Updated 27 October 2026.
For parents in short: Spud Arena needs no account, name, email or phone number. Players get an anonymous guest number. Chat uses fixed friendly phrases only. We delete guests who have not played for 180 days. Write to privacy@spudarena.com to ask about or delete a child's data.
Settings for this device (controls, sound and video, the touch button layout, language), whether the welcome notes were agreed (spud-terms) and the result of the age screen (spud-age, only "child" or "general", never the year) are kept in the browser's local storage. They never leave the device. "Forget on this device" in settings or clearing site data removes them.
The server sets an anonymous spud_guest session cookie (HttpOnly, SameSite=Lax, Secure, no persistent expiry) that links your visits to an automatically generated potato name. Clearing it creates a new guest; the old record stays until retention removes it.
Against the anonymous guest number we keep: the generated name, match time and room/mode history, round results and lifetime statistics, coins and the coin ledger, owned looks, achievements, reward-ad events and grants, and moderation actions. We do not store chat history, IP addresses in player records, the birth year, real names, email addresses or payment details. Payments are not connected.
Web server and application logs include IP addresses for security (abuse limits, attack detection) and are kept for up to 30 days. In-memory counters that limit repeated requests use the connecting IP address and expire within minutes.
After the welcome notes, players choose their birth year. The year is used only on that screen to decide between "child" (under 13) and "general"; just that word is saved on the device. Children get child-directed advertising and will not be offered social-network sign-in or purchases without a parent.
Optional rewards (a weapon for one round, coins, a timed look) can be earned by watching a short video through Google H5 Games Ads. A small display unit can appear while waiting to respawn, at most once every two minutes. All ad requests are tagged for child-directed treatment, so Google serves ads without interest-based profiling. The advertising script loads only when an ad is requested or shown, not during ordinary game entry. Google may process network and device information and use cookies when serving ads: How Google uses information from sites and apps · Google ad privacy controls. Until the account is approved, the site shows clearly labelled Google test ads.
Reward completions are reported by your browser and are not independently verified Google billing records. Closing a video early, an unavailable ad or a blocked script leaves the reward locked; all ordinary weapons stay free.
Only operators of Spud Arena, through a key-protected administration console, for running the game and handling reports. Every operator action is logged. Records are not sold or shared with third parties, except that Google receives the ad requests described above.
All traffic uses HTTPS. The game and its database run on hardened servers behind a firewall; secrets are kept outside the code. Please report security problems to privacy@spudarena.com.
更新于 2026 年 10 月 27 日。
给家长的简短版：Spud Arena 不需要账号、姓名、邮箱或电话。玩家只有一个匿名的游客编号。聊天只能用预设的友好语句。180 天没有玩的游客会被自动删除。想查询或删除孩子的数据，请写信到 privacy@spudarena.com。
这台设备的设置（操作、声音和画面、触屏按钮布局、语言）、是否已同意欢迎须知（spud-terms）、年龄屏的结果（spud-age，只记录"儿童"或"一般"，不记录年份）保存在浏览器本地存储里，不会离开设备。设置里的"忘记这台设备"或清除站点数据即可删除。
服务器会设置一个匿名的 spud_guest 会话 Cookie（HttpOnly、SameSite=Lax、Secure、无长期有效期），把你的访问和一个自动生成的土豆名字关联起来。清除它会生成新的游客；旧记录会保留到按期清理为止。
与匿名游客编号关联保存的有：生成的名字、对局时长和房间/模式记录、每局结果和累计统计、金币和金币流水、拥有的装扮、成就、奖励广告的事件和发放、管理操作。我们不会保存聊天记录、玩家记录中的 IP 地址、出生年份、真实姓名、邮箱或支付信息。目前没有接入支付。
网站服务器和应用日志会包含 IP 地址，用于安全目的（限制滥用、识别攻击），最多保留 30 天。用于限制重复请求的内存计数器使用连接 IP，几分钟内自动过期。
看完欢迎须知后，玩家选择出生年份。年份只在那个屏幕上用来判断"儿童"（未满 13 岁）或"一般"，设备上只保存这一个词。儿童会看到面向儿童的广告，并且在没有家长的情况下不会被提供社交账号登录或购买功能。
可选奖励（一局的武器、金币、限时装扮）可以通过观看 Google H5 游戏广告的短视频获得。等待复活时可能出现一个小的展示广告位，每两分钟最多一次。所有广告请求都标记为面向儿童，Google 不会做基于兴趣的画像。广告脚本只在请求或展示广告时加载，平时进入游戏不会加载。Google 投放广告时可能处理网络和设备信息并使用 Cookie：Google 如何使用来自网站和应用的信息 · Google 广告隐私设置。账号审核通过前，网站显示的是带明确标记的 Google 测试广告。
观看完成由你的浏览器上报，不是经过独立核实的 Google 结算记录。中途关闭视频、没有广告或脚本被拦截时奖励不会发放；所有普通武器始终免费。
只有 Spud Arena 的运营人员，通过有密钥保护的管理后台，用于运营游戏和处理举报。每一次操作都有日志。记录不会出售或共享给第三方；只有上面提到的广告请求会发送给 Google。
全部流量使用 HTTPS。游戏和数据库运行在有防火墙和加固配置的服务器上；密钥不放在代码里。发现安全问题请联系 privacy@spudarena.com。