FOR PARENTS & GUARDIANS

Privacy policy.

DRAFT — FOR REVIEW. NOT A FINAL POLICY.

Prepared October 23, 2026. Before release, verify each game’s SDKs, ad settings, data flows, retention periods, operator contact details, and applicable consent requirements. This draft does not certify COPPA compliance.

Who we are and what this covers

Second Wave Arcade is a DBA of Spocrates LLC, Texas. This draft covers this website and Chute Happens, Creek Crawl, Dusk Protocol, Cattle Panic, and Jester Drop. Contact: support@secondwavearcade.com (placeholder pending verification). TODO before publication: add the operator’s mailing address and telephone number.

No accounts

Our games do not require a Second Wave Arcade account. Scores and preferences may be stored on your device. Device storage can be removed by deleting the app or clearing the relevant browser data. These actions may erase progress.

This website

This static website contains no advertising SDKs, analytics scripts, tracking pixels, or account forms. Our hosting provider may process technical request information, such as IP address and browser details, to deliver and secure the site. TODO: identify the selected host and confirm its log retention and processing terms.

Advertising in our games

Some games use Google AdMob to show ads. The advertising SDK may process IP addresses, device or app identifiers, diagnostic information, and ad interaction data to deliver ads, prevent fraud, and measure performance. Actual collection depends on the game, SDK version, consent choices, and configuration. No account does not mean no data collection.

For child-directed games, the intended configuration is child-directed treatment, age-appropriate ads, and no personalized advertising to children. TODO: verify these settings and every mediation partner in each production app before release. Non-personalized ads can still involve data processing and may require consent under applicable law.

Learn more at Google’s Privacy Policy and how Google uses information from apps and sites. TODO: disclose all other SDK providers, their contact details, data practices, and any international transfers.

Children’s privacy

Our mission includes games for children. We do not ask children to provide names, email addresses, photos, precise location, or other personal information to play. We intend to limit collection to what is necessary for the service and permitted by law, including limited internal operations where applicable.

COPPA may apply to information collected by third parties on our behalf, including persistent identifiers. Where legally required, verifiable parental consent must be obtained before collection, use, or disclosure. A child’s access must not depend on providing more information than reasonably necessary. This draft is not a substitute for implementing those protections.

Parents’ choices and requests

Parents or guardians may request a description of information collected about their child, review or deletion of information we hold, and a stop to further collection or use. Email the contact above. Please identify the game and describe the request without sending sensitive child information. We may need to verify parental authority using a proportionate method. We will explain any limits where data is held by a provider or cannot be linked to a particular player.

Support and purchases

If you email us, we receive your email address and the contents of your message to answer your request. Support is intended for adults; please do not include a child’s personal details. Where in-app purchases are offered, Apple processes payment. We do not receive your full payment-card details.

Sharing, security, and retention

The intended policy is not to sell children’s personal information or use it for targeted advertising. Service providers may process limited data to deliver hosting, advertising, support, and purchase services; disclosures may also be required by law. We use reasonable safeguards, but no system is perfectly secure.

Information should be retained only as long as reasonably necessary for its stated purpose, then securely deleted. TODO before publication: document specific retention periods or criteria for support messages, hosting logs, and every SDK; confirm deletion procedures and provider contracts. Data must not be kept indefinitely.

Changes and regional rights

We will post the effective date of the reviewed policy here and provide additional notice or obtain consent when required for material changes. Depending on your location, you may have additional privacy rights; contact us to make a request. TODO: confirm regional consent and rights procedures before distribution.

Review references

This draft was informed by the FTC’s COPPA guidance and Google’s publisher policies. Review the actual implementation and current legal requirements before publishing a final policy.