Privacy Policy: Manu Games, The Assembly Line and the Arcade

— Effective May 1, 2026 · Last updated October 10, 2026 —

Manu Games LLC, a North Carolina limited liability company, operating from North Carolina, USA. This policy describes how the studio handles personal data on three surfaces: the Website at manugames.com, The Assembly Line newsletter, published on Ghost at blog.manugames.com, and the bots and tools the studio runs on its Discord server (see The Discord server).

The studio operates other surfaces, including Tideward (a game), Cruxsmith (its software and search practice), Peanut Gallery (a Chrome extension), and a handful of for-sale domain landing pages. Each runs on its own site, with its own privacy policy where one applies, because the data flows are genuinely different. See Other Manu Games surfaces below for the routing.

Other Manu Games surfaces

Other surfaces operated by Manu Games LLC are not governed by this policy. Use the policy that lives on the surface you are using:

Tideward (the game, on Apple devices): tideward.app/privacy.
Peanut Gallery (a Chrome extension at peanutgallery.live): peanutgallery.live/privacy.

The Assembly Line newsletter is published on Ghost at blog.manugames.com; its archive is covered by this policy plus Ghost's privacy policy.

For privacy questions, write to privacy@manugames.com. We aim to respond within 30 days, faster where statute requires.

Scope of this policy

The surfaces have different audiences, different data flows, and different geographic availability. They are addressed separately below.

The Website: manugames.com, the studio's publisher hub. Globally accessible. The Website uses Cloudflare Web Analytics, a cookieless, privacy-first service that measures aggregate traffic (such as page views, referrers, and aggregate device and country breakdowns) at the edge without setting cookies or building a per-visitor profile. The studio also keeps its own aggregate count of how long Arcade games are played, described in How we measure the Arcade below. Beyond those two, the Website runs no advertising scripts, no ad networks, and no cross-site tracking or fingerprinting, and it sets no cookies. Because both measurements are cookieless, there is still no "Accept cookies" banner. The Arcade's optional live-play features process a small amount of data described in The Arcade's live tables below, and its optional report form sends only what is described in The Arcade's report form.
The Newsletter: The Assembly Line, distributed by Ghost. Globally accessible, subject to Ghost's own terms and privacy policy. Subscribing is the only way personal data enters the Newsletter system; you do that voluntarily, and you can leave with one click. The newsletter moved from Beehiiv to Ghost in September 2026; The newsletter below sets out what each platform still holds.
The Discord server: the Manu Games server on Discord, home of the Tideward, Almanac and Arcade rooms. Discord itself is governed by Discord's privacy policy; what the studio's own bots read and send is set out in The Discord server.
Our social media accounts: the studio's own accounts on Instagram, Threads and X, and the small tool that schedules their posts and helps answer replies. Each platform is governed by its own privacy policy; what the studio's tool reads, keeps and does is set out in Our social media accounts.

What we collect, and what we don't

The short version, in plain language:

Website: aside from Cloudflare Web Analytics (the cookieless, aggregate measurement described above) and the studio's own aggregate play-length count described in How we measure the Arcade below, no scripts profile you, no first- or third-party cookies are set, and there is no advertising network. The newsletter form no longer makes a third-party request at all: it submits to this site's own domain, and the studio's server passes your address to Ghost. See The newsletter below.
Arcade games (solo play): nothing. Saves, streaks, and settings live in your browser's local storage and never leave your device.
Arcade live tables and leaderboards (optional): only if you choose to sign a display name: that name, a one-way hash of a random key your own browser mints, your ratings and scores, match results, and a day-salted abuse-limit hash that goes stale within a day. Details, including instant self-service access and deletion, in The Arcade's live tables.
Newsletter: only the email address you submit (and any subsequent address changes). Ghost handles delivery; you can unsubscribe with one click from any issue. The newsletter's website runs Ghost's own measurement, described under The newsletter.
Discord server: the studio's bots read messages in some rooms to translate them, welcome newcomers, and file reports; message text and display names are sent to Anthropic's Claude to do that. Details in The Discord server.

The website

The publisher hub at manugames.com hosts this policy, the studio's about page, the Arcade (its catalog of free browser games), the newsletter landing page, the press kit, and the contact page. It uses cookieless Cloudflare Web Analytics for aggregate traffic measurement, and otherwise runs no advertising, no fingerprinting, and no cross-site tracking. The studio's own pages set no cookies.

The newsletter form on the home page and the newsletter page submits to this site's own domain rather than to an outside service. The studio's server passes the address straight to Ghost, where the newsletter is written and sent, and Ghost emails you a confirmation link; nothing is sent until you click it. The studio does not store the address itself, and it no longer reaches Beehiiv. See The newsletter below for details.

