Last updated · 3 October 2026

Privacy policy

Leaf Arcade is a collection of free browser games at leafarcade.com. You can play without creating an account. This policy also covers our optional account portal at accounts.leafarcade.com.

Your games stay in your browser

Game progress, scores and preferences are stored in your browser’s local storage. Normal gameplay does not upload these saves to us. They remain until you reset them, clear site data or your browser removes them. Private browsing may erase them when the session ends.

Saves belong to the browser and website address where you played. Saves on loopgarden.pages.dev do not automatically appear on leafarcade.com. The old site remains available so you can return to your existing progress. The save recovery page lets you export supported saves to a file and import them on another browser or website address. This happens on your device without uploading the file to us. Before import, a recovery backup is stored in this browser; the next import replaces that backup, and restoring it removes it. Clearing site data removes both saves and the browser backup. Cross-device saving is not currently available; signing in does not upload or migrate local saves.

Optional accounts and Google sign-in

Clerk provides our account portal. If you create an account, it processes your email address, account identifier, sign-in activity and session information to authenticate you and protect your account. If you choose Google, we receive your Google account identifier, email address and basic profile, which may include your name and profile picture. We request only openid, email and profile permissions, with no access to Gmail messages, Drive files or contacts.

Account services use cookies or similar storage to keep you signed in and prevent abuse. Account information is kept while your account exists; you can request deletion or a copy through the contact above. Deleting an account does not clear browser-local game saves. You can also remove Leaf Arcade’s connection in your Google account settings.

Hosting and security

Cloudflare delivers the website and protects it against abuse. Requests necessarily include technical information such as your IP address, browser information, requested address and time. Cloudflare may process logs and security information for delivery, troubleshooting and protection. Providers retain technical records according to their service settings and applicable obligations; browser-local saves are separate from these records.

Optional local playtest

The playtest page offers an off-by-default option to record up to 1,000 game events and timestamps in this browser. These are not automatically sent to a server. You can download a file to share yourself, delete the events, or turn recording off to delete them. Do not include personal information in files you choose to share.

Optional Google Analytics

On leafarcade.com, Google Analytics 4 starts only if you choose “Allow analytics”. It measures page visits, traffic sources, device information and approximate location using Google’s processing of technical request data, including your IP address. Analytics cookies use a 30-day expiry. We do not send game boards, saves, account identifiers or URL query strings to Analytics. Advertising consent and Google signals are disabled. The payment demo, save recovery and local playtest pages are excluded from page measurement.

You can reject analytics and keep playing, or change your choice using “Analytics preferences” on any page. Withdrawing consent stops further measurement and removes accessible Analytics cookies; it does not erase data already collected. Your choice is saved in this browser until you change it or clear website data. This processing relies on your consent. Google’s service may process data internationally under its applicable safeguards. Contact us about access or deletion requests.

Sandbox checkout

The separate payments demo uses Stripe test checkout when configured. It is not a real purchase and does not unlock paid game features. Use sample details and test payment information. The demo can set a secure receipt cookie lasting seven days and store test transaction identifiers, a hashed browser identifier, status and timestamps in Cloudflare’s database. Stripe processes information entered into its hosted checkout; our demo does not store card numbers.

Why we process information

If you contact us, we process the details you provide to answer your request. We keep correspondence only as long as needed to resolve the matter and address related legal or security requirements. Avoid sending passwords, payment details or unnecessary sensitive information.

Where European data-protection law applies, account processing is needed to provide the account service you request. Delivery, security and handling support requests rely on our legitimate interests in operating a reliable service and resolving problems. Optional local playtest recording starts only when you choose it. Providing account information is optional, but sign-in cannot work without it. We do not use your information for automated decisions with legal or similarly significant effects.

Providers and international processing

Cloudflare and Clerk process information to provide hosting and authentication. Google processes your chosen sign-in, and Stripe processes the optional sandbox checkout. Their services may process information outside your country, including in the United States. Applicable contractual safeguards, including standard contractual clauses where required, are described in their data-protection documentation. Contact us for information about safeguards relevant to your data.

Provider information: Cloudflare privacy, Clerk data processing, Google privacy and Stripe privacy.

Your choices and rights

You can keep playing anonymously, clear local saves through your browser, and disable local playtest recording. Contact us to request access, correction, deletion or portability of account data, or to object to or restrict processing where applicable. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. We may need to verify account ownership to protect your data. You can complain to your local data-protection authority; in Poland this is the President of the Personal Data Protection Office (UODO).

We do not sell personal information or use advertising trackers in the standalone games. If you play a separately distributed version on a game portal, that portal’s own privacy and advertising practices also apply.

Changes

We will update this page before introducing cloud saves or materially changing how personal information is used. The date at the top identifies the current version.