Privacy Policy

• Account details — your email address, username/gamer tag, password (stored only as a secure one-way hash), and optional profile fields such as country, favourite systems and avatar.
• Sign-in method — if you sign in with Google, we receive your email, name and profile picture from Google to create or link your account.
• Subscription & billing status — your plan, subscription status and renewal/period information. Payments are handled by Mollie; we do not store your card or bank details.
• Gameplay & progression — cloud saves, favourites, achievements, XP/levels, challenges and leaderboard entries (leaderboard visibility is opt-in).
• Community content — messages you post in community rooms and any reports you make.
• Support — questions you ask the ByteBack Assistant and any support requests you submit, so we can help you.
• Technical & usage data — basic, privacy-safe product analytics events (for example that a page or feature was used) to run and improve the service. We do not sell your data.

We use your data to: create and secure your account; provide the games, saves and member features your plan includes; process subscriptions and renewals via Mollie; send necessary service emails (such as verification, password reset and billing notices); run the community and moderation; provide customer support; and keep the service safe, working and improving.

We process data to perform our contract with you (providing the service you signed up for), to meet legal obligations, and for our legitimate interests in running, securing and improving ByteBack Arcade. Where required, we rely on your consent (for example, the express consent you give at checkout for immediate access).

We share the minimum data necessary with trusted providers that help us run the service:

• Mollie — payment processing for subscriptions.
• Resend — sending transactional emails (verification, password reset, billing notices).
• Metered — powering optional voice chat in community voice lounges (used only if you join voice).
• Our hosting and database infrastructure — to store your account and gameplay data securely.

These providers process data on our behalf under their own terms and safeguards. We do not sell your personal data to anyone.

We keep your data for as long as your account is active and as needed to provide the service and meet legal, accounting and security obligations. If you close your account, we delete or anonymise your personal data where we no longer need it, subject to any records we must keep by law.

Under UK GDPR you have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To make a request, please use our Contact & Support page and the ByteBack Assistant — for account-specific requests we'll continue privately so we can verify and help securely.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you have concerns about how we handle your data.

We take reasonable technical and organisational measures to protect your data, including hashing passwords and restricting access. No online service can be perfectly secure, so please keep your login safe. ByteBack Arcade is not intended for young children, and accounts should be created and managed by adults or with appropriate consent.

Questions about your privacy or a data request? Use the Contact & Support page and the ByteBack Assistant.