Privacy Policy

1. The short version

ShortPlay is anonymous-first. You can browse, play, heart, and save with no account, no name, and no email. To do that we store a random on-device identifier plus feed-usage data, used only to operate and improve ShortPlay. If you choose to sign in, we collect a limited set of account data described below — signing in is optional. We do not currently use third-party advertising or cross-site tracking. If that ever changes, we’ll update this policy and give the legally required notice and choices before it starts (see §10).

2. What we collect

Always — anonymous (no account needed):

  • A random anonymous identifier (sp_anon_id), generated on your device and stored in your browser’s localStorage. It is not linked to your real-world identity.
  • Product interaction events — e.g., which games you viewed, played, hearted, saved, or commented on — associated with that anonymous identifier, so we can rank and improve the feed.
  • Standard technical/log data that any web service receives (e.g., approximate request metadata handled by our hosting provider, Cloudflare), retained only as long as needed to operate and secure the service.
  • Only if you sign in (optional): an OAuth provider account identifier (from Apple or Google) and the email that provider shares — which may be an Apple private-relay address rather than your real email — plus an optional display name from your provider profile.

2a. How that data is used

The anonymous data above is used only to operate and improve ShortPlay — not to build advertising profiles. We do not knowingly collect names, emails, precise location, contacts, or payment data through the anonymous experience.

If you sign in, the account data is used only to create and operate your account and to carry your activity (hearts, saves, comments) across your devices. Sign-in is optional; the anonymous experience does not require it.

3. What we do NOT currently do

If any of this changes — in particular if we introduce advertising — we will update this policy and provide the required notice and choices before the new practice begins (see §10).

  • We do not currently use third-party advertising networks or ad SDKs.
  • We do not currently do cross-site or behavioral tracking; the hosting provider’s analytics beacon is blocked by our content security policy.
  • We do not sell personal information.

4. How we use data

To operate the feed, rank and recommend games, measure popularity, fix bugs, and protect the service from abuse — and, if you sign in, to operate your account and carry your activity across devices. The anonymous identifier and interaction events are used only to support the internal operation of ShortPlay, not to build advertising profiles.

5. Cookies / local storage

We use first-party localStorage (not advertising cookies) to keep your anonymous ID and app state on your device. This is strictly necessary to run the service, so there is no consent banner today. Clearing your browser storage resets your anonymous ID.

If we ever introduce advertising or other non-essential trackers, users in the EU/UK will be shown a consent prompt before any non-essential tracker loads, and we will honor opt-out signals (e.g., Global Privacy Control / GPC).

6. Children’s privacy

ShortPlay is a general-audience service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. We do not direct behavioral or targeted advertising to users we know or reasonably believe are minors. If you believe a child under 13 has provided us personal information you’d like removed, contact us at [email protected].

7. Sharing

We share data only with service providers necessary to run ShortPlay (e.g., our hosting provider, Cloudflare; and, for sign-in, your chosen OAuth provider) and as required by law. We do not sell personal information.

8. Your choices & rights

You can use ShortPlay without signing in, and you can reset your anonymous ID by clearing browser storage. If you have an account, you can delete it and its associated personal data at any time from Settings → Delete account. Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA (California) or GDPR (EU/UK) — for example, to access, correct, or delete your personal information. To make a privacy request, contact us at [email protected] and we will respond as required by applicable law.

9. Data retention & security

We do not keep your data indefinitely. Anonymous data (the on-device identifier and interaction events) is retained only as long as needed for the purposes described here, then deleted or de-identified. Account data (provider account identifier, email, optional display name) is kept while your account is active; you can delete your account at any time in the app (Settings → Delete account), and when you do we remove your account and personal data within 30 days — except that games you have published remain available to players with your personal attribution removed, and limited safety/moderation records and product analytics are retained in de-identified form. We apply reasonable safeguards. No system is perfectly secure.

10. Changes & contact

We’ll post changes with a new effective date for each version, and keep a dated changelog. For material changes — in particular introducing advertising, new third-party sharing, or new categories of data — we will give prominent in-app notice and, where required, obtain consent or offer opt-out, before the new practice takes effect. Questions: [email protected].