Privacy Policy

Effective October 1, 2026

sskplay ("we") operates chiptoy: the website at https://chiptoy.com, the chiptoy apps for Android and iOS, and the chiptoy connection (MCP) used from AI chat apps (together, the "Service"). This policy explains what personal information we process, why, for how long, who processes it for us, and what you can do. We process it in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable laws.

1. Information we process

We collect only what the Service needs. We use no analytics or tracking tools (the anonymous multiplayer link-quality measurements below are kept inside Cloudflare and tied to no one); the apps show ads through Google's advertising SDK, described below.

Developer performance tests (dev.chiptoy.com only): opening the device benchmark runs emulator diagnostics and uploads browser and platform information, an optional device label, core/ROM build identities, timings, memory measurements and correctness results. We keep one private report per Firebase identity, including guest identities. Reports expire after seven days and are removed by scheduled cleanup. We retain at most the newest 500 reports across identities after cleanup, so older reports may be removed earlier when this limit is reached. Only that identity and authorized operators can read them. Reports are overwritten by later tests, can be deleted on the test page, and are removed when you delete your account. These reports are processed by Cloudflare and do not contain game source, chat messages or input histories.

• Multiplayer rooms: to run a room, Cloudflare processes your account or anonymous Firebase user ID, a per-tab participant ID, your seat, button inputs for each frame, game-state check values and timing samples. Inputs are relayed to the other players in the room; the room list shows only seat counts, never who is playing. This is held only in the room's server memory and is gone when the room ends; nothing that identifies a room or its players is stored. Rooms do not use or change your personal game saves. To let a player who drops out rejoin, one player's device uploads a snapshot of the game's state (no personal information) every few seconds; the room keeps the last two in memory for at most a minute and forgets them when the room ends. To cut delay, your device may also send its button inputs to the other players directly (WebRTC), which lets them see your IP address, or through Cloudflare's TURN relay and Realtime SFU; the connection details your device exchanges for this (network addresses and session descriptions) pass through the room and are not stored. When a match ends, Cloudflare Workers Analytics Engine keeps anonymous link-quality measurements for each player of it: timings and counts (how late inputs arrived, round-trip times, how often the game had to be corrected or waited), the kind of device (Android, iOS or desktop, read from the browser's user agent), the platform (NES, Game Boy or Game Boy Color) and the game's multiplayer settings, with no account, player, game, device identifier or room attached. They are kept for 3 months and then removed by Cloudflare.
• Anonymous play: Existing anonymous Firebase sessions are treated as signed out for account features. These identities are not recorded in our user database and cannot connect an AI, create games, buy subscriptions or use cloud saves. Progress and settings stay on your device, keyed by game rather than the temporary identity. Shared games can be played signed out without creating a Firebase identity.
• Account: user ID, email address, display name, sign-in method (Google or Apple), sign-up and last-use times, received from Google or Apple when you sign in. If you hide your email with Sign in with Apple, we receive Apple's relay address.
• Games you make: titles, source code, picture files, built ROMs, screen captures, saved versions and their summaries, sent by the AI you connect or added by you on the site.
• AI work log: the request text your AI sends with each tool call, the tool name, a summary of its result and the time. We do not receive the rest of your AI conversation.
• AI connections: the name and address the connected AI app reports, connection codes and access tokens (stored only as hashes), last use and the game worked on.
• Game saves: in-game save data. When you play a shared game signed out or anonymously, it stays on your device only.
• Imported pictures: the image address you or your AI give and the image, converted into a game picture; the original is not kept.
• Safety: game and creator reports (game, version, reason, details, submission time and your account ID when signed in), your blocked creators and sharing restrictions. To limit anonymous report spam, we briefly keep a daily hash of the network address, not the address itself.
• Feedback: what you write, your rating, any contact details you choose to leave, and the app version and device/browser details, via our feedback form (feedback.sskplay.com).
• Ads (Android and iOS apps): without chiptoy Pro, the apps show ads from the Google Mobile Ads SDK (AdMob): a banner, full-screen ads when a game opens, a rewarded ad before each download and, on Android, an ad in the exit dialog. The website shows no ads. The SDK may process your device's advertising identifier, IP address and device information to show and measure ads, including across other companies' apps and websites (tracking). On iOS the app asks your permission (App Tracking Transparency) the first time it opens, and the identifier is used only if you allow it; you can change this in Settings. You can reset or opt out of the advertising ID in your device settings.
• Purchases (Android and iOS apps): chiptoy Pro is a subscription sold through Google Play Billing and Apple In-App Purchase. Google or Apple handles the payment; we receive and keep only what is needed to deliver it: the plan, its expiry and state, and the store's purchase token or transaction ID, linked to your account through an account token made from your user ID. We never receive your payment details. Apple tells our server about renewals, cancellations and refunds.
• Downloads: without Pro, each ROM or source download in the apps is recorded (game, kind, time) to apply the daily limit.
• Technical data: IP address, browser and device information, access times and error logs, processed automatically by our servers and hosting provider.

