Privacy Policy
Effective: October 24, 2026
Meep Games LLC ("Meep Games", "we") publishes games and operates Meep ID. This policy covers Meep ID and its account site at account.meepgames.com, our games and our websites (together, the "Services").
1. Information we collect and why
1.1 Meep ID
When a game creates a guest Meep ID, we store its name (a nickname and tagline) and an account number. If you add an email address and password, we also keep the email address, whether it is verified, and a password hash (a one-way code from which the password cannot be recovered). We keep a history of the games you use with your account. Adding a verified email address and password, or linking a sign-in provider or CrazyGames account, is optional; without one of these, you cannot recover the account once its sign-in on your device ends.
1.2 Sign-in providers
If you sign in with or link Google or Discord, we keep your user ID and the name or username it reports. We also keep the email address it reports if the provider has verified it. We use this to sign you in, to display linked accounts and to recognise when the provider's email address matches the one on your Meep ID.
Meep ID's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you play one of our games on CrazyGames, which Maxflow BV operates, we receive and keep your CrazyGames user ID and username to sign you in and display the linked account. Your CrazyGames username may become your name, replacing your existing name if you link your CrazyGames account to a Meep ID you already use, and so appear on leaderboards (section 1.4). A CrazyGames account cannot be unlinked and is erased with your Meep ID.
1.3 Sign-in records
We keep records of your sign-ins and of security events on your account, including account changes and unsuccessful sign-in attempts, with their dates, your IP address and your browser or device description. We use them to secure your account, detect stolen sign-ins, investigate abuse and let you review and end your sessions. We keep short-lived records of pending sign-ins and account requests to complete them and prevent abuse.
1.4 Stats, leaderboards and chat
Our games send us player stats, which we rank into leaderboards. Your leaderboard entries show your name, account number, score and rank to other players of that game, including players using a guest Meep ID.
Some of our games offer text chat in a match. We store the messages you send on our servers. The other players in the match can read them, and our staff may review them to handle reports and enforce our Terms of Service.
1.5 Analytics
Our games report gameplay activity, including virtual items and currency but not real money, so that we can see where players struggle or stop. They also report performance information. An event identifies you only by a hash of your account number. It may also include session, platform and software-version information and, for a browser game, the website in which the game is embedded.
Where we measure visits to our websites, we record the pages you view, referring websites and campaigns, links you follow to other websites, interactions and performance information. Each page view carries a visitor ID based on your IP address and browser description; it changes each day and differs between our websites. Some websites may instead use a random identifier stored on your device (the "stored visitor ID") to recognise your return visits (section 2). We keep only a hash of it and the first and last day it was seen. We use the stored visitor ID only to measure each website's audience. We do not link it to your Meep ID or to other information that identifies you, and we do not link it across our websites.
Page views and events sent from your device also include information about your device, browser and network, and your language and time zone. To each, we add the country, region and city of your connection, which Cloudflare derives from your IP address. We do not collect your precise location. We use your IP address to limit repeated requests and to derive the visitor ID; neither it nor your full browser description is stored in analytics records.
Websites and browser games may send us error reports with diagnostic information, carrying the same identifiers as their page views or events. We shorten error messages and filter out information likely to identify you, such as email addresses.
We use analytics to produce statistics about how the Services are used, to keep our games and websites working on the devices people use and to find and fix faults. We do not use analytics to find out who you are, to make decisions about you or for advertising.
1.6 Purchases
If you buy items, Apple, Google or Stripe takes payment and tells us what you bought so that we can deliver it. We keep a record of what you bought and when, with the provider's transaction identifier. We never see or store your card number.
1.7 Email and correspondence
We email you to verify an added email address, to reset your password at your request, to answer correspondence and to send account notices, such as the reasons for an enforcement decision or changes to our Terms of Service or this policy. We do not send marketing communications.
1.8 Server logs
Our server logs record what was requested, when and with what result. Logs of the account site and of the service our games connect to include your IP address; logs of analytics collection do not. Logs of account activity and of requests from game servers may also include your account number and a shortened form of your email address.
