ROSA GAMES

Privacy information

This site has no advertising or analytics scripts. Optional ROSA accounts use a username and password; email is not collected. We store a salted scrypt password hash, a recovery-code hash and hashed session identifiers on our own game server. The session cookie is HttpOnly and SameSite=Strict, with Secure on HTTPS. Rate limits use temporary IP-based counters in server memory. In automatic language mode, the browser contacts ipwho.is over HTTPS; it receives your public IP address and returns a country code. The country is cached in this browser tab for up to 30 minutes. A manually selected language is saved locally.

Games save progress, settings and local statistics in this browser. Air Hockey cloud copies are optional and uploaded/restored manually through your account. The server stores your uploaded copy, account creation time and verified online results. Your username and eligible Air Hockey results appear in the public leaderboard; AI and guest games do not affect it. The account page lets you export your data. Session lifetime is seven days. Recovery or a password change revokes old sessions. Account records have a private redundant backup on the same server. This preview notice still requires actual operator/contact/hosting details and a confirmed retention policy before it can be treated as a complete Privacy Policy.

Before public launch, this information needs to be completed with the operator’s identity, contact details, and the hosting provider’s actual logging and data practices.