We do not collect sensitive information, government identifiers, payment details, precise location, or on-device data such as contacts or photos.

2. Why we process it

To sign you in and manage your account; to make, build, run, version and share games; to make sure a connected AI works only on your games; to carry game saves across your devices; to answer feedback; and to prevent abuse, fix errors and keep the Service secure. We do not sell your information or use it to train AI models. We do not use your account data or games for advertising; ads in the apps are served by Google as described above. In the EEA, the UK and US states that require it, the apps ask for your consent choices through Google's consent form first.

3. Retention and deletion

• Account, games and saves: until you delete your account. Deleting a game deletes its source, ROMs, captures, versions, work log and everyone's saves for it.
• Subscription records and download records: until you delete your account. Deleting your account does not cancel a store subscription; cancel it in Google Play or your Apple ID settings.
• AI connections: until you disconnect or the token expires (codes 10 minutes, access tokens 7 days, refresh tokens 30 days).
• Safety reports: until the reported game or a linked account is deleted, or you request deletion. Notifications sent to our private feedback inbox contain only a report reference and an admin link, and remain as notification records. Creator blocks: until unblocked or either account is deleted. Sharing restrictions: until lifted or the game or account is deleted. Report rate-limit hashes: deleted after 24 hours, on the next maintenance run.
• Feedback: kept as a record after it is resolved, and deleted on request.
• Access logs: for our hosting provider's retention period (typically days to weeks).
• Longer only where the law requires it.

4. Sharing

We do not provide your personal information to third parties. If you set a game to "link" or "public", others can see its release (title, ROM, captures, and the source if you turn on source sharing); your email, requests and work log are never shown. We may disclose information when legally required.

5. Processors and international transfer

These providers process data for us on servers outside Korea (including the United States): Cloudflare, Inc. (hosting, databases, file storage, game build servers; all of the above), Google LLC (Firebase Authentication, Google Sign-In, Google Fonts, Google Mobile Ads, Google Play Billing; account data, IP address, browser and device data, the advertising identifier when ads are shown, purchase records), Apple Inc. (Sign in with Apple, In-App Purchase; account data, purchase records) and GitHub, Inc. (feedback records in a private repository; feedback, rating, contact you leave, app and device details). Data is transferred over the network as you use the Service. AI services you connect (ChatGPT, Claude and others) are separate services you use directly; your conversations with them follow their own policies.

6. Your rights

You may access, correct, delete or restrict the processing of your information and withdraw consent at any time. You can delete games, stop sharing and disconnect AI apps directly on the site and in the apps. You can delete your account and all its data yourself at any time under Me → Delete account: your games, versions, saves, AI connections and account record are deleted at once, and the sign-in itself is removed. For any other request, email us; we will verify it is you and act without delay, within 10 days.

7. Cookies and device storage

We use browser storage (IndexedDB, localStorage) to keep you signed in (Firebase), to keep signed-out and anonymous game saves and for display settings. We use no advertising or tracking cookies.

8. Children

The Service is not directed to children under 14 (under 13 in the United States). If we learn that we collected such a child's information without a guardian's consent, we delete it.

9. Security

All traffic is encrypted with HTTPS. We never receive passwords; Google and Apple handle sign-in. AI connection tokens and codes are stored only as hashes. Access to data is limited to the operator.

10. Contact

Privacy officer: Seongsik Kim, sskplay — dev@sskplay.com

You may also report or seek advice about privacy infringement from these Korean authorities:

• Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr, +82 118
• Personal Information Dispute Mediation Committee: www.kopico.go.kr, +82 1833-6972
• Supreme Prosecutors' Office Cyber Investigation: www.spo.go.kr, +82 1301
• Korean National Police Agency Cyber Bureau: ecrm.police.go.kr, +82 182

11. Changes

We announce changes on this page at least 7 days before they take effect (30 days for changes that reduce your rights).