privacy policy.
effective august 3, 2026
who we are
Machines at Play Inc. operates machinesatplay.com and related game-building, hosting, multiplayer, documentation, api, and command-line services. This policy explains how we handle personal information when you use those services.
information we collect
- account information. When you sign in with Google, GitHub, or Discord, we receive the basic profile information you approve, such as your name, email address, profile image, provider account identifier, and authentication tokens needed to connect and secure your account.
- content. We may store world names, scripts, configuration, assets, and other material you upload, publish, claim, or ask us to host. Messages you send to support are also stored.
- usage and device information. We and our hosting providers may process internet protocol addresses, browser and device details, request times, referring pages, error records, and similar service logs.
- cookies and local storage. We use cookies or similar browser storage for sign-in, sessions, security, and basic service operation.
how we use information
We use information to provide accounts, host and serve worlds, run multiplayer features, respond to support, protect the service, prevent abuse, debug failures, understand basic usage, meet legal duties, and develop the service.
public content
Worlds and related content that you publish may be available to anyone with the link and may be copied or indexed by others. Do not publish personal or confidential information that you do not want made public.
how we disclose information
We may disclose information to vendors that help us operate the service, including Cloudflare for hosting and data storage and Google, GitHub, and Discord for sign-in. We may also disclose information when you direct us to, when content is public, to protect people or the service, to comply with law, or as part of a merger, financing, acquisition, or sale of assets.
We do not sell personal information. We do not use personal information for cross-context behavioral advertising.
retention
We keep information while it is needed to provide the service, maintain security and records, resolve disputes, or comply with law. Retention periods depend on the type of information and why we hold it. We may keep backups for a limited period after deletion.
your choices and rights
You may ask to access, correct, or delete your account information by emailing hi@machinesatplay.com. You can also manage provider permissions through Google, GitHub, or Discord. Depending on where you live, you may have added rights to know, correct, delete, or receive a copy of personal information, or to object to certain processing. We will not discriminate against you for making a privacy request.
Because we do not sell personal information or use it for cross-context behavioral advertising, we do not currently treat browser do-not-track or global privacy control signals as opt-out requests.
security
We use administrative and technical measures intended to protect information. No storage or transmission system is completely secure, so we cannot guarantee absolute security.
children
The service is not directed to children under 13. If local law sets a higher minimum age for consent, that age applies. Contact us if you believe a child provided personal information without required consent.
international use
We and our providers may process information in the United States and other countries. Those countries may have different data protection laws from the place where you live.
third-party services
Third-party sign-in providers, links, and tools have their own privacy practices. This policy does not cover services that we do not control.
changes
We may update this policy as the service changes. We will post the updated version here and change the effective date. We will provide added notice when required by law.
contact
Email privacy questions and requests to hi@machinesatplay.com.