Privacy Policy

This policy applies to every IDFire product or service that links to it (the “Services”), including:

• Rad Games titles, including the Puppies vs. Kittens and RiftBleed series;
• our websites, radgames.ai and janusengine.com;
• Janus Studio, its AI creation tools and asset library, and the Janus Arcade;
• the Janus API and MCP server; and
• support, community, marketing and early-access programs that link to this policy.

It does not cover websites or services run by others, even if we link to them, or the games that independent developers build with the Janus Engine; those developers are responsible for their own privacy practices.

Information you give us

• Account information: your email address, display name and password (which we store only as a salted hash). For some games we ask for your age or date of birth so we can apply the right protections.
• Content you create: prompts, text, images, audio and other files you upload; the assets, code and games you generate; titles, descriptions and cover images of games you publish to the Arcade; and your API key labels.
• Purchases: what you bought, when and for how much. Card details go directly to our payment provider, Stripe; we receive only limited information such as the card brand, last four digits and billing country.
• Communications: messages you send to support, legal or privacy teams, survey answers, newsletter or early-access sign-ups, reports you file about other users, and job applications.

Information we collect automatically

• Session and device data: a session identifier stored in our rg_sid cookie, IP address, browser and device type, operating system, language, and crash and performance reports.
• Usage data: which tools and features you use, generation history and credit transactions, plays and likes in the Arcade, and in-game data such as progress, settings and match results.
• Approximate location: your country or region, which we infer from your IP address. We do not collect precise geolocation.

See our Cookie Policy for details about cookies and similar technologies.

Information from other sources

• App stores and platforms (such as Steam, Apple and Google) may share purchase confirmations, platform IDs and, where available, age-range or parental-consent signals.
• Stripe tells us whether a payment succeeded, was refunded or was disputed, and may share fraud-risk signals.
• Other users may include information about you in a report they send us.

Safety, fraud prevention and fair play

To keep the Services safe and fair, we analyze account activity, prompts, generation requests and gameplay for signs of cheating, fraud, abuse of free credits, and content that breaks our Community Rules. This includes automated screening of prompts and outputs.

We use personal information to:

• create and manage accounts and guest sessions, and keep you signed in;
• provide the Services, including running generations, storing your library, publishing Arcade games and processing purchases and credit balances;
• keep provenance records of AI-generated content and mark outputs as AI-generated (see Section 5);
• provide support, answer questions and send service messages such as receipts, security alerts and policy updates;
• understand how the Services are used so we can fix bugs, balance games and improve features;
• detect, prevent and respond to fraud, cheating, security incidents and content that breaks our rules;
• send news and offers, if you have agreed to receive them (you can unsubscribe at any time); and
• comply with the law, enforce our terms and protect the rights and safety of our players, our staff and the public.

We also create aggregated or de-identified information that no longer identifies you, and we use it for analytics and reporting. We do not try to re-identify it.

When you use an AI tool in Janus Studio, through the API or through our MCP server, we send your prompt and any input files you choose to Google’s Gemini API, which generates the result and returns it to us. Google processes this data as our service provider under its terms for paid API services.

• No training on your data. We do not use your prompts, uploads or outputs to train generative AI models, and our agreement with our AI provider does not allow it to use them to train its models.
• Safety screening. Prompts and outputs are screened automatically, by us and by the model provider, to block prohibited content. In limited cases, trained staff may review flagged material to enforce our rules or meet legal obligations.
• Provenance. We embed IPTC metadata in generated images (the Digital Source Type “trainedAlgorithmicMedia”, or “compositeWithTrainedAlgorithmicMedia” for edits) and keep a provenance record of each generation: the tool, the model, the time, a content fingerprint and the account or session that created it. Some model providers also add an invisible watermark, such as Google’s SynthID.

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under California law. We share personal information only as follows:

• Service providers who process it for us under contract, such as hosting, payments and AI generation (see Section 7);
• Our affiliates, including Rad Games and Janus Engine, to provide and support the Services;
• Other users and the public when you choose to make something public, such as your display name, Arcade games, their titles and covers, and play and like counts;
• App stores and platforms when needed to deliver a purchase or feature you use through them;
• Legal and safety disclosures when we believe in good faith that we must comply with law or legal process, or to protect someone’s safety (for example, reports of child sexual exploitation to the National Center for Missing & Exploited Children);
• Business transfers, if IDFire is involved in a merger, acquisition, financing or sale of assets, subject to this policy’s protections; and
• With your consent or at your direction, such as when you connect a third-party tool to your account through the API or MCP server.

These are the main service providers that process personal information for us. We will update this list when it changes.

Each provider may use its own sub-processors and must protect personal information to standards at least as strict as this policy.

