Updated 29 October 2026.
For parents in short: Spud Arena needs no account, name, email or phone number. Players get an anonymous guest number. Chat uses fixed friendly phrases only. We delete guests who have not played for 180 days. Write to privacy@spudarena.com to ask about or delete a child's data.
Settings for this device (controls, sound and video, the touch button layout, language), whether the welcome notes were agreed (spud-terms) and the result of the age screen (spud-age, only "child" or "general", never the year) are kept in the browser's local storage. They never leave the device. "Forget on this device" in settings or clearing site data removes them.
The server sets an anonymous spud_guest session cookie (HttpOnly, SameSite=Lax, Secure, no persistent expiry) that links your visits to an automatically generated potato name. Clearing it creates a new guest; the old record stays until retention removes it.
Against the anonymous guest number we keep: the generated name, match time and room/mode history, round results and lifetime statistics, coins and the coin ledger, owned looks, achievements, reward-ad events and grants, and moderation actions. For each match we also keep an approximate location (country, region and city, with the city's map position) estimated from the connecting address when the match begins, and the network round-trip time the game server measured during the match; both help us decide where to run game servers. The address itself is not kept with the player record. We do not store chat history, IP addresses in player records, the birth year, real names, email addresses or payment details. Payments are not connected. Location estimates use GeoLite2 data created by MaxMind.
If you send feedback, we keep its category, message, chosen language, guest number, player nickname, game version and receipt time so operators can investigate. Feedback and internal handling notes are scheduled for deletion after 180 days. Please do not include passwords, contact details or other personal information. To limit abuse across gateways, a separate receipt keeps a keyed digest of your network address (an IPv6 /64 is grouped together), the guest number and content digest for a rolling 24-hour quota; expired receipts are removed in batches. The feedback table and console do not contain the network address or its digest. Feedback text is not sent to analytics.
Web server and application logs include IP addresses for security (abuse limits, attack detection) and are kept for up to 30 days. In-memory counters that limit repeated requests use the connecting IP address and expire within minutes.
To see how many people visit and which parts of the game they use, the site runs its own copy of Umami on the same server. It sets no cookies and keeps no identifier for you: a visit is counted under a one-way hash of the IP address and browser type with a salt that changes every day, so visits cannot be linked across days or to a person. It records the page, the country, the browser and device type, the referring site, and a few in-game moments (pressing Play, joining a match, the network round-trip time to the game server, opening the shop, finishing a rewarded video), never a name, a chat message or anything typed. Nothing is sent to a third party.
After the welcome notes, players choose their birth year. The year is used only on that screen to decide between "child" (under 13) and "general"; just that word is saved on the device. Children get child-directed advertising and will not be offered social-network sign-in or purchases without a parent.
Optional rewards (a weapon for one round, coins, a timed look) can be earned by watching a short video through Google H5 Games Ads. Small display units appear while waiting to respawn after each knock-out (under the respawn card and, on wide screens, beside it), and one small unit sits under the ammo panel during a match. All ad requests are tagged for child-directed treatment, so Google serves ads without interest-based profiling. Google's advertising script is included on the page (Google requires this to review the site); ads themselves appear only in the places described here. Google may process network and device information and use cookies when serving ads: How Google uses information from sites and apps · Google ad privacy controls. Until the account is approved, the site shows clearly labelled Google test ads.
Reward completions are reported by your browser and are not independently verified Google billing records. Closing a video early, an unavailable ad or a blocked script leaves the reward locked; all ordinary weapons stay free.
Only operators of Spud Arena, through a key-protected administration console, for running the game and handling reports. Every operator action is logged. Records are not sold or shared with third parties, except that Google receives the ad requests described above.
All traffic uses HTTPS. The game and its database run on hardened servers behind a firewall; secrets are kept outside the code. Please report security problems to privacy@spudarena.com.
