Privacy Policy

1. Information we collect

Playing without an account: we don't collect any personal data. No sign-up is required to play the mini-games, and we never read, log, or transmit the content of your chatbot conversations.

Signing in or challenging a friend: the first time you do either, we create a lightweight account through Firebase Authentication (operated by Google) and store an account ID (UID), an email address if you sign in with a real provider such as Google (a guest account created just to send a challenge link has no email), and a generated guest-style display name (e.g. “Guest 4213”) — never the real name attached to your Google account or any other provider.

We don't collect payment information, browsing activity outside the supported chatbot sites, or any chatbot conversation content.

2. Where your data lives

Locally, in your browser: your game preferences (selected game, minimum round length, “show response while playing”) are stored using the extension's built-in storage. Once you have an account, your sign-in session (authentication tokens, UID, email if any, and display name) is stored there too. This data stays on your device.

On our servers: if you create an account, we store your UID, email (if any), generated display name, and account status in our database, so invite links and challenges are attributed to the right account and a signed-in session is recognized on both the extension and chatbotarcade.com. We don't sell this data — see “Third-party services” below for who processes it on our behalf.

3. Permissions we use

On the supported chatbot sites, we request access only to detect when a response is being generated on the page, so the game overlay can appear and clear at the right time. We do not read, log, or transmit the content of your conversations.

On chatbotarcade.com, the extension can read sign-in confirmations from the page (so a sign-in you complete on the website is picked up by the extension) and contact identitytoolkit.googleapis.com and securetoken.googleapis.com — Firebase's (Google's) authentication endpoints used to create and refresh your sign-in session.

4. Third-party services

We use Firebase Authentication, a service operated by Google, to create and manage sign-in sessions, including anonymous accounts and accounts linked to a provider such as Google. Google's handling of that data is governed by Google's own privacy policy. We don't integrate any advertising or analytics services, and we don't share your data with any other third party.

5. Cookies

The extension itself does not set or read cookies. When you sign in on chatbotarcade.com, the website sets a session cookie so you stay signed in between visits; that cookie is only readable by chatbotarcade.com.

6. Children's privacy

Chatbot Arcade is not directed to children under 13, and we don't knowingly collect personal information from children. Creating an account requires signing in through a third-party provider (such as Google), which has its own age requirements.

7. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the “Last updated” date above.

8. Contact us

If you have questions about this Privacy Policy, contact us at hello@chatbotarcade.com.