Summary
MUSA Arcade is a free game website and app. We built it to be fun and safe. We try to collect as little as possible. We do not sell your data. We do not show third-party ads. We do not record your voice or video calls. You can delete your account yourself at any time. If you are a parent, you can email us and we will delete your child's data.
What we collect
These are the only categories we keep:
Account
- The username and password you choose. Passwords are stored one-way scrambled (hashed with bcrypt-style hashing); no one — not even us — can read your original password.
- Your chosen avatar emoji or uploaded picture (if you upload one).
Play data
- Your SHAX coins, game saves, high scores, skins owned, friends list and achievements.
- What games you have played, so your "For You" shelf works.
Messages
- Chat messages and direct messages you send to friends. We store them so your friend can read them. You can delete your own messages.
- Messages pass through our bad-word filter before being stored.
Voice & video calls
- Calls connect directly between you and your friend (peer-to-peer WebRTC). We never record, listen to, or store the audio or video of your calls. We only keep a short log of when a call was placed, so your friend can call you back.
Device & safety signals
- A short device identifier and your network address (IP), used only to keep accounts secure, prevent cheating, rate-limit attackers, and show how many players are online.
- Basic browser info (user agent) sent automatically by every website.
Notifications
- If you turn them on, we keep the push subscription token your device needs to receive notifications. You can turn them off from Settings → Notifications (or iOS Settings → MUSA ARCADE) at any time, and the token is removed.
How we use what we collect
- Run the service. Sign you in, show your friends, save your games, send messages between players, send push notifications you asked for.
- Keep it safe. Rate-limit abuse, block attackers, filter bad language in chat, review reports, let the Owner remove rule-breakers.
- Legal basis (where this applies to you): we rely on (a) performing our agreement with you so the game works, (b) your consent for push notifications and uploaded avatars, and (c) our legitimate interest in a safe, cheat-free service.
What we never do
- We never sell your personal information.
- We never share it with advertisers.
- We never show third-party advertising inside MUSA Arcade.
- We never track you across other apps or websites.
- We never record your voice or video calls.
- We never ask for your real name, home address, phone number, birthday or school.
Kids & parents (COPPA, GDPR-K, etc.)
MUSA Arcade is designed for children and the whole family. We follow children's-privacy practices even where the law does not strictly require it:
- We do not ask kids for real-world personal information.
- We do not use kids' data for advertising or profiling.
- The only user-provided content we keep is the username, optional avatar and in-app messages — all of which can be deleted at any time.
- Chat is filtered. Every player can block and report any other player. The Owner can mute or remove accounts.
- Parents can email supportmusarcade@gmail.com to review, correct or delete their child's data. We will respond within 7 days.
Who we share with
We only share your information with service providers who help us run MUSA Arcade, and only to the minimum needed to do so:
- Netlify, Inc. hosts the website and stores accounts, saves and messages for us.
- Apple Push Notification Service and Google / Firebase Cloud Messaging deliver notifications if you turn them on.
If MUSA Arcade is ever sold or transferred, your data stays protected by this policy, or we will delete it. We may share data if the law requires us to (for example, a lawful request from authorities about an urgent safety matter) — this has not happened to date.
How long we keep it
- Active account: for as long as you keep playing.
- Account you deleted yourself: removed immediately. We do not keep a backup copy.
- Inactive account: after about 24 months with no sign-in, we remove the account and its saves.
- Chat messages: kept until you or your friend delete them, or your account is removed.
- Reports: the Owner's inbox keeps reports until they are resolved, up to 180 days.
- Security logs (IPs, device IDs): up to 90 days.
Your rights
Depending on where you live (UAE, EU, UK, California, etc.), you have the right to:
- Access the information we hold about you.
- Correct inaccurate information.
- Delete your account and the data linked to it.
- Object to processing or withdraw consent at any time.
- Portability — receive a copy of your account data in a machine-readable file.
You can exercise most of these yourself inside Settings. For anything you cannot do there, email supportmusarcade@gmail.com and we will act within 30 days.
Delete your account
You can delete your account yourself at any time: Settings → Delete My Account. You confirm with your password, and the account, SHAX, saves, friends list and all your messages are removed from our servers immediately. This cannot be undone.
Security
All traffic between your device and MUSA Arcade is encrypted (HTTPS/TLS). Passwords are stored one-way hashed. We rate-limit sign-in attempts and sensitive actions. We review new code for security issues before shipping it. No service can promise perfect security, but we take it seriously.
International transfers
Our servers run on Netlify's global network. Depending on where you are, your data may be processed in the United States, the European Union or other regions. We rely on standard safeguards (such as the EU Standard Contractual Clauses) where required.
Changes to this policy
If we change this policy, we will update the "Effective" date at the top and, if the change is important, show a notice in-app so you can read the new version before continuing. Continuing to use MUSA Arcade after a change means you accept it.
Questions, parent requests, data requests, security reports — email supportmusarcade@gmail.com. We read every message.
MUSA Arcade · About · Safety · Parent Dashboard · Terms of Use · Help · Back to MUSA Hub