The Arcade's live tables

The Arcade's games are free browser games that run entirely on your device. Playing them solo sends us nothing: saves, win counts, streaks, and settings are kept in your browser's local storage, under keys beginning manu., and never transmitted. You can clear them at any time from your browser or from the Keeper's Ledger page.

Some games also offer optional live features: public leaderboards, rated multiplayer tables, and correspondence ("slow") tables. These run on Cloudflare Workers and a Cloudflare D1 database operated by the studio. There are no accounts: no email, no password, no sign-up. If you choose to play, you pick a display name once, and your browser mints a random key it keeps locally as your credential.

What is stored when you play live: your chosen display name; a one-way, peppered SHA-256 hash of your browser-minted key (we never see or store the key itself); your rating, games played, and wins per game; finished match records (the participants' display names, finishing ranks, rating changes, and a timestamp); solo leaderboard scores you submit; standing correspondence challenges and the turn state of slow tables; and a day-salted hash of your IP address used only for rate and abuse limits, which cannot be linked back to you after the day turns.
What is deliberately not collected: no email, no real name, no account, no precise location, no advertising identifiers, no cross-site anything, and no age or birth date. The display name is the only human-readable identifier, and you choose it; the form asks for a nickname, not your real name.
The age question: the first time you reach for a live feature, the page asks what year you were born. The answer is turned into an age band on your device and only the band is kept, in your browser's local storage; the year is not kept and is never sent to us. Under 13, the live features switch off on that device and every game still plays in full solo. From 13 to 17, the page asks for a tick saying a parent or guardian said it is OK, also kept only on the device. See Children.
Purposes: running the boards and tables you asked to join (pairing opponents, keeping the ladders honest, resuming interrupted games) and limiting abuse.
Access and portability, instantly: the Keeper's Ledger shows the complete record the service holds under your key and lets you download it as JSON, on the spot, no email required.
Deletion, instantly: the same page has a self-service Forget me action. It deletes your ratings, scores, and standing challenges, releases your display name, and replaces your name with “A departed keeper” in finished match records and sealed weekly honors; those rows are also your opponents' history, so the record of the game survives while your name leaves it. A separate button clears this device's local pockets. Forget me cannot reach the staff-channel notes described under Sharing below; email privacy@manugames.com to have those removed too.
Retention: finished rated-match records prune automatically after 90 days; single-use connection tickets last minutes; day-salted abuse hashes are unlinkable after 24 hours; unclaimed correspondence challenges sweep after 7 days; ratings and leaderboard scores stand until you delete them. The staff-channel notes described below stay in that channel until the studio deletes them or you ask us to.
Sharing: display names, ratings, and scores appear on the public boards you chose to join (that is the point of a leaderboard), and nothing is sold, shared for advertising, or given to third parties for their own use. The community boards also post two kinds of note to a private staff channel on the studio's Discord server, which only the studio and its moderators can read: a score held back for a second look because it would shatter a board (the game, the display name, and the score), and each week's champions when the week is sealed (the game, the display name, and the score). Those posts are held by Discord under its own privacy policy. Cloudflare processes the rest as our infrastructure provider.

Server logs

The Website is hosted on Cloudflare Pages. As a structural matter, Cloudflare's edge network processes standard technical request data (IP address, user agent, requested path, response code, timestamp) in the course of serving and securing the site. We do not retrieve those edge logs and keep no copy of them; the only traffic measurement we see is the aggregate, cookieless Cloudflare Web Analytics described above, together with the aggregate play-length count described below. Cloudflare's data practices are governed by Cloudflare's privacy policy.

The small Cloudflare Workers behind the Arcade (the live-table service, the community boards, and the report form's intake) are different: they have Cloudflare Workers Logs switched on, so that when something breaks the studio can see why. For each request a Worker handles, Cloudflare records the time, the address requested (for the Molten pool that address carries your display name), the response code, and the request's technical details, which include its headers and so your IP address and browser; alongside that sit short status lines the code writes, which never contain your IP address (the report form's lines carry only the first eight characters of the day-salted hash described in The Arcade's report form). Cloudflare holds these logs in our account and deletes them automatically after at most 7 days. The studio reads them only in Cloudflare's dashboard, while finding the cause of a fault, and does not export, copy, or combine them with anything else.

How we measure the Arcade

The studio needs to know which games are worth keeping, which is a question about the games rather than about the people playing them. So when you leave a game page, the page reports two things to the studio's own server: which game it was, and how many seconds the game was actually on screen. Time spent with the tab in the background is not counted.

That report is immediately folded into a counter and the underlying number is discarded. What is stored is only a tally of the form "on this date, this game had this many visits lasting under ten seconds, this many lasting a minute, and so on". There is no identifier of any kind, no cookie, no account, no IP address, and no row that represents a person, so there is nothing that could later be connected back to you, by us or by anyone else. It is not possible to ask this data what any individual did, because it was never recorded.

