Last updated 26 September 2026

Privacy Policy

QuickPlayroom is a collection of small browser games at quickplayroom.com. You can play every game without an account. If you sign in, we keep as little as the games need, and you can delete it yourself at any time.

Who we are

QuickPlayroom is run by QuickPlayroom ("we", "us"). We decide what is collected and why, which makes us the data controller. For anything about your data, email [email protected].

What we collect

If you play without signing in

• Game state while a game is running. For online games, the server holds the room: which ships each side chose, where they are, and the shots fired. It is kept in memory and discarded when the room has been empty for an hour. Games played against the computer never leave your browser.
• Finished online games. When an online game ends, we record the room code, the time, the era, each side's navy, the number of shots, and who won. Nobody is named on the record unless they were signed in.
• Technical data. Like every website, our server and our network provider (Cloudflare) receive your IP address, browser type and the pages you request. We use this only to deliver the site, keep it secure and fix faults. We do not use it to build a profile of you.

If you create an account

You can create a QuickPlayroom account with a username and a password. We store:

• Your username.
• Your password, as a one-way hash (scrypt with a random salt). We can't read your password, and neither can anyone who gets a copy of the database.
• A recovery code, as a one-way hash. We don't ask for an email address, so the recovery code is how you reset a forgotten password.

To slow down password guessing, we briefly keep a count of failed sign-in attempts per username and per IP address. It is held in memory only and cleared within 15 minutes.

If you sign in with another provider

You can also sign in, or link to your account, an account you already have at Google, Microsoft, Discord, Facebook or Apple. We never see or store your password for that account. From the provider you choose, we receive:

• An account identifier that the provider issues for our site, so we recognise you next time.
• Your name as it appears on that account. We use it as your starting display name, and you can change it.
• Your email address, only to show you which of your accounts is linked. We do not email you, and we never show it to other players.

We ask only for basic profile and email permissions (openid, email and profile, or the equivalent for each provider). We do not ask for your contacts, friends, messages, files or anything else, and we do not keep the provider's access tokens after sign-in completes.

However you sign in, we also store:

• Your display name, and when you joined and were last seen.
• Sessions. For each browser you are signed in on: when the session started, when it expires, and the browser's user-agent string, so you can recognise it. The session token itself is stored only as a one-way hash.
• Your game records. Finished online games you played, with your display name and your opponent's.
• Poker totals. For online poker tables: hands played, hands won, net play chips and your biggest pot.

Friends and activity

• Your friends list, friend requests you have sent or received, and your friend code.
• Activity. While you're signed in and have the site open, your browser keeps a connection open to us and tells us about every 45 seconds that you're here, which game page you're on, and the room code if you're in an online game. We keep this in memory only, never in the database, and it's gone within minutes of you leaving. Your friends see whether you're online, which game you're playing, and when you were last seen, and can join your online room. When you come online, friends who have the site open get an alert. You can turn this off on the Friends page; your friends then always see you as offline.

How we use it

• To sign you in and keep you signed in. This is what you asked for when you signed in (performance of a contract).
• To show your display name to the people you play, and to show you your own record (performance of a contract).
• To run your friends list and show your friends your activity, if you leave that switched on (performance of a contract; you can switch it off at any time).
• To keep the site running and secure, and to prevent abuse (legitimate interests).

We do not sell your data, and we do not make automated decisions about you that have legal or similarly significant effects.

Analytics and advertising

We may use analytics services to understand how the site is used, and we may show advertising to keep the games free. These services may set cookies or use similar technologies and receive information such as your IP address, device and browser details, and the pages you visit. Where the law requires your consent for this, we will ask for it first, and you can withdraw it at any time. We will list the services we use on this page before we start using them.

QuickPlayroom's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information we receive from your sign-in provider is never used or shared for advertising.

Who we share it with

• Other players see your display name during a game and in their own game records.
• Your friends see your display name and, unless you turn it off, whether you're online and what you're playing.
• Service providers who run the site on our behalf: our hosting provider, and Cloudflare, which provides DNS, network protection and content delivery. They process data only as needed to provide those services.
• The sign-in provider you choose. Your provider knows you signed in to QuickPlayroom. Their own privacy policy covers what they do with that.
• The people who run QuickPlayroom can see account details (display name, username, linked sign-in methods and their email addresses, game records and friends) to provide support and enforce the Terms. They cannot see passwords. Their actions are logged.
• Authorities, if the law requires it.

Our servers and our providers may be outside your country. Where the law requires it, we rely on appropriate safeguards for those transfers.

Cookies and local storage

These are the cookies the site needs to work. They are always on, because sign-in doesn't work without them:

If we add analytics or advertising cookies, we will list them here and, where the law requires it, ask for your consent before setting them.

Games also use your browser's local storage, which never leaves your device unless noted: a random seat token for each online room, so you can reload a page without losing your seat, and whether you turned the music on.

Content from other sites

Some games show pictures and play recordings hosted by other sites. When they load, your browser connects to those sites directly, and they receive your IP address:

• Wikimedia Commons: ship photographs and music in Battleship (privacy policy).
• Google Fonts: the typefaces on the site (privacy policy).

How long we keep it

• Your account is kept until you delete it. We may delete accounts that have not been used for two years.
• Sessions end after 30 days, or earlier if you sign out.
• Unlinked sign-in methods and removed passwords are deleted straight away, email address included.
• Game records are kept for as long as the site runs, so both players keep their history. When an account is deleted, its name and ID are removed from every record.
• Backups. Deleted data may stay in backups for a limited time until they are replaced in the normal course of operation. Backups are used only to restore the service after a failure.

Your choices and rights

From your account page you can, at any time and without asking us:

• See and download everything we hold about you ("Download my data").
• Correct your display name.
• Change your password or recovery code.
• Remove a linked sign-in method or your password, or sign out every other browser.
• Delete your account. It takes effect immediately. See Data deletion.

Depending on where you live, you may also have the right to object to or restrict our processing, and to complain to your data protection authority. To use any of these rights, or if you can no longer sign in, email [email protected]. We reply within 30 days.

Children

QuickPlayroom's games are suitable for all ages, but signing in is for people aged 13 or over, or the minimum age for consent to online services in your country if it is higher. If you believe a child has created an account, email [email protected] and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top before the change takes effect. If you're signed in and the change is significant, we will tell you on the site.