18+ UK onlyFree to playNo purchases · No cash prizesCoins have no cash value
VLAD TASOFFNight Arcade
Sign in Join free
Legal

Privacy Policy.

We collect as little as we can, keep it on our own server and never sell it. This policy explains what we hold and why.

Last updated: 20 October 2026

1. Who we are

Vlad Tasoff (vladtasoff.com) is the controller of the personal data described in this policy. For any privacy question or request, email [email protected] or use our Contact page and choose "Privacy question".

2. What we collect

WhenWhat
Browsing & playing as a guestNo account data. Your age confirmation and cookie choice are saved only in your own browser.
Creating an accountFirst and last name, email address, UK phone number, password (stored only as a one-way hash), sign-up date.
Signing in with GoogleYour name, verified email address and Google account ID, shared by Google with your permission. We never see your Google password.
Using your accountCoin balance, XP and level, number of games opened, recently played games, last sign-in time and the time of your last daily bonus.
Contact & Player Care formsYour name, email address, topic and message.
Form logDate, form name, result and email address of each form submission, plus a shortened one-way code made from your IP address. Passwords are never logged.

3. Why we use it (lawful basis)

  • To run your account and the games: to create and secure your account, keep your coins and level, and show your recent games (performance of our terms with you).
  • To answer messages: to reply to you and act on break, restriction or deletion requests (legitimate interests, and our terms).
  • To keep the site safe: to stop abuse and repeated wrong password attempts, and to investigate problems (legitimate interests).
  • To meet legal duties: for example keeping records if the law requires it (legal obligation).

We do not use your data for advertising, we don't sell it and we don't make automated decisions with legal effects about you.

4. How we store and protect it

Everything is handled server-side. Your account is not kept in a public table, in the web page or in your browser, and no database queries are ever shown to visitors.

  • Each account is saved as a private file on our server, in a folder that is blocked from the web. Files are named with a SHA-256 code, not your email.
  • Passwords are stored only as a bcrypt hash created by PHP's password_hash(). Nobody, including our team, can read your password.
  • After five wrong passwords an account is locked for 15 minutes.
  • Sign-in uses a single secure, HTTP-only session cookie that scripts cannot read.
  • The site is served over HTTPS (TLS) and contact messages are sent by our server using encrypted SMTP.
  • Form logs are stored in a private, web-blocked folder.

5. Who we share it with

  • Our hosting provider, which runs the server that stores the site and account files.
  • Our email delivery provider (Brevo), which sends contact form messages to our support inbox.
  • Google, only if you choose "Continue with Google".
  • Authorities, only where the law requires it.

Where a provider processes data outside the UK, we rely on UK-approved safeguards such as adequacy regulations or the International Data Transfer Addendum.

6. How long we keep it

  • Account data: while your account is open. Deleting your account removes its file from our server straight away.
  • Contact messages: up to 24 months, then deleted.
  • Form logs: up to 12 months, then deleted.
  • Browser storage on your device: until you clear it.

7. Your rights

Under UK data protection law you can ask to access, correct, delete or restrict your data, object to how we use it, and receive a copy of it in a portable format. You can delete your account yourself on My account, or ask us through the Contact page. We'll reply within one month.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

8. Children

The site is only for adults aged 18 or over. We don't knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we'll delete it.

9. Cookies

See our Cookies Policy for details of the small number of cookies and browser storage items we use.

10. Changes

We'll update this policy if what we do with your data changes. The date at the top shows the latest version.