Privacy policy
Updated
This page says what Best Crash Games records when you use the site, why, for how long, and who else handles it. "We" is Best Crash Games.
In short
- You need no account, and the public pages set no cookies.
- Page views are counted by our host's analytics, without cookies and without a profile of you.
- The site has no advertising trackers. Every script, font and image a page loads comes from the site's own address.
- We do not keep your IP address in our database. To count a demo play once, the site keeps a salted hash made from it, for three days at most.
- To decide whether a Play button shows a casino, the site reads the country your request comes from. It does not store it.
- What you send us through a form is kept so that we can deal with it.
- Demos and links lead to other sites, which follow their own rules.
Who is responsible
Best Crash Games runs this site and decides what it records. For any question or request about your data, use the contact page.
When you visit
Every request your browser makes to the site goes to our hosting provider, Vercel. To answer, it needs your IP address, and it receives the usual technical details with it: the address of the page, the time and your browser's user agent. Vercel keeps logs of requests. The logs it shows us go back between one hour and 30 days, depending on our plan with Vercel; what it keeps for its own purposes is in its privacy notice, linked below. We use these logs to find faults and to stop abuse.
The site has no advertising trackers, and everything a page needs is served from the site's own address over an encrypted connection.
Search terms are used to find matching games and studios. We keep no record of them. When a search travels to the site it is part of an address, and addresses appear in the host's logs.
Your country
The lists are the same for everyone. Only some Play buttons differ by country: where a casino pays to be shown for a game in certain countries, a visitor from one of them gets Play opening that casino instead of the demo. To choose, the site reads the country that Vercel works out from your IP address and passes along with each request, as a two-letter code. The site uses it for that one answer. It does not store it, sets no cookie for it and does not combine it with anything else. Vercel keeps copies of pages per country so that the next visitor from the same country gets one faster; these copies say nothing about who asked.
The site does not ask your browser for your location.
Counting visits
To see which pages are read, we use Vercel Web Analytics. When a page opens, a small script from the site's own address tells Vercel that it was viewed. It sends the page's address, the time and, when you arrive from another site, the address of the page you came from. Search terms and the codes in emailed links are removed from the address before it is sent; campaign tags such as "utm_source" stay.
From the request itself Vercel notes your country, region and city, the kind of device, and the name and version of your browser and operating system. It tells one visitor from the next by a hash made from the request and discards it after 24 hours. Vercel says that a counted view is not tied to an IP address or to a person; its page on privacy in Web Analytics has the details.
The script sets no cookie and writes nothing to your browser's storage. What we see are totals: how many visitors and views a page had, where visits came from, and from which countries and devices. Vercel shows us these figures for between one month and two years, depending on our plan with it, and may keep them longer itself.
Counting demo plays
The site counts how often each game's demo is started, so it has to tell one visitor from the next without knowing who anyone is. When you start a demo, your browser tells the site which game it was. The server then:
- makes two salted hashes, one from your IP address, your browser's user agent and the date, and one from your IP address and the date alone;
- stores the game, the two hashes and the time, so that the same visitor counts once per game per half hour and one network address cannot add more than a few plays;
- adds one to the game's total for that hour.
The IP address and the user agent themselves are not stored. A hash is a one-way code: the address cannot be read from it, and it changes every day. A daily clean-up deletes these rows once they are two days old, so none is kept for longer than three days. What remains are play totals per game. They say how often a game was played, not by whom.
Counting views and clicks of ads
Paid placements are counted in the same way. When a placement has been on your screen for a second, and when you click one, the site stores the placement, whether it was a view or a click, the same two hashes and the day. A view or a click then counts once per visitor per day. These rows are deleted within three days too.
Advertisers get daily totals for their placement: views, clicks and the demo plays of their game. They get nothing about single visitors.
Counting visits to casinos
When you follow a link to a casino from the list that Play opens, your browser tells the site which casino it was. The site then stores a salted hash of the kind described above, so that one visitor counts once per link per day, and adds one to that casino's total for the day. The hash is deleted within three days. The totals say how many visitors went to a casino, not who they were. A casino that pays for its place gets these totals and nothing about single visitors.
