Privacy Policy

You can play without an account. To keep your progress, we create a guest profile the first time your browser talks to our servers. Depending on how you use the site, we handle:

• Guest profile: a random player ID, a display name (an automatic "Player-XXXX" name until you change it), and when the profile was created and last used.
• Google sign-in (optional): your Google account ID, your verified email address and your name. We never see your Google password and we do not use your profile photo. If you have not chosen a display name yet, your Google name becomes your display name (shortened to 20 characters).
• Gameplay: which games you play, when and for how long, your scores (including any details a game attaches to a score), best scores, experience points, and save data a game stores for you (up to 100 KB per game).
• Gameplay events: things like a game loading, a round starting or ending, a score being submitted, sharing, and ad-break requests. Games can attach small details to these events.
• Technical data: your browser's user agent and your IP address (see "Security and abuse prevention" below).
• Messages you send us: if you email admin@leonogames.com, we receive your email address and whatever you write.

We do not ask for your date of birth, address, phone number or payment details, and we do not use analytics or advertising trackers.

We only use cookies the site needs to work. There are no advertising or analytics cookies.

• wsg_pid: keeps you signed in to your guest or Google-linked profile. Lasts 400 days. Shared with our subdomains (such as games.leonogames.com), but scripts cannot read it.
• wsg_locale: remembers whether you chose English or Vietnamese. Lasts 1 year.
• wsg_oauth: protects the Google sign-in flow. Lasts 10 minutes.
• wsg_admin: used only by our own staff to manage the site. Lasts 8 hours.

If a game is opened on its own, outside our site, it may save scores and progress in your browser's local storage instead of on our servers.

If you delete the wsg_pid cookie while playing as a guest, your browser loses its link to that guest profile. If you signed in with Google, sign in again to get your progress back.

• To run the games, save your progress and let you continue on the same browser, or on any device after signing in with Google.
• To show leaderboards and experience points.
• To check that scores are fair (for example, that a score fits the play session it came from) and to protect the service from cheating, spam and attacks.
• To find and fix problems and to understand, in aggregate, which games people play.
• To answer your messages.

We do not sell your information, and we do not use it to build advertising profiles.

Leaderboards are public. They show your display name, rank, scores and experience points, together with your random player ID. Your email address is never shown to anyone but you.

If you signed in with Google and kept your Google name as your display name, that name can appear on leaderboards. You can change your display name at any time on leonogames.com/me.

Each game runs in a sandboxed frame on games.leonogames.com. When a game starts, it receives only your random player ID, display name, whether you are a guest, your language, and a short-lived token (valid for 1 hour) that lets it submit scores. Games never receive your email address.

Some games may be made by creators we work with. They receive the same limited information described above.

• Your IP address is used to limit how many requests one connection can make. These counters expire after about 60 seconds.
• Our server logs record the IP address of each request, to investigate errors and attacks. Logs are kept for a limited time by our hosting provider.
• Play sessions store a scrambled (hashed) form of your IP address, which helps us spot abuse without keeping the address in our database.

All traffic uses HTTPS, cookies are signed and cannot be read by scripts, and only our own staff can access the servers and database. No system is perfectly secure, but we work to protect your information.

We use a few service providers to run the site. They process data only on our behalf:

• Railway: hosts our website, servers and database. Our servers are located in Singapore.
• Cloudflare: domain name services, storage and delivery of game files through its global network, and forwarding of emails sent to our addresses.
• Google: sign-in, if you choose "Sign in with Google". Emails you send us arrive in a Google (Gmail) inbox.

We may also disclose information if the law requires it, or to protect our users and service from fraud or abuse.

• Gameplay events: about 30 days.
• Rate-limit counters: about 60 seconds.
• Server logs: a limited period set by our hosting provider.
• Your profile, linked Google account, scores, play sessions and save data: until you ask us to delete them, or until we remove inactive data or reset leaderboards (which may happen during testing).

• Change your display name at any time on leonogames.com/me.
• Sign out at any time. Your profile stays linked to your Google account until you ask us to delete it.
• You can remove our access to your Google account in your Google Account settings.
• Ask us to access, correct, export or delete your information by emailing admin@leonogames.com. There is no self-service delete button yet. Tell us your display name and, if you signed in, your Google email so we can find your profile.

We will reply as soon as we can, and within the time required by the law that applies to you.

Leono Games is meant for a general audience. Some games are listed under a "Kids" category because they are simple and family-friendly, but you can play every game as a guest without giving us any personal information.

Children under 13, or under the minimum age in their country, should not sign in with Google without a parent's or guardian's permission. If you believe a child has given us personal information, contact admin@leonogames.com and we will delete it.

We are based in Vietnam. Our servers are in Singapore, and our service providers may process data in other countries. Wherever it is processed, we handle your information as this policy describes.

When we change this policy, we will update the date at the top of this page. If a change matters, we will also point it out on the site.

Leono Games, Vietnam (run by Hung Dang). Email: admin@leonogames.com.