The measurement is skipped entirely if your browser sends Do Not Track or Global Privacy Control. Nothing else about your visit is transmitted.

The Arcade's report form

Every Arcade page has a Report a problem and a Suggest an idea link. Using one is optional, and nothing is sent until you press Send. What is sent is exactly this: whether it is a problem or an idea, the words you type, the game and page you were on (the address without anything after a ?), whether you were on a desktop, phone or tablet (you can change it in the form), and your browser's name without its version. The form asks for no name, no email and no contact details, and sets no cookie.

Your report becomes a public post. The studio's server turns it into a thread in #arcade-bug-reports or #arcade-suggestions on the Manu Games server on Discord, where anyone in that server can read it and where the studio answers it. So please do not type anything into the form you would not post publicly. Discord's handling of that post is governed by Discord's own privacy policy.

To stop one connection flooding the forums, the server counts reports per connection per day. It does this with a scrambled form of your IP address that changes every day and cannot be turned back into the address; the count is deleted after two days, and neither the address nor the scrambled form is ever written into the post. If you want a report you sent taken down, email privacy@manugames.com with its game and roughly when you sent it.

The Discord server

The studio runs one server on Discord, the Manu Games server, with rooms for Tideward, the Almanac for Dragonwilds, the Arcade, and general chat. Discord operates the service and handles everything you post there under its own privacy policy. This section covers what the studio's own bots and tools do with what you post. There is one bot account, named Tideward; it also posts as Manu Games AI through webhooks it owns. It runs as small Cloudflare Workers, plus a daily triage pass the studio runs from its own computer.

The translator. Once a minute it reads the latest messages in #world-chat, #say-hello, #general and #help, and in active threads under those rooms and under the Tideward forums (#bug-reports, #suggestions, #strategy). A message that is not in English is translated into English; in #world-chat and in threads, an English message is also translated into the other languages being spoken there, and in the other three rooms only when it replies to or mentions someone who wrote in another language. To do that, the message text and its author's display name are sent to Anthropic's Claude, and the translation is posted as a reply marked as a translation.
The welcome. Every five minutes it reads the newest messages in #say-hello and #world-chat from members who do not yet have the Deckhand role. It checks the account's age (Discord account IDs carry their creation date) and screens the message for spam; if both pass, it grants Deckhand. It sends the introduction text and your display name to Claude to write a short welcome that answers what you said, and it sends a copy of your introduction to Seth, the studio's founder, as a Discord message so he can say hello himself. If your display name has no Latin-alphabet spelling and you have no server nickname, it sends your display name and username to Claude for the standard romanization and sets your server nickname to both (for example, 小鳥ぴよ (Kotori Piyo)); you can change it at any time in your server profile. If you hold no language role, it may give you the one that matches the language you wrote in.
Report intake. Reports sent from the Arcade's report form, from the Almanac for Dragonwilds app, and from Tideward become public forum threads, opened by the bot. What each one carries is set out in The Arcade's report form above and in each app's own privacy policy.
Triage. Each day the studio reads every thread in the bug-report and suggestion forums for Tideward, the Almanac and the Arcade, and looks in the general rooms (including #arcade and #almanac-for-dragonwilds) for problems posted outside the forums, so that each one is answered, and in the newcomer rooms for anyone the welcome bot missed. This pass is done with the help of Claude, which reads those posts, including their authors' display names, and drafts the replies the bot posts as Manu Games AI. It keeps a working ledger on the studio's computer: thread IDs, usernames, and short notes of what was reported and what was done about it.
The Arcade boards. The community boards post held scores and weekly champions to a private staff channel, as described under The Arcade's live tables.
Kind words. When someone says in the server that we fixed something quickly or acted on their suggestion, the studio may make a note of it, so it can ask that person later whether it may quote them. To find these, the daily triage pass also reads the server's other public rooms and threads. The note holds a link to the message, the author's username and user ID, the date, and a short description in our own words; it holds no copy of the message. Nobody is quoted anywhere without saying yes first.

What is kept, and for how long. The bots have no database: they work out what they have already done by reading Discord itself, so they keep no copy of your messages. Their run logs in Cloudflare Workers Logs record message IDs, languages, and the display names of members just welcomed, not the text of messages, and Cloudflare deletes them after at most 7 days. Anthropic states that it deletes what is sent to its API within 30 days, except where a request is flagged under its usage policy, when it may keep it for up to two years. The triage ledger is kept on the studio's computer for as long as it is useful for following up reports, and a line is deleted on request. A kind-words note is kept until the person has been asked and has answered, and for as long as a quote they agreed to is in use; it is deleted on request. Translations, welcomes and nicknames the bot posts or sets stay on Discord until they are deleted there.

