Play first
Anonymous play is the default. Accounts are optional and limited to people 13 or older.
Privacy Notice
Private by default, explained without fog.
You can browse and play without an account. Idea2Play does not sell personal information, share it for cross-context behavioral advertising, or use ad pixels, fingerprinting, social SDKs, contact uploads, or third-party behavioral analytics.
In brief
No ad profile
No behavioral tracking or player profiles. Approved first-party counts use coarse fields and no stable browser ID.
Visible controls
Clear device data, opt out of anonymous measurement, and export or delete account data through self-service tools.
1. Operator and scope
This notice applies to the Idea2Play portal, its published game packages, optional player features, feedback, challenges, and administrative operations. The operator is Idea2Play, operated by Mobi Weave, Inc., 5965 Village Way E105-175, San Diego, CA 92130. Effective date: 2026-08-20.
2. Anonymous and local play
Browsing and game launch do not require an identity cookie or account. The browser may store preferences, recent and favorite game IDs, coarse UTC dates, and game-local saves. A game that declares cloud save unsupported keeps its versioned save on that browser and isolated game origin and does not send it to the portal API. Clearing site data, private browsing, storage denial, or changing browser/device may remove or hide it.
3. Optional accounts and authentication
Accounts are for players 13 and older. Account records may include verified email, private gamer name and avatar, password hash, passkey public credential data, sessions, recovery-code hashes, favorites, supported progress, trophies, statistics, and private account settings. Passwords and private passkey keys are not stored in readable form. Email supports verification, sign-in, recovery, and address changes—not marketing.
4. Cloud saves and history
Supported games may send schema-versioned saves through the portal protocol. When device and cloud copies conflict, cloud remains active and a displaced device copy may enter private Save History. Up to five versions per game and slot are retained for 30 days. Unsupported schemas preserve both copies and pause synchronization.
5. Feedback and support
The form stores intent, category, comment, optional email, normalized route kind, optional game ID, viewport class, input class, browser family, portal version, and administrative status. It does not accept query strings, campaign values, challenge tokens, arbitrary URLs, locale, exact viewport, or full user-agent text. Email is optional; a response is impossible without it. Operator email replies store their subject, message, recipient, and sending status with the submission. When we reply, our email provider Purelymail processes the recipient address and message. Portal records expire after 90 days; copies in email mailboxes follow their own retention and are not removed by portal deletion. Players under 13 must ask a parent or guardian to submit.
6. Challenges and leaderboards
A signed challenge link identifies a reviewed game/package/rules configuration and bounded result data without a player name, email, contacts, puzzle answer, or hidden target. Links last no more than 30 days. Weekly Challenge is optional and has no account gate or public rank. Daily Challenges can also be played anonymously; an account and explicit, versioned consent are required to publish. A published Daily entry exposes only an opaque ID, gamer name, avatar, normalized result label, rank, attempt count, and broad time bucket—never an account ID, email, save, passkey, session, or exact private timestamp. Current results and yesterday’s winner are retained only through the following UTC day. Reports are retained for the configured moderation period. Withdrawing consent, deleting the account, or an operator hide immediately removes publication.
7. Privacy-light measurement and campaigns
Only after server-side privacy approval, Idea2Play may count allowlisted events such as page discovery, game readiness, valid completion, share intent, challenge flow, weekly use, and coarse 7-day browser return. Requests contain coarse UTC day, event name, game/package version, viewport/input class, bounded outcome/duration, and registered campaign or weekly slug where applicable. They have no account/player ID, email, cookie, exact IP, full user agent, referrer, free text, arbitrary URL, location, advertising ID, save body, or stable browser identifier. Campaign attribution lives only in current-tab memory and is removed from the address immediately. Raw events expire in 30 days; threshold-safe daily aggregates expire in 24 months and report slices under 25 events are suppressed. This is directional browser activity, not unique-person retention.
The device setting is visible when measurement is enabled. Opting out stops all optional measurement immediately and does not affect games, sharing, accounts, saves, or challenges. Unsafe or unavailable preference storage fails closed. Idea2Play records a share intent, never a claim that a native share completed.
8. Cookies, operations, and providers
Optional accounts and administrative functions use essential secure server-side session cookies. Operational systems may process connection and service data for rate limiting, delivery, integrity, security, error diagnosis, backups, and recovery, without adding it to optional measurement events. Server and operational records are retained for no more than 90 days; backups are retained for no more than 90 days.
| Provider category | Purpose | Retention |
|---|---|---|
| Server hosting — Hetzner | Host the portal, API, game packages, private service database, and operational logs | Operational records are retained for no more than 90 days |
| DNS, content delivery, protection, and backups — Cloudflare | Resolve the domain, deliver and protect public content, and maintain service backups | Operational records and backups are retained for no more than 90 days |
| Transactional email — Brevo | Send optional account verification, security, and recovery messages | Delivery records are retained only for their operational purpose and for no more than 90 days |
9. Data and retention table
| Purpose | Fields | Storage | Retention | Control |
|---|---|---|---|---|
| Local play | Preferences, game IDs, coarse dates, local saves | Browser / game origin | Until cleared or browser eviction | Settings, game Reset, browser controls |
| Optional account | Verified email, private profile, auth/session records | Private service database | Account life plus bounded operational deletion | Export, correct, delete, sign out |
| Cloud saves | Versioned save body and metadata | Private service database | Current save; history 30 days, up to five | Game/account tools |
| Feedback | Minimized form and optional email | Private service database | 90 days | Privacy-category request |
| Challenges | Signed configuration and nonce events | Token/private database | Link and raw events at most 30 days | Do not share; expiry |
| Daily leaderboard | Consent version, public-name/avatar projection, bounded result, attempts, reports | Private service database; minimized public response | Results through the following UTC day; reports up to 90 days | Account withdrawal, deletion, report, operator moderation |
| Measurement | Strict coarse allowlist, no stable ID | Separate raw/aggregate records | Raw 30 days; aggregates 24 months | Settings opt-out and clear history |
| Security and operations | Bounded service logs and connection signals | Operational systems | 90 days; backups 90 days | Privacy/security request where applicable |
10. Your choices and rights
Use Account to export, correct, or delete account data, withdraw Daily leaderboard public-name participation, and use Settings to control local data and measurement. Withdrawal deletes retained Daily result publication immediately; account export includes retained participation, result, and report records. Account deletion removes cloud player records but cannot erase browser-local data. For other applicable U.S. state or regional access, correction, deletion, portability, or opt-out rights, open the feedback form with Privacy selected. Verification is required and support cannot bypass it. Idea2Play does not sell personal information or share it for targeted advertising.
11. Children and families
Idea2Play is a general-audience service and is not directed to children under 13. A child under 13 may play anonymously with a parent or guardian. Children under 13 may not create an account or submit feedback directly. A parent or guardian who believes a child supplied personal information should use the Privacy category.
12. Security, international access, and changes
Reasonable safeguards reduce risk but no online system is perfectly secure. The service may be accessed from other countries, where processing and legal protections can differ. Material changes receive an updated effective date and appropriate in-product notice before they take effect; a new commercial or advertising policy requires updated public copy and Terms before release.
13. Contact
Use the built-in feedback form’s Privacy category for privacy questions or requests. The privacy owner is Idea2Play Support Team. Support is handled by Idea2Play Support Team. Do not include passwords, passkeys, recovery codes, or unnecessary secrets.