1.9 Legal grounds
Operating your account, including sign-in, stats, leaderboards, purchases and the verification, password-reset and account-notice emails in section 1.7, is performance of our contract with you, as is providing chat. Reviewing chat messages to handle reports and enforce our Terms of Service, and keeping them until a report or review is resolved, rests on our legitimate interest in protecting players. Sign-in records, server logs and analytics rest on our legitimate interests in securing and improving the Services. We set and use a stored visitor ID with your consent if you are in the United Kingdom or your country cannot be determined, and on any website that asks through its own consent tool. Elsewhere, the stored visitor ID rests on our legitimate interest in measuring each website's audience. Answering correspondence rests on our legitimate interest in assisting you, and notices of changes to this policy on our legitimate interest in keeping you informed. Retaining purchase records, and keeping or disclosing information where the law requires it, rest on our legal obligations. For people in the European Economic Area, these are obligations under the law of the European Union or its member states; for people in the United Kingdom, obligations under UK law. Complying with other legal obligations rests on our legitimate interest in doing so. Disclosing information to protect the safety or rights of players or the public, or transferring it with our business, rests on our legitimate interests. Keeping leaderboard entries after you delete your account rests on our legitimate interest in keeping leaderboards complete. Keeping records of staff actions and of virtual currency and items after you delete your account rests on our legitimate interests in accounting for moderation decisions and preventing abuse. You may object to processing based on our legitimate interests; see section 7.
2. Cookies and device storage
The account site sets only the cookies it requires. The sign-in cookie lasts 7 days and is renewed with use. The others serve security and navigation and last for the browser session or up to 10 minutes. There are no advertising or third-party cookies. For Meep ID, our games store only your sign-in and account information on your device. Analytics uses no cookies and stores nothing on your device other than a website's stored visitor ID or a record that you refused it.
A website that uses a stored visitor ID (section 1.5) keeps it on your device for 390 days from when it is set; your visits do not extend this. If you reject it, the website instead stores your refusal on your device for 180 days. When either period ends, the rules below apply again. On a website that uses our consent notice, the country of your connection decides when the ID is set:
| Where you are | When the stored visitor ID is set |
|---|---|
| United Kingdom, or country unknown | Only after you accept it in the notice |
| European Economic Area | On your first visit, with a notice on each page until you accept or reject it |
| Elsewhere, including Switzerland | On your first visit, without a notice |
A website that uses its own consent tool instead of our notice sets the ID only after you accept it in that tool. Each of our websites that uses a stored visitor ID provides a privacy choices link, which reopens our consent notice or the website's own consent tool. Rejecting deletes the ID from your device, and later visits are not linked to earlier ones. Information already collected expires as set out in section 5. Clearing the website's data in your browser deletes the ID and any recorded refusal, so the rules above apply again on your next visit.
3. Recipients
The following providers process your information on our behalf, under contracts requiring equivalent protection:
- Hetzner, a German company, runs our software and stores server logs and analytics data in Finland.
- PlanetScale, a United States company, stores accounts, sign-in records, stats and leaderboards in Germany.
- Cloudflare, a United States company, carries all traffic to our servers through its global network, sees your IP address and can read the information in that traffic. It also supplies the approximate location of each connection, delivers our email and stores our analytics backups.
- Hetzner and the United States companies Vultr and Linode run the game servers that host matches in several countries. These servers see your IP address and the information your game sends during a match.
- Typesafe, a United States company, checks names against our naming rules: when you change your name, we may send the proposed name to Typesafe.
The sign-in providers in section 1.2 and the payment providers in section 1.6 are independent businesses with their own privacy policies. Sign-in providers learn that you signed in to Meep Games. Game portals that host our games, such as CrazyGames, are likewise independent and may collect information when you play on their websites. Other players see your leaderboard entries and the chat messages you send in their match (section 1.4).
We may also disclose information where the law requires it or to protect the safety or rights of players or the public. If our business is sold or merged, your information may be transferred with it, and this policy continues to apply.
4. International transfers
Meep Games is a United States company. We and our providers may process your information in other countries, including the United States. Where the law of the European Economic Area, the United Kingdom or Switzerland requires safeguards for such transfers, we rely on standard contractual clauses or on our providers' certification under the EU-US Data Privacy Framework, its UK Extension or the Swiss-US Data Privacy Framework. Email us for a copy of the safeguards that apply.
