Privacy Policy

Effective July 20, 2026 · PointlessGames.lol

PointlessGames.lol ("we", "us", "the arcade") is a collection of deliberately pointless browser games. We collect as little about you as we can get away with. This page explains what we do collect, why, and what we do with it.

What we collect

Account data. If you register, we store your email address, a display name, and a password hash (or a link to your Google or Discord account if you sign in that way — we never see those passwords). Playing as a guest requires no account at all.
Gameplay data. Scores, game submissions (drawings, words, and similar creations you make in games), likes, and in-game progress, linked to your account if you have one.
Approximate country. Leaderboards may show a country flag derived from your IP address at the moment a score is submitted. We store the country code, not the IP.
Payment data. Pointless Plus subscriptions, coin packs, and tips are processed by Stripe. We never see or store your card number — only your subscription status, purchase history, and Stripe customer reference.
Payout details (affiliates only). If you take part in the referral program, we store the payout method you choose and its destination — a PayPal email address or a Cash App $cashtag — so we can actually send you your commission. Only affiliates provide this.
Usage analytics. We record page views to see which games people play: the page path, the referring site's domain, any utm_source tag, and a visitor fingerprint. That fingerprint is a SHA-256 hash of your IP address and browser user-agent, salted and mixed with the current date, then truncated — your raw IP address is never stored, and because the hash includes the date it changes every day, so we cannot follow one visitor across days. Analytics rows are deleted after 180 days.
Messages. If you use the contact form, we receive your email address and message.

Cookies

We use strictly necessary cookies only: one to keep you signed in, standard framework cookies that make the site function, and — if you arrive through a friend's referral link or a promo-code link — a small attribution cookie (pg-ref or pg-promo) that remembers who sent you for 30 days, so they get credited when you sign up. Our analytics are cookieless. There are no advertising cookies, no tracking pixels, and no third-party analytics scripts.

What we do with it

We use your data to run the arcade: signing you in, saving scores, showing leaderboards, processing Pointless Plus perks and coin purchases, crediting referrals and paying affiliate commissions, understanding which games get played, sending account emails (confirmation, password reset), and the occasional weekly recap email to registered players. We do not sell, rent, or share your personal data with anyone, except the service providers that make the site work (our hosting provider, Stripe for payments, and Resend for sending email) and the payment service you choose for affiliate payouts (PayPal or Cash App), which necessarily receives the handle you gave us.

Your rights and your data

You can download or permanently delete your personal data at any time from Account → Personal data. Deleting your account removes your personal data; anonymous leftovers (like an unattributed leaderboard entry) may remain. Depending on where you live (for example the EU/EEA under GDPR or California under CCPA) you may have additional rights — to exercise them, use the contact form.

Deleting your account and data

Log in at pointlessgames.lol — with your email and password, or the Google or Discord login you signed up with.
Open the user menu (top right) and choose Account → Personal data.
Click Delete and confirm. Your account and all data associated with it — scores, streaks, creations, profile, everything — are permanently deleted immediately.

Can't log in? Send a message from the contact form using the email address on your account and we'll delete it for you.

Children

The arcade is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a meaningful way, we'll update the effective date above and note it on the site. Continued use of the arcade after a change means you accept the updated policy.

Questions? Use the contact form — a human will answer. See also our Terms of Service & EULA.