Summary. Extension Arcade provides browser games, Chrome extension games, user accounts, profiles, coins, XP, levels, friends, trades, subscriptions, and premium access. This policy explains what information we collect, why we use it, who we share it with, and the choices available to users.
This privacy policy is intended to be publicly accessible for Chrome Web Store listings and for users of Extension Arcade services.
1. Who we are
Extension Arcade operates the website at extensionarcade.com, related game pages, account features, and Chrome extension games that connect to Extension Arcade.
For privacy questions, account deletion requests, or data access requests, contact:
2. What this policy covers
This policy applies to:
- the Extension Arcade website;
- Extension Arcade user accounts, profiles, friends, messages, trades, inventories, coins, XP, levels, rankings, and rewards;
- Chrome extension games that connect to Extension Arcade login, rewards, premium access, or profiles;
- payment and subscription features connected to Stripe or ExtensionPay;
- support requests and security checks.
This policy does not control privacy practices of third-party websites or services that we do not operate.
3. Information we collect
Account information
- username;
- email address;
- hashed password;
- profile/avatar settings;
- account plan or premium status;
- session/login tokens;
- account creation and login timestamps.
Game and profile information
- coins, XP, level, rank, and rewards;
- game activity, scores, completed games, wins, achievements, and progress;
- owned items, pets, avatars, outfits, furniture, rooms, crates, and inventory;
- friends, friend requests, trades, and messages;
- selected settings and display preferences.
Payment information
- Stripe customer ID, subscription ID, checkout session ID, and payment status;
- ExtensionPay purchase or payment status where used;
- plan type, renewal/cancellation status, and timestamps.
We do not store full card numbers. Card details are processed by payment providers.
Technical, analytics, and security information
- IP address, browser type, user-agent, device/browser information, and timestamps;
- server logs and API request logs;
- security, anti-abuse, and fraud-prevention events;
- analytics events such as page views, game page usage, and feature interactions.
4. Chrome extension data
Some Extension Arcade Chrome extensions store game progress locally in the browser and send limited game-activity events to Extension Arcade for both signed-in and guest play. These events can include app or session starts, game actions, completed games, rewards, level progress, premium access checks, and selected game mode. Signed-in activity is linked to the account. Guest activity is grouped using a random extension-install identifier that is one-way hashed before storage in the platform analytics ledger.
Guest activity events do not include a guest's email, username, password, webpage contents, or browsing history. Clearing extension storage resets the local install identifier.
Some extensions may use browser storage to save local game progress, guest state, settings, login state, premium access cache, and UI preferences.
Some extensions may show game UI or companion/pet overlays on webpages. Unless clearly stated in the specific extension, these features are not used to collect webpage content, browsing history, or personal information from the pages users visit.
5. How we use information
We use information to:
- create and manage user accounts;
- log users in and keep sessions secure;
- display profiles, avatars, coins, XP, levels, rankings, friends, trades, messages, and inventories;
- sync game rewards and progress between games and the website;
- provide premium access, subscription features, and paid unlocks;
- process purchases and verify payments;
- prevent fraud, abuse, cheating, spam, and unauthorized access;
- respond to support requests;
- improve game features, reliability, layout, and user experience;
- comply with legal, tax, accounting, and security obligations.
6. Friends, trades, leaderboards, and social features
If users use social features, some profile information may be visible to other users. This may include username, avatar, level, coins, ranking, recent game activity, items offered in trades, and public profile progress.
Premium-only items are not intended to be traded. Trade systems may block premium items and default starter items from being transferred.
Arcade Plaza room presence
When you enter the Plaza, we temporarily store your room, current position, selected room gesture and preset greeting to show you to other players. Signed-in visitors use their existing username and saved avatar; guests use a random room identity. Other room participants do not receive your email address or account database ID.
The Plaza uses an HttpOnly cookie named ea_plaza_guest that expires after one day for guest continuity and request protection. Players disappear from the room after 20 seconds without a presence update. Only the current position is stored, not a movement history. Presence records older than a day are removed when a player next joins. Existing account, security and page-view records follow the other retention provisions in this policy.
7. Payments and premium access
Payments may be processed by Stripe, ExtensionPay, or another listed payment provider. These providers process payment details under their own privacy policies and security controls. Extension Arcade stores only the information needed to confirm payment status, grant premium access, manage subscriptions, and handle support.
8. Cookies, browser storage, and similar technologies
We may use cookies, local storage, and browser extension storage for login sessions, account security, game progress, preferences, premium state, and analytics.
Users can clear browser cookies or extension storage, but doing so may remove local progress, guest saves, preferences, or login state.
9. Analytics, reCAPTCHA, and third-party services
We may use Google Analytics to understand usage patterns and improve the website and games. We may use Google reCAPTCHA to protect login and sign-up forms from spam and abuse.
We may share limited information with service providers that help us operate the website, process payments, host data, analyze performance, secure accounts, and provide support.
Common service categories include:
hosting and database providers Stripe ExtensionPay Google Analytics Google reCAPTCHA email/support tools
10. When we share information
We may share information:
- with payment providers to process or verify purchases and subscriptions;
- with hosting, analytics, security, email, and support providers that help operate the service;
- with other users where social features require it, such as friends, messages, trades, leaderboards, or public profiles;
- if required by law, legal process, fraud prevention, security, or protection of rights;
- during a business transfer, merger, acquisition, or restructuring, subject to appropriate safeguards.
We do not sell personal information.
11. Data retention
We keep account information while an account remains active or as needed to provide the service. We may keep payment, security, tax, accounting, and fraud-prevention records for longer where required or reasonably necessary.
Users may request account deletion. Some records may be retained where required for legal, billing, tax, security, or dispute-resolution purposes.
12. Security
We use reasonable technical and organizational safeguards to protect user information. These may include hashed passwords, session controls, access controls, HTTPS, payment-provider security, webhook verification, and abuse prevention.
No online service can guarantee absolute security. Users should use strong passwords and keep account credentials private.
13. User choices and rights
Depending on location, users may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Users may also request that an account be deleted.
To make a request, contact support@extensionarcade.com. We may need to verify the request before acting on it.
14. Children
Extension Arcade games may be suitable for a broad audience, but account features, purchases, friends, messaging, and trades should be used with appropriate parental or guardian supervision where required. We do not knowingly collect personal information from children under 13 without appropriate consent. If a parent or guardian believes a child has provided personal information, they can contact us to request deletion.
15. International users
Information may be processed in the country where our hosting, payment, analytics, security, or support providers operate. Where required, we rely on appropriate safeguards for international transfers.
16. Changes to this policy
We may update this privacy policy when we change features, legal requirements, or service providers. The “Last updated” date shows when the policy was most recently changed.
17. Contact
For privacy questions, data requests, or account deletion requests, contact:
Extension Arcade
support@extensionarcade.com