Notice version 2026-10-22-v5
One notice for Garcadium
This notice covers the Garcadium portal and all games offered through it. Each game has its own save records; an account connects those records to the same player.
Account and gameplay information
For players aged 13 and over, we store an account email, an age band rather than a birth date, a chosen player name, a securely hashed password, verification status, and gameplay records. We use this information to provide account access, restore progress, operate multiplayer features, and protect the service.
- Progress and achievements: stages reached, checkpoints, objectives, scores, results, play time, and completion records.
- Virtual items and customization: earned game currency, collected or equipped items, inventory, character appearance, and preferences.
- Player creations: named saves, builds, worlds, layouts, and other content created using a game’s tools.
- Multiplayer sessions: room or server selection, player position, actions, and shared activity needed to run a session.
The records stored depend on the features you use. Each game page explains its controls, save features, and any temporary session data.
Game saves do not contain your account password, email, or parental-consent document. Games receive a player identifier, player name, child-profile status, and a limited game session so they can load and save the correct records.
Browser storage and connection information
Cookies keep you signed in to the portal and, where applicable, connect game sessions. Games also use browser storage for guest saves, local account copies, pending changes, preferences, and short-lived connection information. Confirmed account saves are stored separately from the running game server so they can be restored on another device. Clearing browser site data removes local copies and can remove changes that have not reached Garcadium. Save-conflict backups remain in that browser until its site data is cleared. Security logs may contain IP addresses, request details, and technical error information.
Aggregate audience and game insights
We use privacy-safe aggregate measurements to understand visits, page performance, game launches, broad traffic sources, device classes, approximate countries, account conversion, engagement ranges, save reliability, and game milestones. Garcadium Insights does not store player names, email addresses, save contents, room codes, exact ages, chat content, or raw IP addresses. It uses a temporary tab-session value and a one-way aggregate counting sketch rather than a persistent visitor profile. Global Privacy Control and browser Do Not Track signals disable the browser event script. Cloudflare may provide aggregated traffic, performance, and security measurements for traffic passing through its network.
Children under 13
A parent or legal guardian must create and verify an adult account, read this notice, return a signed consent form, and receive approval before a child profile is activated. We do not ask children for a real name, birth date, email, photo, or location. Each child receives a generated player name, a login ID, and a password managed by the parent. Other players may see that generated name, avatar or equipped items, shared builds, and live game actions.
The child profile stores gameplay records and necessary session identifiers. Signed consent documents are encrypted and accessible only to the parent and authorized administrators. Approval requires human review; an email verification or checkbox alone does not activate a child profile. Online chat is unavailable to child profiles. We do not use child data for targeted advertising or sell child data. Do not put personal information into player names, build names, or invitations.
Multiplayer, friends, chat and public creations
Games with multiplayer features process shared matches, worlds, or visits. Other players in the same session can see your player name, appearance, shared creations, and game actions where those features are available. Some games let players aged 13 and over send friend requests, see an accepted friend’s current online game, publish creations for public discovery, or report a creation, player, or chat message. We retain accepted and pending friend relationships, published snapshots, and reports so these features and community moderation work. Presence and invitations expire and are not a permanent activity history. Where text chat is offered, it is filtered, available only to players aged 13 and over, and sent to players in the same server or visit room. Ordinary room chat is temporary. When a message is reported, its text may be retained with relevant player and game identifiers, the report reason, review status, warnings, bans and appeals for community moderation. Filtering cannot catch every inappropriate message. Never share contact details, passwords, or other personal information in chat. Each game page describes the ways you can play and share with others.
Hosting and service providers
Bluehost hosts the WordPress portal and shared Garcadium account services. Render hosts the games and multiplayer servers; games can use shared Garcadium storage on Bluehost for confirmed gameplay records, player creations, relationships, reports and moderation state. Render processes a temporary runtime copy and synchronizes confirmed changes to Garcadium. Cloudflare provides DNS and, for traffic using its proxy, security and delivery services. These providers process requests, network identifiers, session information, and technical logs to deliver and protect the service. Our email delivery services handle account verification and password-reset messages. Account passwords and parental-consent documents are not sent to game servers.
Your controls
Parents can review and download a child’s saved data, reset access, or revoke consent and delete the child profile in Family settings. Revocation prevents further child-account access and saving; connected games check account eligibility during requests and at intervals. An offline device cannot receive a revocation immediately. Players can manage supported friendships, unpublish or delete their own creations, export supported game-service data, delete supported game-service data, and report a creation, player, or message within the relevant game. You can clear local game copies through your browser’s site-data settings. Contact the operator to review, correct, or delete account information. We will seek updated parental consent before making material changes to the practices covered by that consent.
Retention
Account gameplay records remain while the account is active to let returning players recover progress. Pending consent requests and documents expire after 30 days. Approved consent evidence remains while the child profile is active to record parental authorization. A child profile with no sign-in or connected-game activity for 12 months is deleted with its saved data and consent document. Deleting a parent account also deletes its child profiles. Revocation removes the consent document and stored child gameplay data; the minimal revocation record expires after 30 days. Expired handoff and request records are removed daily. Multiplayer rooms, shared terrain, and visit links are separate from account saves and may expire or reset. Hosting backups may retain deleted records until the provider’s backup cycle expires; they are not used to restore revoked access.
Operator and questions
Garcadium
[email protected]
13 Amberwood Crt, St. Thomas, Ontario, N5P 4M4, Canada
+1 416-737-9443
Moderation records
Reports, relevant reported messages, moderation decisions and appeals remain until reviewed and deleted by the operator, including records needed to investigate abuse, enforce decisions and handle appeals. Contact the operator to request review, correction or deletion of these records.