PRIVACY POLICY

Miraaj Games (“we”, “us”, “the Service”) is a browser-based arcade hosted at miraajgames.com. This Privacy Policy explains what information we collect when you use the Service, how we use it, and the choices you have. Contact us anytime via the contact form.

Account data. When you sign up, we collect the email address and password you provide. Passwords are stored only as bcrypt hashes — we never see or store your plain-text password. You may also provide a display name, nickname, and avatar image; these are visible to other users.

Gameplay data. We store the scores you submit, the games you play, and timestamps so we can run leaderboards and your profile stats. Some games (e.g. multiplayer matches) record per-move data so we can replay or audit the session.

Messages. Direct messages and group conversations between users are stored in our database so you can read them later. In-game chat during multiplayer matches is ephemeral and broadcast only — it is never written to disk.

Preferences. Theme and display-mode choices are saved against your account so they sync across devices.

Technical data. Our servers receive standard web request metadata (IP address, user agent, request path, timestamps) for security, abuse prevention, and basic operations monitoring (AWS CloudWatch).

• To create and maintain your account.
• To run leaderboards, stats, and matchmaking.
• To deliver messages between users.
• To remember your theme, mode, and other preferences across devices.
• To detect abuse (cheating, spam, fraudulent score submissions).
• To respond to support requests sent via the contact form.

We use a small number of cookies. None are used for tracking you across other websites by us directly.

• Session cookies — set by NextAuth so you stay signed in.
• Advertising cookies — set by Google AdSense (see below). You can decline these via the cookie banner.

We display ads through Google AdSense to support the cost of running the Service. Google may use cookies and similar technologies to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to our sites and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ads Settings, or opt out of third-party vendor cookie use for personalised ads at aboutads.info.

We do not sell your personal information. We share data only with the providers needed to operate the Service:

• Neon (Postgres) — managed database hosting.
• Amazon Web Services — application hosting and operational telemetry.
• Google AdSense — for advertising delivery.

We may also disclose information when legally required (e.g. a valid court order).

We keep your account data for as long as your account is active. You can delete your account at any time from the profile page; this permanently removes your account record, messages, gameplay history, and stats. Backups are rotated within 30 days.

Depending on where you live, you may have the right to access, correct, export, or delete personal data we hold about you. You can exercise most of these rights directly from your profile page, or by emailing us through the contact form.

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance.

Questions about this policy? Reach out via the contact form.