No model training. The translator and the welcome bot use Anthropic's API under Anthropic's Commercial Terms, which say that Anthropic may not train models on customer content from its services. The daily triage pass uses the studio's Claude subscription, which is covered by Anthropic's consumer terms and privacy policy. Nothing from the server is sold, used for advertising, or used by the studio to profile anyone.

Why, and how to opt out. The basis is our legitimate interests in letting members who write in different languages talk to each other and to the studio, in welcoming people quickly, in keeping spam out, in hearing about and fixing problems in our games, and in asking players whether we may quote what they said about how we work. If you would rather your words not be sent to Claude by the translator, post in English, outside #world-chat and threads, and not as a reply to someone writing in another language, or write to us instead. To avoid the romanized nickname, set a server nickname before your first message. To have a translation, a nickname, your ledger lines or a kind-words note removed, or to object to any of this, email privacy@manugames.com or ask a moderator, and we will take it down.

The studio posts to its own accounts on Instagram, Threads and X (@tidewardgame) through a small scheduling tool it runs itself on Cloudflare (a Worker, a database and private file storage), using each platform's official API through the studio's own developer apps. Instagram and Threads are operated by Meta and X by X Corp., each under its own privacy policy. This section covers only what the studio's tool does.

Replies, comments and mentions. About every 30 minutes the tool reads the replies to our Threads posts, the comments on our Instagram posts, and Threads posts that mention @tidewardgame: the text, your username, when it was posted, its link, and which of our posts it answers. It does not read replies on X. Once a day the studio reviews what came in, with the help of Anthropic's Claude (which receives that text and username), and may answer some of them publicly from our account.
Reaching out. On Threads the studio may look for public posts about games by keyword, and may look at the public profile of the account that wrote one (its name, bio, follower count and recent public posts) to decide whether a short public reply would be welcome. It replies to at most three such posts a day, never sends private messages, never follows, likes or contacts accounts in bulk, never reaches out to the same account more than once a week, waits at least 30 days after a question that went unanswered, stops for good after two unanswered questions, and never reaches out again to anyone who asks us not to. For each reply it keeps your username, the post it answered, its text and ours, and the date.
Our own numbers. Once a day it records the public metrics of our own posts (views, likes, replies, shares and similar counts). These are totals about our posts, not about you.

None of this is sold, shared with advertisers, used for advertising, or combined with data from anywhere else. The basis is our legitimate interests in publishing our own posts, answering the people who talk to us, and finding a few people who would genuinely like to hear about our games.

How long, and how to opt out. The text of replies, comments, mentions and the posts we answered is erased after 90 days. We keep the username, the post IDs and the dates after that only so the limits above keep working (for example, never reaching out again to someone who asked us not to), and, when a reply says we fixed something quickly or acted on a suggestion, so we can ask that person later whether we may quote them. For those we also keep a link to the reply and a short note in our own words, not its text, and we quote nobody without a yes. Tool logs are deleted after 60 days. To have your data removed, or to ask us never to reach out to you, email privacy@manugames.com, and we will do it.

The newsletter (The Assembly Line)

The Assembly Line is the studio's newsletter covering factory, automation, and idle games. It is published and sent with Ghost, a newsletter and publishing platform operated by Ghost Foundation Ltd.

The newsletter moved platforms in September 2026. It ran on Beehiiv until then. The archive and the subscriber list now live on Ghost, every issue from the move onward is sent by Ghost, and the signup forms on this website have been repointed, so a new address never reaches Beehiiv at all. One thing remains true of Beehiiv: a copy of the subscriber list as it stood at the move stays on that account until it is closed. If you subscribed before September 2026, your address is in that copy; it is named below wherever it still holds your data.

