What's stored, and where it goes
Without an account
Nothing leaves your browser and no cookie is set. Pins, history, ratings,
playtime and your skin sit in this browser's localStorage
under the ach: prefix. Clearing site data erases all of it.
With an account
Stored on the hub's own server, nowhere else:
- Username, display name, bio — what you typed.
- Password — as a salted hash, held by Supabase Auth. The original is never stored and cannot be recovered directly, but a forgotten password can be reset through your email.
- Email address — required at sign-up, used only to confirm the account and for password recovery. It is never shown to other users.
- Your save — pins, history, ratings, playtime, so it follows you between devices.
- Game progress — a copy of what the games themselves save, if you leave that switched on in Settings.
- Friends, messages and images — until you or the sender delete them.
- Sign-in records — time, IP address and browser string, so staff can see an account being attacked. This is the one thing kept that you didn't type. It is visible to staff only.
- What you're playing — the current title, shown to staff on the live view, and to friends only if you leave activity sharing on. It clears when you stop.
- Terms agreement — which version, and when.
- Playlists (Campus+) — the title, description and video links you add, and whether you chose to make a playlist public. Public playlists are visible to others; private ones are visible only to you.
Campus+ and embedded video
Campus+ plays videos by embedding them from third-party services such as
YouTube, using the privacy-respecting youtube-nocookie.com
domain where possible. We store only the link and the title you give it —
never the video itself. When a video plays, the third-party service may set
its own cookies and receive your IP address and player interactions under
its privacy policy, which we do not control. We do not receive
watch history from them.
Cookies
Exactly one, and only once signed in: a session token, HttpOnly
and SameSite=Lax. It identifies your session and nothing else.
There are no advertising or analytics cookies anywhere on the site.
Who can see what
- Messages — the people in the conversation, plus moderators if one is reported. Treat it as a school notice board, not a private channel.
- Your activity — friends only, and only if you leave it on.
- Your friend code — nobody, until you share it.
- Staff — can see accounts, sign-in records, reports and what people are playing. Staff actions are written to an audit log that other staff can read.
Third parties
- The games load from their own hosts and may store their own data on their own origins. What each game does is up to that game.
- Nothing is sent to advertisers, analytics services or data brokers. There are none.
Getting rid of it
- Settings → Export gives you a JSON copy of everything you've saved.
- Settings → Wipe this device clears the local half.
- Settings → Delete my account removes your profile, friendships, messages, images and synced saves. It is immediate and cannot be undone.
Children
This is aimed at school-age players and asks for no real name, phone number or location — only the sign-up email, which is never shown to anyone else. If you're a parent or teacher and want an account removed, message through feedback and it will be.
How long it's kept
- Profile, saves, playlists — until you delete them or your account.
- Messages and images — until you or the sender delete them.
- Sign-in records — kept a limited time for security, then dropped.
- Backups — routine database backups may keep copies for a short period after deletion before they roll off.
Your rights
Whatever your local law grants (such as GDPR or CCPA where they apply), you can: get a copy of your data (Settings → Export), correct it (edit your profile), or delete it (Settings → Delete my account, or message us). We do not sell personal information and there is nothing to opt out of, because there are no ad or analytics trackers to begin with.
Being straight with you
This is a hobby project run by one person, not an audited company. It is built carefully — passwords hashed, permissions enforced on the server, no trackers — but it has not been security reviewed by anyone else. Don't put anything here you'd be hurt by losing or having read.