The casino's link may carry a code that tells the casino the visit came from this site. It carries nothing about you.
Limits against abuse
To stop floods of requests, the site counts how often some things are done from one address: sending a form, asking to upload images, counting plays, ad events and visits to casinos. The counters are kept under a salted hash of the IP address (for forms, also under the visitor hash described above), never under the address itself. They are deleted within three days.
Requests from software that identifies itself as a crawler or a script are not counted as plays or views.
What you send us
Contact form. Your name, your email address and your message.
Submitting a game. The game's details and images, the studio's name and website, and a contact email address. If we list the game, its details and images become public. The contact address does not: it is kept with the game and, if the studio is new to us, with the studio, where only our administrators see it. Images go from your browser straight to our storage provider, Supabase, into a private folder. When you send the form, the site makes the resized copies it shows and deletes the originals. Originals that are uploaded but never sent with a form are deleted by a daily clean-up, within two days.
Asking for an ad. Your company, your name, your work email address, the game, the placements you want, the start date, the budget and your notes.
What you send is stored in our database, where our administrators read it. If email sending is switched on, they are also told by email. We use it to deal with your request: to answer you, to review and list the game, to arrange the booking. It stays until we delete it; we have set no fixed period. Ask, and we delete what you sent.
Each form carries two hidden fields against spam: one that only bots fill in, and a signed time stamp. Neither identifies you.
We use an email address you give us only to answer you about what you sent: to confirm that a game or an ad request arrived, to tell you our decision on a game, and to reply to your message. We do not add it to a mailing list.
We do not offer a newsletter at the moment. If we start one, it will go only to addresses whose owners signed up and confirmed that through a link sent to the address, and every issue will carry an unsubscribe link. After you unsubscribe, the address is kept, marked as unsubscribed, so that nothing more is sent to it. Ask, and we delete it.
Cookies and browser storage
The public pages set no cookies. Only the sign-in for the site's administrators uses one.
The site asks whether you are 18 or older. If you answer yes, your browser remembers that in its local storage for 30 days, so that you are not asked on every page. If you answer no, that is remembered until you close the tab. The site keeps nothing else in your browser's storage.
Other sites
Demos, studio websites, casinos and the other sites we link to are not part of this site. A casino you open from here is a separate company with its own privacy rules; what you give it when you sign up never reaches us. A demo opens on the studio's site in a new tab or, for some games, in a frame on the game's page that loads only after you press Play. From that moment the studio's servers receive your IP address and can set their own cookies, under their own privacy rules.
When you follow a link from here, the other site learns at most that you came from this site, not which page you were on.
Who else handles data
These companies process data for us, each under its own terms:
- Vercel hosts the site, delivers its pages and counts page views. It receives every request, as described above. Our server code runs in Dublin, Ireland; pages are also delivered from Vercel's servers in other countries. See Vercel's privacy notice.
- Supabase stores the site's database and its images in a data centre in Ireland (region eu-west-1). See Supabase's privacy policy.
- Resend sends the site's emails, when email sending is switched on. It receives the address and the text of each email. An email that tells our administrators about a form includes what was typed into it. Resend processes this data in the United States. See Resend's privacy policy.
Nothing on the site passes your data to advertisers or data brokers.
Your rights
Wherever you live, you can ask us:
- what we hold about you, and for a copy of it;
- to correct it or to delete it;
- to stop using it in a way you object to.
Send the request through the contact page and say which email address or submission it is about. We may need to check that the request comes from you.
Most of what the site records cannot be traced to a person: the hashes described above are not linked to a name or an email address. In practice a request covers what you sent us through a form.
Depending on where you live, you may also have the right to complain to your data protection authority.
Children
The site is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has sent us something, tell us and we delete it.
Changes to this page
When this page changes, the date under its title changes with it.