What is collected at signup: your email address. The form on the studio's pages asks for nothing else (no first name, no preferences); it does attach labels to your subscription saying that you signed up on this website and on which page (the home page or the newsletter page), which is how the studio sees which pages bring readers. If you sign up via the newsletter's own hosted page (blog.manugames.com) Ghost may offer optional fields; anything beyond email is your choice.
Consent mechanism: subscription is opt-in; you must submit the form yourself. Where the platform sends a confirmation email, you must follow the confirmation link to begin receiving issues. Either way, no email is added to the list without your affirmative action.
Where your data is processed: Ghost Foundation Ltd states that its servers are located in Amsterdam, the Netherlands, and it sends the newsletter through its own email-delivery provider. Beehiiv, which no longer receives signups from this website but holds a copy of the list until that account is closed, processes subscriber data on infrastructure located in the United States. Each platform's own data-transfer protections apply to what it holds; see International transfers.
What we use it for: sending you the newsletter, and only the newsletter. We don't repurpose subscriber emails for advertising, don't sell the list, and don't share it with third parties beyond Ghost, and for now Beehiiv, as our processors.
Engagement metrics: Ghost records standard email-engagement signals (opens, clicks, bounces, unsubscribes) at the platform level. We see aggregate numbers in the Ghost dashboard; we don't extract or repurpose individual-level engagement data. Links in an issue pass through Ghost's link tracker, and the link sent to you carries your subscriber ID, so a click is counted against your subscription.
The newsletter's website (blog.manugames.com) is run by Ghost and is not the cookieless studio site. Each page view sends Ghost's own web analytics the page address, the referring page and any campaign tags in the link, your browser's user agent and language, and a country worked out from your time zone, together with your subscriber ID if you are signed in there. A Ghost script also keeps a short history of the pages you visit, in your browser's session storage (cleared when you close the tab, and never older than a day), so that if you subscribe, Ghost can record which page and which referrer you came from. The blog loads Ghost's sign-up and search widgets from jsDelivr (cdn.jsdelivr.net), its fonts from Bunny Fonts (fonts.bunny.net), and its images from Ghost's own storage, and each of those services sees your IP address when it serves the file. A visitor who is not signed in gets no cookie; signing in to the blog sets Ghost's sign-in cookie. The studio sees the resulting numbers in the Ghost dashboard; it does not export them or use them for advertising.
How to unsubscribe: every newsletter issue includes a one-click unsubscribe link in the footer. You can also email privacy@manugames.com and we'll handle it for you. Unsubscribing removes your email from active mailing; Ghost may retain a suppression record so you don't accidentally re-subscribe to the same address.

Retention

Edge request logs at Cloudflare are retained under Cloudflare's own policies; we do not retrieve or retain them ourselves.
Arcade reports stay as posts in the Discord forums until the studio or you (by email) take them down; the per-connection daily count behind the report form is deleted after two days.
Arcade live-play data follows the schedule in The Arcade's live tables: match records 90 days, abuse hashes a day, tickets minutes, ratings and scores until you delete them yourself on the Keeper's Ledger. The community boards' staff-channel notes on Discord (a held score, a weekly champion) stay until the studio deletes them or you ask us to by email; Forget me does not reach them.
Worker logs (see Server logs) are deleted by Cloudflare automatically after at most 7 days.
Discord: see The Discord server for the bots' logs, Anthropic's 30-day deletion, and the triage ledger.
Our social media accounts: the text of replies, comments, mentions and answered posts is erased after 90 days; usernames, post IDs and dates stay only to keep the outreach limits and opt-outs working; tool logs go after 60 days. See Our social media accounts.
Newsletter subscriber data is retained by Ghost for as long as you remain subscribed and for a reasonable period thereafter for suppression-list and audit purposes. A copy also remains on Beehiiv until that account is closed. You can request deletion at any time by emailing privacy@manugames.com; a deletion request covers both.

Your rights

The specific rights you have depend on where you live. To exercise any of them, write to privacy@manugames.com. We will respond within the timeframe applicable law requires (commonly 45 days, sometimes extendable).

Right to know / access: confirmation of whether we process personal information about you and a copy of what we hold. For the Newsletter we'll confirm what's on file (your email and any engagement-metric aggregates Ghost records). For Arcade live play, the Keeper's Ledger answers instantly with the complete record and a JSON download.
Right to correct: to correct inaccurate personal information we hold.
Right to delete: for Newsletter data, unsubscribe in any issue or write to us. For Arcade live play, the Forget me action on the Keeper's Ledger deletes instantly, no email needed. For anything else, email us.
Right to opt out of "sale" or "sharing" for cross-context behavioral advertising. We do not sell or share. There is nothing to opt out of.
Right to portability: receive your personal information in a structured, machine-readable format.
Right to limit use of sensitive personal information. We do not process sensitive personal information.
Right to non-discrimination: we will not deny service, charge different prices, or provide different quality because you exercised a privacy right.
Right to appeal: if we deny a rights request you submit, you may appeal by replying to our response email within 60 days; we will respond to the appeal within 60 days and explain our reasoning.

For users outside the United States interacting with the Website or Newsletter, see International users, EU, EEA and UK visitors, and Indonesia below for additional rights and how to exercise them.

Children

The Assembly Line is a general-audience publication and is not directed to children within the meaning of the U.S. Children's Online Privacy Protection Act (COPPA, 16 CFR Part 312) or the New York Child Data Protection Act. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and become aware that a child under 13 has subscribed to the Newsletter, contact privacy@manugames.com. We will delete personal information consistent with COPPA, document the deletion, and confirm in writing.