更新于 2026 年 10 月 29 日。
给家长的简短版：Spud Arena 不需要账号、姓名、邮箱或电话。玩家只有一个匿名的游客编号。聊天只能用预设的友好语句。180 天没有玩的游客会被自动删除。想查询或删除孩子的数据，请写信到 privacy@spudarena.com。
这台设备的设置（操作、声音和画面、触屏按钮布局、语言）、是否已同意欢迎须知（spud-terms）、年龄屏的结果（spud-age，只记录"儿童"或"一般"，不记录年份）保存在浏览器本地存储里，不会离开设备。设置里的"忘记这台设备"或清除站点数据即可删除。
服务器会设置一个匿名的 spud_guest 会话 Cookie（HttpOnly、SameSite=Lax、Secure、无长期有效期），把你的访问和一个自动生成的土豆名字关联起来。清除它会生成新的游客；旧记录会保留到按期清理为止。
与匿名游客编号关联保存的有：生成的名字、对局时长和房间/模式记录、每局结果和累计统计、金币和金币流水、拥有的装扮、成就、奖励广告的事件和发放、管理操作。每场对局还会保存一个大致位置（国家、地区和城市及城市在地图上的位置，由入场时的连接地址估算）和游戏服务器在对局中测得的网络往返时间，用于决定在哪些地区运行游戏服务器；连接地址本身不会和玩家记录一起保存。我们不会保存聊天记录、玩家记录中的 IP 地址、出生年份、真实姓名、邮箱或支付信息。目前没有接入支付。位置估算使用 MaxMind 提供的 GeoLite2 数据。
提交意见反馈时，我们保存类别、正文、所选语言、游客编号、玩家昵称、游戏版本及接收时间，用于运营人员排查问题。反馈与内部处理备注在满 180 天后按批清理。请勿填写密码、联系方式或其他个人信息。为跨网关限制滥用，独立回执暂存带私密密钥的网络地址摘要（IPv6 按 /64 合并）、游客编号和内容摘要，用于滚动 24 小时的额度检查，过期回执按批清理。反馈表及管理页面不包含网络地址或地址摘要；反馈正文不会发送给访问统计。
网站服务器和应用日志会包含 IP 地址，用于安全目的（限制滥用、识别攻击），最多保留 30 天。用于限制重复请求的内存计数器使用连接 IP，几分钟内自动过期。
为了解有多少人来访、用到了游戏的哪些部分，本站在同一台服务器上自行运行 Umami 统计。它不设置 Cookie，也不为你保留任何标识：访问按 IP 地址和浏览器类型的单向哈希计数，盐值每天更换，所以跨天的访问无法关联，也无法对应到个人。记录的内容是页面、国家、浏览器和设备类型、来源网站，以及少数几个游戏内节点（按下开始、进入对局、到游戏服务器的网络往返时间、打开商店、看完奖励视频），不记录名字、聊天内容或任何输入的文字。数据不会发送给第三方。
看完欢迎须知后，玩家选择出生年份。年份只在那个屏幕上用来判断"儿童"（未满 13 岁）或"一般"，设备上只保存这一个词。儿童会看到面向儿童的广告，并且在没有家长的情况下不会被提供社交账号登录或购买功能。
可选奖励（一局的武器、金币、限时装扮）可以通过观看 Google H5 游戏广告的短视频获得。每次被淘汰、等待复活时会出现小的展示广告位（在复活卡片下方，宽屏时两侧也有），对局中弹夹面板下方常驻一个小广告位。所有广告请求都标记为面向儿童，Google 不会做基于兴趣的画像。页面里包含 Google 的广告脚本（Google 审核网站需要它）；广告本身只会出现在上面描述的位置。Google 投放广告时可能处理网络和设备信息并使用 Cookie：Google 如何使用来自网站和应用的信息 · Google 广告隐私设置。账号审核通过前，网站显示的是带明确标记的 Google 测试广告。
观看完成由你的浏览器上报，不是经过独立核实的 Google 结算记录。中途关闭视频、没有广告或脚本被拦截时奖励不会发放；所有普通武器始终免费。
只有 Spud Arena 的运营人员，通过有密钥保护的管理后台，用于运营游戏和处理举报。每一次操作都有日志。记录不会出售或共享给第三方；只有上面提到的广告请求会发送给 Google。
全部流量使用 HTTPS。游戏和数据库运行在有防火墙和加固配置的服务器上；密钥不放在代码里。发现安全问题请联系 privacy@spudarena.com。