5. Retention
| Information | Retention period |
|---|---|
| Account information erased on deletion (section 6) | Until you remove it, or 30 days after you delete the account |
| Sign-in sessions | Game sign-ins expire 30 days after creation or renewal, account site sign-ins 7 days after last use; records are deleted 90 days after expiry or sign-out |
| Records of sign-in attempts and other security events (section 1.3) | 90 days |
| Records of pending sign-ins and account requests, including email verification and password reset links | Up to 24 hours |
| Individual game and website events, including page views and error reports, and the region and city recorded with them | 90 days |
| Hourly analytics summaries, which keep country but not region or city, and daily activity records under the hashed account number | 25 months |
| First day each hashed account number was seen in a game or group of related games | For as long as we operate those games |
| First and last day each hashed stored visitor ID was seen | 13 months after the last visit |
| Stats behind leaderboards | Daily, about 90 days after the day ends; weekly, about 2 years after the week ends; monthly and lifetime, for as long as the game and its leaderboards exist |
| Chat messages | 90 days, or until a report, review or legal requirement concerning them is resolved |
| Records of virtual currency and items you hold, and their transactions | For as long as we operate the Services |
| Records of staff actions concerning your account | For as long as we operate the Services |
| Purchase records | As long as tax and accounting law requires |
| Correspondence | As long as needed to handle it |
| Server logs | Until rotated at a size limit; not archived |
We normally delete information within 2 days of the end of its period. Deleted information may persist for up to 30 days in restricted backups used only for disaster recovery.
6. Deleting your account
You may delete your Meep ID from the account site or, if you cannot sign in, by email.
Deletion disables the account at once and cancels every sign-in. For 30 days you may restore it by signing in again; on CrazyGames, playing one of our games signs you in and so restores it. After 30 days we permanently erase your name, email address, password hash, linked providers, games-played history and sign-in records. Your name becomes available to others. Leaderboard entries remain, attributed to a deleted player. Records of the virtual currency and items you held, and of their transactions, remain under your account number. Records of staff actions concerning your account keep your account number, the name in use at the time and the reason for the action. Your chat messages are erased with the account, except any we must keep for an unresolved report, review or legal obligation, which we erase when that ends. Analytics records remain personal information: they keep the hash of your account number and expire as set out in section 5.
If your account is banned, you cannot delete it from the account site. Email us instead; once we have verified that the request comes from you, we erase the account at once, with no 30-day restoration period.
7. Your rights and choices
On the account site you can change your name, email address, password and linked providers.
Wherever you live, you may ask what information we hold about you and request its correction, deletion or a copy, in a portable format where the law provides for it. You may also ask us to restrict its use, and you may withdraw consent at any time where we rely on it; withdrawing does not affect the lawfulness of processing before you withdrew. We respond within one month or, where the law allows more time, tell you within that month why we need the extra time and when we will respond. Email [email protected] from the address on your account or state your Meep ID's name; we may ask for more information to confirm your identity.
Where we rely on our legitimate interests, including for analytics, you may object at any time on grounds relating to your particular situation. Email us to object; to reject a website's stored visitor ID or withdraw your consent to it, use the website's privacy choices link (section 2).
In the European Economic Area, the United Kingdom or Switzerland, you may also complain to us or to your data protection authority.
We do not sell personal information, share it for cross-context behavioural advertising, or use information about you from other services to target advertising. Global Privacy Control signals do not change how we process your information. The Services do not respond to Do Not Track signals. No other party collects information about your activity across other websites through our websites, the account site or our game servers. Game portals that host our games may do so on their own websites (section 3).
8. Children
The Services are for people aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe we have done so, email us; we will investigate and promptly delete information we should not hold.
9. Security
Connections between you and our servers are encrypted. If a breach affects your information, we will notify you and the authorities as the law requires.
10. Changes to this policy
When we change this policy, we update the date at the top. We will announce changes that affect your information on the account site or by email before they take effect, and seek your consent where the law requires it.
11. Contact
Meep Games LLC, 30 N Gould St, Sheridan, WY 82801, United States. Email [email protected].