The Arcade. The Arcade's games are for a general audience, and solo play collects nothing from anyone, of any age. The optional live features (public boards, live tables, slow tables, the Molten pool) show the display name a player picks, so the first time a player reaches for one, the page asks what year they were born. That answer never leaves the device: it is turned into an age band there, and only the band is kept, in the browser's local storage. If the player is under 13, the live features switch off on that device and never send us anything, while every game still plays in full. If the player is 13 to 17, the live features stay closed until they tick "A parent or guardian said it's OK", which is also kept only on the device. Every name field asks for a nickname, not a real name. A parent or guardian can remove a child's live-play record at once with Forget me on the Keeper's Ledger, on the device the child plays on, or by writing to privacy@manugames.com, which also covers a report the child sent and any staff-channel note about their scores.

UK Children's Code. Because free browser games are likely to be played by children in the UK, the studio has carried out a data protection impact assessment of the Arcade under the ICO's Age Appropriate Design Code. The measures above (live features off by default, the age question, nickname prompts, instant deletion, and no tracking, advertising or profiling) come from it, and it is reviewed before any new live feature ships.

International transfers

Ghost (Newsletter). Ghost Foundation Ltd states that its servers are located in Amsterdam, the Netherlands, and it sends the newsletter through its own email-delivery provider. Ghost's own transfer protections apply to any onward transfer. We do not separately re-transfer.

Beehiiv (Newsletter, until the account is closed). Beehiiv processes subscriber data in the United States. It no longer receives signups from this website, but it holds a copy of the pre-move subscriber list until that account is closed. For subscribers outside the United States, Beehiiv's own transfer protections (including Standard Contractual Clauses where applicable) apply.

Cloudflare (Website and Arcade). Cloudflare serves the Website from its global network and runs the Arcade's live-table service, its database, and the report form's intake. The data involved is processed under Cloudflare's data-processing terms and transfer mechanisms. We do not separately re-transfer it.

Discord (Arcade reports and the studio's server). A report you send from the Arcade's report form is posted to Discord, a US company, as are the community boards' staff-channel notes, and everything on the studio's server is handled there under Discord's own privacy policy and transfer mechanisms.

Anthropic (Discord bots). The studio's Discord bots send message text and display names to Anthropic, PBC, in the United States, under Anthropic's Commercial Terms and data processing addendum, as described in The Discord server.

Ghost's privacy policy is at ghost.org/privacy; Beehiiv's is at beehiiv.com/privacy.

Security

We rely on infrastructure-level security from our service providers. The Website is a static site with no authentication system. The server-side code we operate is a handful of small Cloudflare Workers: the Arcade's live-table and leaderboard service, the play-length counter, the report form's intake, the relay that passes a newsletter signup to Ghost, and the two Discord bots (the translator and the welcome), which keep no database. The live-table service uses single-use tickets, per-IP rate limits, and hashed identifiers. None of these holds an email address, a password, or payment data; the relay hands a signup address to Ghost without keeping a copy. Ghost operates its own security controls. Our attack surface is a static site served through Cloudflare Pages, a few small Workers that store nothing sensitive, and a newsletter platform we don't control.

Breach notification

If a personal-information breach occurs that is likely to affect you, we will notify you and, where required, the applicable state attorney general or enforcement authority within the timeframes the applicable law requires: generally "without unreasonable delay" under most U.S. state breach-notification statutes, with specific deadlines in some states.

Where a breach occurs on the infrastructure of a newsletter platform holding your data (Ghost, or Beehiiv while a copy of the list remains there), that platform is required to notify Manu Games without undue delay; the same notification clocks then run for us as data controller.

US state-specific notices

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Iowa, Indiana, Tennessee, Montana, Delaware, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, or Rhode Island, or another state with a substantially similar comprehensive privacy law, the following apply to your interaction with the Website, the Arcade, and the Newsletter:

