This policy covers the AIS GAMES website at ais.games (including the browser versions of our games that run on it). Each mobile app also has its own policy, listed in section 6, because what an app does with data depends on the app — for example, whether it shows ads.
Who we are. AIS GAMES is a game studio in Istanbul, Türkiye, and the data controller for this website. Questions or requests: hello@ais.games.
1. What the website does not do
- No accounts, sign-ups or log-ins.
- No analytics, tracking pixels, fingerprinting or advertising on the website.
- No selling or sharing of personal data.
- No tracking cookies. The one cookie we set is described in section 3.
2. Likes and dislikes
Each game page has a like and a dislike button, counted on our server so everyone sees the same totals. To allow one vote per visitor and to stop automated abuse we store, per game:
- A one-way keyed hash of your IP address (HMAC-SHA-256 with a secret key; for IPv6 the /64 network prefix). Your IP address itself is never written to our database, and the hash cannot be turned back into it without the key.
- Your vote (like or dislike) and when it was last changed.
Your vote stays until you take it back — press the lit button again and its record is deleted. Request counters used for rate limiting are stored the same way (keyed hashes, no IP addresses) and are deleted after 24 hours. Because we never know who is behind a hash, several people sharing one network share one vote.
3. Cookies and browser storage
ais_csrfcookie — a random value set when a game page loads its vote counts or the contact page loads its form. It only protects the vote buttons and the contact form against cross-site request forgery: a vote or message is accepted only with a token derived from it. It is sent only to our endpoints under/api/, cannot be read by scripts (HttpOnly, SameSite=Strict), is not linked to you, and expires after one year.- Local storage — your theme choice (
ais-theme), and in the browser versions of our games your progress and settings. This stays in your browser; we never receive it. Clearing your browser's site data removes it.
4. Server logs and hosting
The site is hosted on Railway. Like any web server, ours and Railway's infrastructure record standard request information — IP address, time, page requested, browser type — to keep the service running and secure. These logs are kept only as long as our hosting provider retains them and are not used for anything else.
5. Third parties
- Google Fonts. Our pages load their typeface from Google Fonts (fonts.googleapis.com, fonts.gstatic.com), so your browser contacts Google, which receives your IP address. See Google's privacy policy.
- Store links. Links to Google Play or the App Store take you to those stores, which have their own policies.
- Contact form. What you write in the form on our contact page — your name, email address, topic and message — is sent through our email provider to the team address for that topic, with your address as the reply-to. It is not stored in our database; we keep the email only as long as needed to answer you. To stop abuse the form counts sends per visitor the same way as votes (keyed hashes, deleted after 24 hours). If sending is unavailable, the form opens your own email app instead.
The browser versions of our games show no ads and load no advertising or analytics code.
6. Our mobile apps
Each app's policy explains exactly what that app stores and which services it uses:
- Troll Warrior — privacy policy
- Cat Kingdom — privacy policy
- Fall Down — privacy policy
- Float Up — privacy policy
7. Your rights
Depending on where you live — for example under the EU and UK GDPR, Türkiye's KVKK (Law No. 6698) or US state privacy laws — you may have the right to access, correct or delete personal data about you, to object to or restrict its processing, and to complain to a data protection authority. Our legal basis for the vote hashes and logs is our legitimate interest in running a fair, secure website.
Since we hold no names, emails or IP addresses, the quickest way to delete your vote is to press the lit button again. For anything else, write to hello@ais.games and we will answer within 30 days.
8. Children
The website collects no personal information from anyone, children included. Our games are made for a general audience; see each app's policy for its age rating and ad settings.
9. Changes
When this policy changes we update it on this page and change the date at the top.