Privacy Policy

Introduction

Emberware ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website and desktop player application.

By using Emberware, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Email address - Used for authentication and account recovery
• Username - Your public display name
• Password - Stored as a secure hash (we never store plaintext passwords)
• Bio - Optional profile information you choose to share

Game Data

When you upload games, we collect:

• Game ROM files (stored securely in cloud storage)
• Game metadata (title, description, category, tags)
• Icon images and screenshots
• Play and download statistics

Usage Information

We automatically collect certain information about your use of the platform:

• Game views and downloads
• Search queries
• Platform access times and frequency
• Device information (operating system, browser type)
• IP address (for security and analytics)

Cookies and Local Storage

We use HTTP-only cookies for authentication and local storage for user preferences (theme selection). These cookies are essential for the platform to function and do not track you across other websites.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Emberware platform
• Authenticate users and secure accounts
• Host and deliver game content
• Display user profiles and game listings
• Analyze usage patterns to improve the platform
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

Data Sharing and Disclosure

Public Information

The following information is publicly visible to all users:

• Username and bio
• Published games (title, description, metadata)
• Game statistics (views, downloads, ratings)
• Account creation date

Service Providers

We use third-party services to operate the platform:

• Cloudflare R2 - Cloud storage for game ROMs and media files
• Fly.io - Hosting for our backend API

These providers have access to your data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Data Retention

We retain your account information and uploaded content for as long as your account is active or as needed to provide you services. If you delete your account, we will remove your personal information within 30 days, except for data we are required to retain for legal or security purposes.

Game statistics and anonymous usage data may be retained indefinitely for analytics purposes.

Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using Argon2id (OWASP recommended algorithm)
• Authentication tokens are transmitted via secure HTTP-only cookies
• All connections use HTTPS encryption
• Database access is restricted and audited
• Account lockout after failed login attempts (5 failures = 15 minute lockout)

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Your Rights

You have the right to:

• Access - View all personal information we hold about you
• Correction - Update or correct your account information
• Deletion - Request deletion of your account and associated data
• Export - Download your uploaded games and account data
• Object - Opt out of certain data processing activities

To exercise these rights, you can manage your account settings or contact us at privacy@emberware.io.

Children's Privacy

Emberware is intended for general audiences. We do not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

Open Source and Transparency

Emberware is open source software. You can review our code, including how we handle your data, on GitHub. We believe in transparency and encourage security researchers to review our practices.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Significant changes will be announced via email to registered users.

Your continued use of Emberware after changes take effect constitutes your acceptance of the revised policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: privacy@emberware.io
• GitHub Issues: Report privacy concerns