Some Rad Games titles, such as the Puppies vs. Kittens series, may be directed to children. We design them to comply with the US Children’s Online Privacy Protection Act (COPPA), the UK Age Appropriate Design Code, the GDPR’s rules for children, and similar laws.

What we do in games directed to children

• Neutral age screening. We ask for age in a way that doesn’t encourage children to give a false age, and we use age or parental-consent signals from app stores where they are provided.
• Minimal collection. For a child under 13 (or the higher age set by local law), we collect only what is reasonably necessary to run the game, such as a device or session identifier, game progress and settings, unless we have verifiable parental consent to collect more.
• Contextual ads only. Where a game shows ads, they are contextual: chosen for the game itself, never for the child’s behavior across apps or sites. We may use a device identifier to deliver an ad and limit how often it appears, as COPPA permits, but never to build a profile.
• No behavioral advertising, no data sales. We do not use children’s personal information for targeted advertising, and we never sell it or disclose it to third parties for their own purposes.
• Verifiable parental consent. Before we collect more personal information from a child (for example, an email address for an account), we notify the parent and obtain verifiable parental consent where the law requires it. If a parent doesn’t respond, we delete the parent’s contact details.
• High privacy by default. Social features, public profiles and chat are off or limited for children by default, and there is no precise geolocation.
• Purchases need a grown-up. In-app purchases are processed by the app store and are subject to its parental controls, such as purchase approval.

Parents’ rights

A parent or guardian can ask to review the personal information we hold about their child, ask us to delete it, and refuse to allow any further collection or use. Email privacy@radgames.ai; we will verify that you are the child’s parent or guardian before acting on the request.

Janus Studio and the Arcade

Janus Studio, Arcade publishing and the Janus API are not directed to children. They are for users aged 13 or older (16 or older in the EEA where local law requires). If we learn that we have collected personal information through them from a child below that age without the required consent, we delete it promptly. RiftBleed titles are made for mature players and are not directed to children.

Retention of children’s information

We keep a child’s personal information only as long as it is reasonably needed for the purpose we collected it for (for example, while the game account is active), and then delete it securely. A child’s inactive game data is deleted after 12 months of inactivity.

Depending on where you live, you may have the right to:

• access your personal information and receive a copy in a portable format;
• correct information that is inaccurate;
• delete your information or your account;
• object to or restrict certain processing, including processing based on our legitimate interests;
• withdraw consent at any time, where we rely on consent; and
• appeal a decision we make about your request.

To make a request, email privacy@radgames.ai from the address on your account. We will verify your identity before acting, and we respond within the time the law requires (usually 30 to 45 days). You may use an authorized agent; we may ask the agent for proof of authority. Using these rights will never get you worse service or prices from us.

You can also: update your account details in your settings; delete files from your library; unpublish Arcade games; revoke API keys; unsubscribe from marketing emails using the link in each email; and manage cookies through your browser.

Residents of California and other states with comprehensive privacy laws have rights to know, access, correct and delete personal information, and to opt out of its sale, sharing for targeted advertising, and certain profiling. We do not sell or share personal information, we do not use it for targeted advertising, and we do not use sensitive personal information (such as account login credentials) for anything other than the purposes the law permits. We honor Global Privacy Control signals as an opt-out request.

We collect these categories from the sources and for the purposes described in Sections 3 and 4, and we keep them for the periods described in Section 12. If we deny your request, you can appeal by replying to our decision; if your appeal is denied, you may contact your state attorney general.

IDFire Technologies Inc. is the controller of your personal information. We rely on the following legal bases:

International transfers. We are based in the United States, and our service providers process data there. When we transfer personal information from the EEA, UK or Switzerland, we rely on adequacy decisions (including the EU-US Data Privacy Framework where our providers participate) or on the European Commission’s Standard Contractual Clauses and the UK Addendum.

Complaints. You can complain to your local data protection authority. We’d appreciate the chance to address your concern first at privacy@radgames.ai.

We keep personal information only for as long as we need it for the purposes in this policy, then delete or de-identify it. How long depends on the type of data:

We protect personal information with administrative, technical and physical safeguards, including encryption in transit, hashed passwords, access controls and monitoring. No system is perfectly secure, so please use a strong, unique password and keep your API keys secret. If we learn of a breach that affects your personal information, we will notify you and the authorities as the law requires.

We will update this policy as our Services and the law change, and we will revise the “Last updated” date above. If a change is significant, we will tell you in advance by email or in the Services, and we will ask for consent again where the law requires it.

Privacy questions and requests: privacy@radgames.ai.

By mail: IDFire Technologies Inc., 30745 Pacific Coast Hwy 343, Malibu, CA 90265, USA, Attn: Privacy.