Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect information you provide directly, such as your display name and email address. We also automatically collect usage data including:

• Games played, session duration, and scores
• Device information, browser type, and operating system
• IP address and approximate geographic location
• Referring URLs and pages visited
• Cookies and similar tracking technologies (see our Cookie Policy)

2. Legal Basis for Processing (GDPR)

We process your personal data under the following lawful bases as defined by GDPR Article 6:

• Consent — for analytics cookies and personalized advertising. You can withdraw consent at any time via our cookie preferences banner.
• Contract — to provide the gaming service you signed up for and manage your account.
• Legitimate Interest — for site security, fraud prevention, and service improvement.

3. How We Use Your Information

We use your information to provide and improve our services, send communications, and personalize your gaming experience. We track gameplay statistics to provide streaks, leaderboards, and time management features.

4. Third-Party Services

We use the following third-party services that may process your data:

• Google Analytics (Google LLC) — measures site traffic and user behavior. Data is retained for 14 months. Google Privacy Policy
• Google AdSense (Google LLC) — serves advertisements to free-tier users. May use cookies for ad personalization. How Google uses data
• Brevo (Sendinblue) — sends transactional and marketing emails. Brevo Privacy Policy
• Microsoft Azure — hosts our platform and stores data. Microsoft Privacy Statement

5. Information Sharing

We do not sell your personal information. We may share data with service providers who help operate our platform (as listed above) and as required by law. We do not share your personal information with third parties for their own marketing purposes.

6. Advertising

Free-tier users see non-intrusive advertisements served by Google AdSense. These ads may use cookies for personalization if you have granted consent. You can opt out of personalized advertising at any time by:

• Updating your cookie preferences using the banner at the bottom of the page
• Visiting Google Ad Settings
• Using the DAA opt-out tool

Bear Arcade is a free platform supported by non-intrusive advertising.

7. Data Retention

We retain your account data for as long as your account is active. Gameplay statistics are retained indefinitely to maintain leaderboards and progression. If you delete your account, personal data is removed within 30 days, though anonymized aggregate data may be retained. Google Analytics data is retained for 14 months from the date of collection.

8. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS) and at rest. Passwords are hashed using industry-standard algorithms. However, no method of transmission over the internet is 100% secure.

9. Your Rights (GDPR/EEA)

If you are in the European Economic Area, you have the following rights:

• Access — request a copy of your personal data
• Rectification — correct inaccurate personal data
• Erasure — request deletion of your personal data
• Portability — receive your data in a structured, machine-readable format
• Restriction — request we limit processing of your data
• Objection — object to processing based on legitimate interest
• Withdraw Consent — withdraw consent at any time without affecting prior processing

To exercise these rights, contact us at privacy@beararcade.com. We will respond within 30 days.

10. Your Rights (CCPA/CPRA — California)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — what personal information we collect, use, and disclose
• Right to Delete — request deletion of your personal information
• Right to Opt-Out — opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to Non-Discrimination — we will not discriminate against you for exercising your rights

To submit a request, email privacy@beararcade.com. We will verify your identity before processing your request.

11. Children's Privacy

Our service is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe we have collected data from a child under 13, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting a notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this policy or wish to exercise your privacy rights, please contact us at privacy@beararcade.com.