Privacy Policy

Introduction

CrownForge LLC ("we," "us," or "our") operates Crowncade (crowncade.com) as part of the CrownForge family of products, which also includes Questwright (questwright.app) and other services. This Privacy Policy explains how we collect, use, and protect your personal information when you use Crowncade.

We believe in transparency. We collect only what we need to provide our Service, we don't sell your data, and we'll tell you exactly what happens with your information.

Information We Collect

Account Information

When you create a CrownForge account, we collect:

• Username — Your unique login identifier
• Display Name — How your name appears to others
• Email Address (optional) — For account recovery
• Password — Stored securely using industry-standard hashing (bcrypt); never stored in plaintext

OAuth Login Data

If you sign in with Discord, Google, or Twitch, we receive:

• Discord — Your Discord ID, username, and avatar URL
• Google — Your Google ID, email, name, and profile picture
• Twitch — Your Twitch ID, username, and profile picture

We only request the minimum permissions needed. We do not access your friends lists, server memberships, messages, or any other data beyond basic profile information.

Profile and Gameplay Data

When you use Crowncade, we collect and store:

• Profile Data — Your public profile information including display name, level, XP, and achievement showcase settings
• Gameplay Data — Which games you play, play session duration, scores submitted, and achievements earned
• Ratings and Favorites — Games you rate or mark as favorites
• Comments and Reviews — Any comments, reviews, or other content you post about games

Uploaded Game Files

If you upload games to Crowncade as a developer or contributor, we store:

• Game Files — HTML, JavaScript, CSS, images, audio, and other assets that comprise your game
• Game Metadata — Title, description, genre, content rating, tags, and other information you provide about the game
• Upload History — Timestamps of submissions and updates

Information Collected Automatically

• Session Data — We use a session cookie to keep you signed in. This contains a random token linked to your account and expires after 30 days of inactivity
• Log Data — Our servers may automatically log standard request information such as IP address, browser type, referring page, and timestamps. This data is used for security monitoring and debugging and is not linked to individual user profiles

Information We Do NOT Collect

• We do not use tracking cookies, advertising pixels, or third-party analytics services
• We do not sell, rent, or share your personal information with advertisers
• We do not collect payment or financial information (Crowncade is currently free)
• We do not track your activity across other websites

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Track gameplay progress, scores, achievements, and XP
• Display public leaderboards and player profiles
• Host and serve games uploaded by developers
• Communicate with you about your account or the Service
• Detect and prevent fraud, cheating, abuse, and security incidents
• Improve the Service based on how it is used
• Comply with legal obligations

We do not sell your personal information. We do not share your data with advertisers or third-party marketers.

Information Sharing

We do not sell your personal information. We may share information only in these limited circumstances:

• Public Profiles — Your username, display name, level, achievements, and high scores are visible to other users on public leaderboards and profile pages
• Game Analytics (Developers) — If you upload a game, other users can see public statistics about your game such as play counts, ratings, and favorites. We do not share individual player identities with game developers
• Legal Requirements — We may disclose information if required by law, regulation, legal process, or governmental request
• Safety — We may share information when we believe in good faith that disclosure is necessary to protect the rights, safety, or property of CrownForge LLC, our users, or the public

Third-Party Games and Embedded Content

Crowncade hosts browser-based games that may be created by third-party developers. These games run in your browser and may execute JavaScript code.

While we review and sandbox uploaded games, we cannot guarantee that third-party game code does not collect data or behave in unexpected ways. We take the following precautions:

• Games are served in sandboxed iframes where technically feasible
• Games are reviewed before publication
• Games that attempt to collect user data, set tracking cookies, or communicate with external servers without disclosure are prohibited and will be removed

If you believe a game on Crowncade is collecting data inappropriately, please report it to [email protected] immediately.

Third-Party OAuth Providers

When you sign in via Google, Discord, or Twitch, those services share limited profile information (name, email, user ID) with us per their own privacy policies. We only use this information to create and manage your Crowncade account. We do not access your contacts, messages, or other data from those services.

• Discord Privacy Policy
• Google Privacy Policy
• Twitch Privacy Notice

Cookies

Crowncade uses essential cookies only:

• Session cookie (crowncade_session) — Maintains your login state. This is a functional cookie required for the Service to work. It contains a cryptographically random token and expires after 30 days of inactivity
• OAuth state cookies — Temporary cookies used during the login process for security (CSRF protection). These are deleted immediately after login completes

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Passwords are hashed using bcrypt and never stored in plaintext
• Session tokens are cryptographically random
• CSRF protection on all form submissions
• HTTPS encryption for all communications
• OAuth tokens are securely managed and not stored long-term
• Database access restricted to essential services only
• Uploaded games are scanned and reviewed before publication

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify affected users promptly.

Data Retention

We retain your data for the following periods:

Data Type	Retention Period
Account information	Until you delete your CrownForge account, or 6 months of inactivity
Gameplay data (scores, achievements, XP)	Until you delete your account
Uploaded game files	Until you remove the game or your account is deleted
Comments and reviews	Until you delete them or your account
Server logs (IP, browser info)	90 days
Anonymized aggregate statistics	Indefinitely (cannot identify you)

Account Management and Deletion

You can manage your CrownForge account, view your personal data, request a data export, and permanently delete your account at any time through the CrownForge Account Portal.

Because your CrownForge account provides single sign-on (SSO) access to all CrownForge products, deleting your account affects all services. When you delete your account:

• Your CrownForge account and access to all CrownForge services is permanently removed
• Your Crowncade profile, scores, achievements, and gameplay history are permanently deleted
• Games you uploaded will be removed from the platform
• Your comments, reviews, and other user-generated content are deleted
• Any data stored in other CrownForge products (e.g., Questwright characters, business portal) is also permanently deleted
• We will complete account deletion within 30 days of your request
• We may retain anonymous, aggregated statistics (e.g., "X games were played") that cannot identify you

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and personal data
• Data Portability — Export your data in a portable format
• Object / Restrict — Object to or restrict certain processing of your data
• Withdraw Consent — Unlink OAuth accounts or close your account at any time

You can exercise many of these rights directly through the CrownForge Account Portal. For requests that cannot be handled through the portal, contact us at [email protected].

Children's Privacy

Crowncade is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information and terminate the associated account promptly.

If you are between 13 and 18, you may use Crowncade with the consent of a parent or legal guardian. Parents and guardians are responsible for monitoring the content their children access and the information they provide.

If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by:

• Posting the updated policy on this page with a new effective date
• Displaying a notice on the Service when significant changes are made

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Jurisdiction

CrownForge LLC is operated from Pennsylvania, United States. By using our Service, you consent to the processing of your data in the United States. If you are accessing from outside the US, please be aware that your data may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Contact