Categories of personal information processed: your email address (Newsletter), plus any engagement metrics Ghost records; if you opt into Arcade live play, a chosen display name, hashed identifiers, and game results as described in The Arcade's live tables; if you send an Arcade report, the words you type and the page, device type, and browser name it carries, as described in The Arcade's report form; and, on the studio's Discord server, the text of messages and display names the bots read, as described in The Discord server.
Purposes: sending the Newsletter you've subscribed to; running the Arcade boards and tables you choose to join, and limiting abuse of them; and hearing about and answering the problems and ideas you report.
Categories of third parties with whom personal information is shared: Ghost Foundation Ltd as service provider for the Newsletter, and Beehiiv, Inc. while it holds a copy of the list; Cloudflare, Inc. hosts the Website (Cloudflare Pages), processes standard technical request data at the edge, and runs the Arcade's live-table service and the report form's intake; Discord, Inc. receives an Arcade report, which it publishes as a post, only if you choose to send one, and the community boards' staff-channel notes; Anthropic, PBC processes Discord message text and display names for the studio's bots.
We do not sell personal information. We have not sold personal information in the prior 12 months and do not intend to.
We do not "share" personal information for cross-context behavioral advertising. We do not engage in advertising at all.
We do not engage in profiling for legal or similarly significant decisions.
Sensitive personal information: we do not process sensitive personal information as defined by these statutes.
Universal opt-out signals (GPC): because we do not engage in selling, sharing, or targeted advertising, there is no such processing for a Global Privacy Control or equivalent signal to opt out of. We honor any signal we are required by law to honor.
Right to appeal: if we deny a rights request you submit, you may appeal by replying to our response email within 60 days; we will respond within 60 days and explain our reasoning.

Maryland (MODPA). We limit collection of personal data to what is reasonably necessary and proportionate to the specific service you have requested. We do not sell personal data of any consumer we know to be under 18, and we do not process minor data for targeted advertising.

California (CCPA / CPRA). California residents have specific rights described above (right to know, delete, correct, opt out of sale/sharing, limit use of sensitive PI, non-discrimination, appeal). Retention windows are described in Retention. Our designated method for submitting rights requests is the email address in Contact.

International users

The Website and Newsletter are globally accessible. If you are reading from the EU, the EEA, the UK, or Indonesia, the two sections that follow apply to you now.

Other regions. If you are in Canada (PIPEDA), Quebec (Law 25), Brazil (LGPD), Australia (Privacy Act 1988), Japan (APPI), South Korea (PIPA), or any other jurisdiction with a comprehensive privacy law, you may have analogous rights under your local law. We recognize these rights to the extent they apply to the Website and Newsletter and respond to requests in good faith.

EU, EEA and UK visitors

Who is responsible. Manu Games LLC is the controller for the processing described in this policy. We have no establishment in the EU, the EEA, or the UK.

Lawful bases (Article 6). There are three, one for each kind of thing you can do here:

The Newsletter: your consent (Art. 6(1)(a)), given when you submit the signup form and confirm by the emailed link. Withdraw it at any time by unsubscribing in any issue or emailing privacy@manugames.com; withdrawal does not affect processing that happened before it.
Arcade live tables and leaderboards: performance of a contract (Art. 6(1)(b)). Your display name, the hash of your browser's key, your ratings and scores, and your match records are how the boards and tables you chose to join work.
The Arcade's report form, answering your emails, and running the Website (including Cloudflare's transient processing of IP addresses to route requests and filter abuse, and the day-salted hashes behind the Arcade's abuse limits): our legitimate interests (Art. 6(1)(f)) in hearing about and fixing problems in the games, replying to people who write to us, and keeping the site and its games online and unabused. Nothing in this category involves profiling. You may object at any time; for a report, that means we take its post down.
The studio's Discord bots and triage (translation, welcomes and romanized nicknames, report intake, and the daily reading of the forums): our legitimate interests (Art. 6(1)(f)) in letting members who write in different languages talk to each other, welcoming newcomers, keeping spam out, and fixing what members report. You may object at any time; see The Discord server.

Your rights (Articles 15 to 21). Access, rectification, erasure, restriction, portability, and objection, plus withdrawal of consent where consent is the basis. The rights in Your rights above are these rights, with the same mechanics: the Keeper's Ledger answers access, portability, and erasure for Arcade live play on the spot, and for everything else write to privacy@manugames.com and we will respond within one month.

Complaints. You may lodge a complaint with your local supervisory authority; the EDPB members list has every EU authority, and UK residents can complain to the ICO. We would appreciate the chance to put it right first, but that is your right, not a precondition.

International transfers (Chapter V). Ghost holds Newsletter data in the Netherlands. Beehiiv holds a copy of the pre-move list in the United States until that account is closed; Cloudflare's network serves the Website and runs the Arcade's services; and a report you send is published on Discord, a US company. On the Discord server, message text and display names are sent to Anthropic, a US company. Each applies its own transfer protections, set out in International transfers.

Children (Article 8). Consent is the basis only for the Newsletter, which is not directed at children; if you are under 16, please don't subscribe without a parent's agreement. The Arcade's live features rest on contract, not consent, and the age question described in Children keeps them off for anyone under 13 and asks 13 to 17 year olds to confirm a parent or guardian agreed.

Automated decision-making (Article 22). None. No decision with legal or similarly significant effect is made about you. Arcade ratings decide who you are paired with at the tables you chose to join, and nothing more.

