Privacy

What stays on your device

Paperbox asks you to sign in when you first open it, so your work can sync between your devices and so games can be published and shared.

A project you have not published stays on your own device. Paperbox does not have it, and deleting your account does not touch it.

Paperbox does not sell your information and does not run advertising. The app records a small number of anonymous events, such as that it was opened, that a game was created, or that one was published, so we can see where people get stuck. They are tied to a random identifier for the app on your device, never to your account, and they are never used to advertise to you or shared with anyone for that purpose.

What we store when you sign in

• Your email address. If you signed in with Google or Apple, we also get the account identifier they give us. We never receive your password.
• Your studio: the handle, display name, and anything you optionally add such as a bio, location or links.
• Games you publish: the files that make up the game, its title, tagline, description, cover, tags, and the date.
• Things you do on the site: reactions you leave, and the play length you report on a game.

Only published games reach us. Projects you have not published stay on your own device, including the art and sound you imported into them.

What is public

Your studio handle and display name, and any game you publish, are public. A published game gets a permanent link that anyone can open without an account. Your email address is never shown publicly.

Who else handles it

Five companies, each doing one job. We do not send your data anywhere else.

• Supabase: accounts, sign-in and the database.
• Cloudflare: storage for the files in published games, and the domain.
• Vercel: runs the website and keeps short-lived server logs, which include IP addresses.
• Resend: delivers the emails we send you, such as confirming your address.
• PostHog: the anonymous usage events described above.

If you sign in with Google or Apple, that sign-in happens on their systems under their privacy policies. We receive only the identifier and email address they return.

How long we keep it

Until you delete it. Published games and their files stay while the game is published; deleting your account removes them. Server logs are short-lived and managed by Vercel.

Deleting your data

You can delete your account at any time, from Settings in the app or at paperbox.games/account/delete. It removes your studio, every game you published, the uploaded files and your sign-in.

Every link to your games stops working when you do this, for everyone, permanently. That is the trade and it is worth knowing before you press it.

If you would rather ask us to do it, or want a copy of what we hold, email hello@paperbox.games.

Children

Paperbox is not directed at children under 13, and you need an account only to publish. If you believe a child has given us an email address, write to us and we will remove it.

Changes

If this page changes in a way that matters, the date at the top changes with it.