Privacy Policy
Draft, last updated November 13, 2026
This policy explains what personal data Cleanor Research Labs L.L.C-FZ ("VibePlay", "we") collects when you use vibeplay.gg, my.vibeplay.gg and apps.vibeplay.gg, why, and what you can do about it. We are the data controller.
What we collect
- Account: when you sign in with Google we receive your name, email address, profile picture and a Google account ID.
- Your games: the descriptions and chat messages you write, the games and images made for you, and publishing details.
- Players: when someone opens a game page, a feed card or a standalone link we record the game, time, rough country, device type, referrer, how long the game was played, and the advertising tags in the link (utm parameters, click IDs such as fbclid or gclid, and sub1 to sub5). We do not use cookies for this and do not identify players.
- Errors: error messages from games, so developers can fix them.
- Reviews and reports: the text and name you choose to post, and a one-way hash of your IP address to limit spam.
- Payouts: payout method details, account holder name and country, and later identity and tax information required by law.
- Payments: handled by Paddle; we receive the plan, amount and status, not your card details.
Why we use it
- To run the service, build and host your games and keep your account signed in (contract).
- To show developers stats about their games and keep the arcade safe from abuse and fraud (legitimate interest).
- To pay developers and meet tax and legal duties (legal obligation).
Who we share it with
- Cloudflare (hosting, database and storage), Google (sign-in), Anthropic and OpenRouter (AI models that write games and images; your prompts and game code are sent to them to produce the result), Paddle (payments) and Payoneer or a bank (payouts).
- Developers see aggregated stats and errors for their own games, not personal data of players.
- Authorities when the law requires it.
Some of these providers process data outside your country, including in the United States and the European Union, under their own safeguards.
How long we keep it
Account data and games: while your account exists, and up to 30 days after you delete it. Visit and error records: up to 24 months. Payout and tax records: as long as tax law requires.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by writing to privacy@vibeplay.gg. You can delete games in the studio at any time. If you are in the EU or UK you can also complain to your local data protection authority.
Children
VibePlay accounts are for people 13 and older. Games in the arcade can be played without an account and we do not knowingly collect personal data from children under 13.
VibePlay is operated by Cleanor Research Labs L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates (Meydan Free Zone, license no. 2643987). Contact: legal@vibeplay.gg.
Terms · Developer terms · Arcade terms · Privacy · Cookies · Refunds · Content rules · Copyright