves it’s yours. We never see or ask for your private key or recovery phrase.

When you play

• What a game saves for you: progress, scores and leaderboard entries (shown with your name), items, and anything else the game keeps in its own database or files.
• Multiplayer: the room you join and the messages the game sends through our servers to set up the connection. Voice chat travels directly between players’ browsers; when that isn’t possible it goes through an encrypted relay (Cloudflare). We don’t record it.
• Giveaways and events: your entry or check-in (your account, wallet and player name), results, and the prizes you claim.

When you make games (creators)

• The email address you sign in with, your projects, prompts, files, generated assets and published games.
• Payments for plans: the wallet that paid and the transaction on the blockchain.

Automatically

• IP address and browser details, which our hosting providers log, and which we use to stop abuse (rate limits) and keep the service secure.
• A one-way code of the network you sign in from (part of your IP address, scrambled with a key only we hold) kept for up to 30 minutes with a game’s sign-in code. It checks that whoever approves a sign-in is on the same network as the game that asked, so a look-alike game can’t sign in as you. The address itself is not stored.
• Page views (which pages are visited, from where), to understand how the site is used. We don’t record your screen, keystrokes or what you type, and don’t build a profile of you.

Cookies and storage

The sign-in and login cookies are needed for the service to work. We don’t use advertising cookies.

How we use it

• To sign you in, keep you signed in, and show your name to other players and on leaderboards.
• To run games, saves, leaderboards, multiplayer rooms, giveaways and prize claims.
• To stop cheating, fraud and abuse, including enforcing a game’s bans across the accounts and wallets linked to you, and keeping one entry per person where a giveaway asks for that.
• To take payments for plans, answer support requests, keep the service secure and improve it.

What game creators see

Games on XGames.fun are made by independent creators, not by us. When you sign in to a game, that game gets a sign-in token for that game only, naming your account id, your X handle or player name, whether X verified you, and your linked wallet address, if any. The game’s own server may keep what the game sends it. On their console, a game’s owner sees counts and stats, its leaderboards and saves, and players by a pseudonymous id that is different in every game. They may ban or hide players in their game. Each creator is responsible for how their game uses what it receives.

What is public or permanent

• Blockchain. Wallet addresses, transactions, NFTs and prizes on Solana are public to anyone and can’t be changed or deleted by us or anyone else.
• Permanent storage. Art and metadata you choose to store on Arweave (for example an NFT’s image) stays there permanently.
• Leaderboards and results. Your player name or X handle, scores, giveaway entries and winners are shown to other players.

Who we share it with

We don’t sell or rent personal data. We share it only with the services that run XGames.fun for us, under their own privacy and security terms, and as the law requires:

• Vercel (website hosting) and Supabase (database and creator sign-in), in the United States.
• Cloudflare (game hosting, game storage and databases, voice relay, traffic statistics).
• X and Google, when you choose to sign in with them.
• PostHog (page-view analytics).
• Solana network services, which send your transactions to the blockchain, and Arweave, when you choose permanent storage.
• For creators making games with our studio: AI services that generate code, images, 3D models and sound (such as OpenAI, Anthropic, ElevenLabs and Meshy) receive your prompts and files to do so.
• The creators of the games you play, as described above.

We may disclose information if the law requires it, to protect players or the service from harm or fraud, or as part of a sale or merger of the business (this policy would still apply to it).

How long we keep it

• Your account (sign-in ids, name, linked wallet) until you ask us to delete it.
• Sign-in codes and network codes: minutes. Login cookies: as in the table.
• Game saves and scores: as long as the game is published, or until you or the creator delete them.
• Giveaway records: as long as needed to deliver prizes and keep results fair and checkable.
• Server logs: kept by our hosting providers for a limited time, usually days to weeks.
• Anything on the blockchain or Arweave: permanently, beyond anyone’s control.

Your choices and rights

• On your account page you can see what’s linked, change your player name, add or remove X, Google or a wallet, and sign out.
• You can remove XGames.fun’s access in your X or Google account settings at any time.
• You can ask us to see, correct, export or delete your personal data by emailing Anthony@luckydog.studio. We answer within 30 days. We can’t delete what is on the blockchain or Arweave, or data a game’s creator holds on their own server (ask them).
• Depending on where you live (for example the EU, UK or California), you may have further rights, such as to object to or restrict some uses and to complain to your data protection authority. We don’t sell or “share” personal data for advertising.

Security

Sign-in cookies can’t be read by page scripts, game tokens last one hour and work for one game only, and sign-in is designed so that one game can’t sign in as you in another. No system is perfectly secure: if you think your account was misused, tell us at Anthony@luckydog.studio.

Children

XGames.fun is not meant for children under 13, and we don’t knowingly collect their personal data. Where the law requires a higher age without a parent’s consent (for example 16 in some EU countries), that age applies. If you believe a child has given us personal data, email Anthony@luckydog.studio and we’ll delete it.

International transfers

We and our providers process data in the United States and other countries. Where the law requires it, we rely on our providers’ standard safeguards for these transfers.

Changes

If we change this policy we’ll update the date above, and for significant changes tell you on the site before they apply.

Contact

Lucky Dog Studio LLC, 1603 Capitol Ave Ste 415 PMB 544412, Cheyenne, Wyoming 82001-4562, United States. Email: Anthony@luckydog.studio.