Privacy Policy
Effective October 22, 2026
The MarioLegend Arcade Zone ("the Arcade", "we") is a browser arcade where you can walk a 3D den, play games, and collect tokens and tickets. This page explains what information the Arcade uses, why, and the choices you have. In short: we collect only what's needed to run your arcade wallet. We don't sell your information, show ads, or use advertising trackers. We use Google Analytics to understand, in aggregate, how the Arcade is used.
Playing as a guest
You can play without an account. A guest's tokens, tickets, prizes and settings are stored only in your own browser (local storage) and are never sent to us. Guest wallets reset every day. Clearing your browser's site data erases them.
Signing in with Google
If you choose Sign in with Google, Google shares your basic profile with us: your name, email address, profile picture and a Google account ID. We use this only to recognize you, keep your wallet safe across devices, and show your first name in the Arcade. We never see your Google password, and we don't access your Gmail, contacts, Drive or anything else in your Google account.
What we store for signed-in players
| Information | Why |
|---|---|
| Google profile (name, email, picture, account ID) | To sign you in and identify your account |
| Wallet: tokens, tickets, prizes you've unlocked, equipped looks, best scores | So your progress is saved and can't be lost or tampered with |
| Play history: which game, when it started and ended, the score and tickets paid | To charge tokens, pay tickets fairly and prevent cheating |
Play counter
Each cabinet shows how many times its game has been played. To avoid counting the same visitor over and over, we store a scrambled code made from your internet (IP) address, never the address itself, together with the time you last played each game. These codes are deleted automatically after one day. The play totals contain no personal information.
Stored in your browser
The Arcade saves a few things in your browser's local storage: your guest wallet, sound on/off, whether you've met Jerry and which tips he's given, and, if you sign in, a login session so you stay signed in.
Analytics
We use Google Analytics to learn how many people visit and which games and features they use, such as entering the den, playing a game or talking to Jerry. Google Analytics sets cookies and collects information like your device type, browser, approximate location (city level) and pages visited. IP addresses are anonymized. We look only at overall trends, never at individual players, and we don't link analytics to your Arcade account. You can opt out with Google's opt-out add-on or by blocking cookies in your browser. Google's own use of this data is described in How Google uses information from sites that use its services.
Services we rely on
These providers help run the Arcade and may process technical information such as your IP address under their own privacy policies:
- Supabase: hosts the account database and sign-in system.
- Google: provides Sign in with Google, Google Analytics and the Arcade's web fonts (Google Fonts).
- cdnjs (Cloudflare) and jsDelivr: deliver the 3D engine and sign-in code to your browser.
- Our web host: serves the Arcade's pages and may keep standard server logs.
Some games open from other sites, such as darkzeta.com, mariolegend.com and replit.app. Once a game is running, that site's own policies apply to it.
What we don't do
- We don't sell, rent or trade your information.
- We don't show ads, and we don't share data with advertisers or use analytics for advertising.
- We don't collect payment information. Tokens and tickets currently have no cash value.
Children
Anyone can play as a guest without giving us any personal information. Signing in with Google is meant for people 13 and older, in line with Google's own account rules. We don't knowingly collect personal information from children under 13. If you believe a child has signed in, contact us and we'll delete the account.
Keeping and deleting your information
We keep your account and wallet for as long as you use the Arcade. You can ask us at any time to see, correct or delete your account and all of its data. Email us from the address you signed in with, and we'll take care of it within 30 days. You can also remove the Arcade's access in your Google Account under Security → Third-party apps & services.
Security
Your wallet can only be changed through checks that run on our server, account data is protected by per-user access rules, and connections use encryption (HTTPS). No system is perfectly secure, but we work to protect what you trust us with.
Changes
If the Arcade adds new features, such as paid tokens, this policy will be updated before they launch, and the date at the top will change.
Contact
Questions or requests: [email protected]
See also our Terms of Service.
◀ BACK TO THE ARCADE