Privacy policy

Last updated: 11 October 2026

NextGenRunGames operates this website and distribution gateway. For privacy questions or requests, contact info@nextgenrungames.com.

What we collect and why

• Workspace and distribution: your email address, uploaded builds, filenames, checksums, game metadata, sharing choices, distribution jobs and connection references. We use these to provide the service you request and protect access to your workspace. Website uploads share supported browser builds in Play by default. Private API uploads are not put in the public catalog unless you authorize sharing.
• Contact requests: your name, email, subject and message. We send these to our contact inbox to answer your request. Please leave passwords, payment details and other sensitive information out of the form.
• Player feedback: public comments and display names you submit, game votes and abuse reports. A one-way hash derived from your network address is used to limit votes to one per visitor and game, prevent repeat reports, and apply abuse limits. Comments are public; do not include personal information or links. Hidden comments may be retained for moderation and abuse prevention.
• Security and operations: request details such as IP address, time and error information may be processed by the server and hosting infrastructure to prevent abuse and keep the service working.

Processing needed to provide requested services is based on performance of a contract or steps you request before a contract. Security and ordinary support handling also rely on our legitimate interests in operating and protecting the service. Optional analytics rely on your consent. Legal obligations may require some records to be retained.

Anonymous libraries use a site-generated identity instead of an email inbox. No email is sent when one is created. They stay private, contain up to three builds of 50 MB each, and expire after seven days. Requesting an email upgrade extends the private retention period to thirty days while verification is pending. The recovery link is shown once; protect it like a password. You can delete an anonymous library and its builds from the workspace.

Connected accounts, email and browser sessions

Selected platform logins and API credentials are encrypted in your workspace. If you enable the account pilot, a matching imported login can be used to sign in to its official provider. Missing supported accounts can be prepared with your checked verification mailbox; provider Terms and permission grants require your action. The worker reads only targeted signup verification messages, without changing message flags, and keeps verification links and codes out of agent responses and logs.

When remote browsers are enabled, Browserbase receives the account website requests and session state needed for the selected workflow. Each user and destination has a separate persistent browser context. The service disables session recordings and logs; stored browser state can include provider cookies. Private browser-control links are supplied only to your signed-in owner session. Ordinary OAuth grants use the normal browser redirect.

Website chat

Built-in help processes your messages on this server. Selecting OpenRouter free sends the conversation to OpenRouter and its selected free model provider using our operator API key. Free inference has shared usage limits. We request providers that do not collect conversation content for training, but their privacy and retention policies still apply. See OpenRouter privacy. If you connect and select Gemini or Claude, the conversation is sent to that provider using your encrypted API key and its API quota and billing rules. We do not store chat transcripts or include chat content in analytics. AI subscription account sign-in is not currently enabled here. Workspace sign-in does not authorize use of a consumer AI subscription. Developer API keys are a separate advanced option. You can remove a saved AI key from the chat settings.

Cookies and local storage

An essential, HttpOnly workspace cookie maintains your workspace session for up to 30 days; anonymous sessions expire with their library. Email access links are single-use and expire after 20 minutes. Agent tokens expire after 30 days and can be revoked. Your theme and optional analytics preference are saved in your browser. The analytics choice expires after 180 days. You can change it at any time through Cookie settings in the footer. Rejecting optional analytics does not limit the website.

Microsoft Clarity

If enabled for this site and you choose Allow analytics, Microsoft Clarity helps us understand page use through interaction measurements, heatmaps and session replays. It may process device and browser information, IP-derived location, clicks, scrolling and navigation, and use first- and third-party cookies. We use this to improve the website. Advertising storage is denied. We do not deliberately send account identifiers, email addresses, contact messages, credentials or uploaded builds to Clarity; forms and private workspace sections are masked, and email-claim pages do not load it.

Clarity remains unloaded until optional analytics consent is granted. See Microsoft's Privacy Statement and Clarity's data collection information for Microsoft's processing, retention and international transfer information.

Google Analytics

If enabled for this site and you choose Allow analytics, Google Analytics measures visits to public pages, device and browser information, approximate location and referral sources. We use this to understand and improve the website. Google Analytics remains unloaded until you consent. Advertising storage, advertising personalization and Google signals are disabled. We do not send workspace identifiers, email addresses, form contents or access-link tokens to Analytics; page addresses and referrers exclude query strings and fragments, and email-claim or private workspace entry pages do not start tracking.

You can withdraw consent through Cookie settings. See Google's Privacy Policy for its processing and international transfer information.

Playgama partner games

Our Playgama collection uses game information and thumbnails supplied by Playgama. Thumbnails are loaded from its image service. A game is loaded from Playgama only when you choose Play game; its embedded player may show advertising and use its own cookies, storage and services. Playgama receives device, network and game-use information needed by its player. Our public partner ID attributes these games to NextGenRunGames. Site analytics choices remain separate from the embedded player's privacy controls. Review Playgama's Privacy Policy and Terms of Use before playing.

Who receives data

Our hosting provider, Vultr, supplies the current server in Amsterdam. Our email provider receives access-link and contact emails. Microsoft receives optional Clarity data and Google receives optional Analytics data only when their respective integrations are active and you consent. Distribution destinations receive the builds and public metadata needed for the routes you authorize and apply their own privacy policies. The hosted gateway stores workspace data on persistent server storage. Public studio CC0 media is stored in a separate publicly readable Google Drive folder, with metadata and downloads served through this website. Google receives requests for those downloads and applies its own Privacy Policy. The operator's private local archive remains separate.

Providers can process information outside your country or the EEA. Where applicable, appropriate legal transfer safeguards are required. Public game pages, shared builds and free asset downloads are accessible worldwide. Third-party games may use their own services and storage; consult the creator's notice.

Retention and control

Workspace records and builds remain while needed for your active library and distribution history, until deletion is requested or the service no longer needs them. Contact messages remain only as needed to handle the request and legitimate follow-up or legal obligations. Operational records are limited by the server's log rotation; security-related records may need longer retention. Revoking a token or hiding a public game does not delete your private library.

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to legitimate-interest processing, withdraw analytics consent, and complain to your data protection authority. Email us from your workspace address; we may verify ownership before acting. We do not request your password to process a privacy request.

Children and changes

Do not send children's personal information through uploads or the contact form. If you believe such data was collected inappropriately, contact us. We update this notice when processing changes; the date above identifies the current version.