Indonesia

Which law, and who is responsible. Indonesia's Law No. 27 of 2022 on Personal Data Protection (the "PDP Law") and its implementing regulation, Government Regulation No. 33 of 2026, apply to how we handle personal data about people in Indonesia. Manu Games LLC is the personal data controller. We have no establishment in Indonesia and have not appointed a data protection officer: Article 53 requires one for processing for public services, large-scale regular and systematic monitoring, or large-scale processing of specific personal data, and nothing on the Website or in the Newsletter is any of those.

Lawful bases (Article 20). The same three as in the EU section, because the flows are the same:

The Newsletter: your consent (Art. 20(2)(a)), given when you submit the signup form. Withdraw it at any time by unsubscribing; withdrawal does not affect processing that happened before it. The newsletter and Retention above are the information Article 21 requires you to have before you consent: what is collected (your address, and labels naming the page you signed up on), why, for how long, who processes it, and your rights.
Arcade live tables and leaderboards: performance of a contract (Art. 20(2)(b)): they are how the boards and tables you chose to join work.
The Arcade's report form, answering your emails, and running the Website (including transient processing of IP addresses for routing and abuse filtering, and the day-salted hashes behind the Arcade's abuse limits): our legitimate interests (Art. 20(2)(f)) in fixing the games, replying to people who write to us, and keeping the site online. Nothing in this category involves profiling.
The studio's Discord bots and triage: our legitimate interests (Art. 20(2)(f)) in letting members talk across languages, welcoming newcomers, keeping spam out, and fixing what members report. See The Discord server.

Your rights (Articles 5 to 13). To know who is processing your data and why, to access it and get a copy, to correct it, to erase it, to withdraw consent, to object to a decision made solely by automated processing, and to delay or restrict processing, plus the right to complain and to seek compensation for a violation. The rights in Your rights above are these rights, with the same mechanics. Write to privacy@manugames.com. For the requests the PDP Law puts on a 3 x 24 hour clock (correction, stopping processing after you withdraw consent, and restricting processing) we act within that window once we can verify the request is yours; the self-service controls (unsubscribing, and Forget me on the Keeper's Ledger) take effect immediately.

Children (Article 25). Under Indonesian law a child is anyone under 18. The Arcade asks for parental agreement before a child's data is processed at all: the first time a player reaches for a live table, leaderboard or the Molten pool, the page asks their birth year. Under 13, the live features stay off on that device and nothing is sent. From 13 to 17, the live features open only after the player ticks "A parent or guardian said it's OK"; that tick and the age band are kept only on the device, and the birth year is not kept at all. Solo play collects nothing at any age. The Newsletter is not directed at children; if you are under 18, please don't subscribe without a parent's or guardian's consent. A parent or guardian can remove a child's live-play record at once with Forget me on the Keeper's Ledger, on the device the child plays on, and can have a child's newsletter address, Arcade report, or Discord content removed by writing to privacy@manugames.com.

Breach notification (Article 46). If a failure of personal data protection affects your personal data, we will notify you and the competent authority in writing within 3 x 24 hours of establishing it, stating which data was compromised, when and how, and what we are doing to handle and recover it.

International transfers (Article 56). Your data is processed outside Indonesia. Cloudflare serves the Website and runs the Arcade's services under its binding data-processing terms. Ghost (in the Netherlands) holds your newsletter address, and Beehiiv (in the United States) holds a copy of the pre-move list until that account is closed, each under its own terms; by subscribing you also consent to that storage. A report you send is published on Discord, a US company, under Discord's terms, and on the Discord server, message text and display names are sent to Anthropic in the United States for translation and welcomes. See International transfers.

Complaints. You may complain to the personal data protection authority the PDP Law establishes; until it is operating, the Ministry of Communication and Digital Affairs (Komdigi) handles personal data matters. We would appreciate the chance to put it right first, but that is your right, not a precondition.

Automated decision-making (Article 10). None. No decision with legal or similarly significant effect is made about you; Arcade ratings only decide pairings at the tables you chose.

Third-party links

The Website and Newsletter link to third-party services we don't control: Apple's TestFlight and App Store (for our games), Discord, X, Ghost (the newsletter platform itself), the founder's personal portfolio link, and the dedicated game sites we publish. Once you click through, you're governed by their privacy practices, not ours.

Updates to this policy

We may update this policy when our data practices change, when statute requires, when we expand to new regions, or when we improve the wording. The Effective Date and Last Updated stamps at the top will move forward.

Contact

Three channels, each scoped to a specific kind of question:

Privacy questions, rights requests, deletion requests, complaints: privacy@manugames.com
Refund-rights inquiries and other legal notices: legal@manugames.com
General support and product questions: support@manugames.com

Manu Games LLC
89 Waynesville Plaza #1028
Waynesville, NC 28786
United States

On Privacy