Privacy

CTSoftwares operates the gaming hub at games.ctsoftwares.com. This notice describes the hub, optional CTS player accounts and optional analytics. StarFallRush and Neon Coil have their own privacy notices and separate analytics choices, available within each game.

On your device

StarFallRush saves your personal best, sound preference and analytics choice in browser storage. The hub saves games you choose to favorite and your hub analytics choice. Installing the game caches its files for offline play. These functional features do not send your best score or saved favorites to a player account. Clearing this site's data in your browser removes local preferences, scores and cached files; uninstalling alone may not clear browser data.

Optional hub analytics

Google Analytics 4 stays off on the hub until you choose Allow. No thanks leaves browsing and launching games available. The home page and release-notes index use the existing CTSoftwares Games property. These Terms and Privacy pages remain free of analytics scripts; release videos are hosted by us.

When allowed, hub analytics sends page visits and clicks that open StarFallRush or Neon Coil, labeled gaminghub with the selected game. Random browser identifiers and hub-prefixed analytics cookies group events and recognize returning browsers. These are pseudonymous identifiers, not your name. Reports include browser, operating system, device type and approximate geography. We exclude search text, saved favorites, URL query strings, fragments and referrer URLs. Each game labels its own optional gameplay events separately; hub consent does not authorize game tracking.

Google receives your network address when your browser connects. Google states that GA4 does not log or store IP addresses. We do not request GPS location. Optional analytics does not record your screen, raw keystrokes or pointer movements, or enable automatic form tracking. Google signals and advertising personalization are disabled. Free guest play does not require a CTS account. Optional player accounts are described below; each game retains its own available features and separate analytics choice.

Your analytics choice

Use Analytics choices in the hub home or release-notes footer. Choosing No thanks stops future hub collection, discards pending hub events and removes hub analytics identifiers and hub-prefixed cookies. The change is shared with other open hub tabs. It does not change a game's separate analytics choice or identifiers. Withdrawal does not automatically erase events already received by Google. A previous Azure analytics choice does not authorize Google Analytics. Reading or using our terms does not grant analytics consent.

How long information lasts

The hub's random browser identifier and analytics cookies expire after 90 days, refreshed with activity. Google applies its session behavior after consent. GA4 detailed user/event retention is configured to 14 months; user expiry can reset with activity. Most standard aggregate reports are not limited by that setting. Earlier Azure gameplay analytics remains under its original 90-day retention and is not migrated into GA4.

Local scores, sound, saved games and the stored analytics choice remain until changed or cleared by you or your browser. Offline caches are replaced by accepted game updates or cleared with site data. Hosting/security records and contact messages are kept as needed for their operational purpose or applicable legal obligations; they do not share GA4's retention setting.

Hosting, contact and purposes

Microsoft Azure hosts our games. Hosting infrastructure can process request information such as IP address, browser information, requested URL and time to serve files, diagnose faults and protect the service, independently of optional gameplay analytics. If you email us, we receive your address and message to respond. We use requested local features to provide the game and your preferences, consent for optional analytics, and legitimate interests in service security, reliability and answering questions where those legal bases apply. We do not sell game visitor information or use it for targeted advertising in the current game.

Service providers and international processing

Microsoft and, if you allow analytics, Google process information to provide their services. Information may be processed outside your country. Their data-processing terms and applicable transfer safeguards govern their processing. See Microsoft privacy, Google privacy and Google's international transfer safeguards. We may also disclose information if required by law or necessary to address abuse or protect legal rights.

Your rights and questions

Where applicable, you can request access, correction, deletion, restriction or portability of personal information, object to certain processing, withdraw consent, or complain to your data protection authority. Some rights have legal exceptions. Contact CTSoftwares at chuan@ctsoftwares.com. We may need limited information to verify a request or locate pseudonymous browser events; do not send passwords or sensitive identity documents unsolicited. We respond within applicable legal deadlines.

A parent or guardian with a concern about a child's information can use the same contact. Free guest play does not require an account or account-eligibility details. Optional account eligibility and profile choices are described below. Reports may be incomplete when analytics is declined, blocked or offline.

Updates

We will update this notice when data use changes. New optional tracking will require the appropriate choice before it starts. Check the dated notice and release notes for changes.

Studio YouTube connection

CTSoftwares, LLC’s internal CTSoftwares Gaming Studio uses YouTube API Services so authorized staff can review our own channels alongside saved publishing records. This is separate from playing our games or browsing the public website. With the channel owner’s consent, we request YouTube read-only and YouTube Analytics read-only access. We check the channel identity against the saved Studio account and read recent video identifiers, titles, visibility, available scheduled publication times and view counts, together with aggregate views, watch minutes and likes. This integration cannot upload videos, publish posts, change schedules or manage the channel. Only staff with Studio read permission can view these results. Studio edit permission is required to connect or disconnect. We use Google data only for these channel-review features. We do not sell it, use it for advertising, disclose it to data brokers or use it to train generalized artificial-intelligence models. Google processes authorization and API requests; Microsoft Azure hosts our internal application and protected database. Google sign-in takes place with Google, and we never receive your Google password.

Google Privacy Policy

The server encrypts the access token and binds it to the selected Studio account for at most one hour. We do not retain refresh tokens. Pending sign-in state expires after ten minutes. Cleanup removes expired credentials while the API is running and on restart; expired credentials cannot be used while cleanup is pending. Encrypted connection records may remain in protected Azure database backups for up to seven days. A recovery must invalidate restored provider connections before access is resumed. Live video and analytics results are not saved to our database or publishing history. They exist temporarily in server memory and the current admin view, which clears on refresh, disconnect, navigation or detected access expiry. We retain the channel identity only with the active connection; our independently saved account profile and publishing records remain separate. Staff session cookies protect access to the internal admin. The integration does not add advertising cookies. CTSoftwares Gaming Studio’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Google API Services User Data Policy

Use Disconnect from Studio in the social account’s Settings to remove its active credentials and cancel pending sign-in. You can also revoke the Google-side grant in Google Account connections. Disconnecting does not delete independently saved account profiles or historical publishing records. For privacy questions or requests to remove those records, contact chuan@ctsoftwares.com. We will handle requests under the rights and contact process described above.

Manage or revoke Google Account connections

Studio search reporting

CTSoftwares, LLC’s internal CTSoftwares Gaming Studio lets authorized staff read aggregate search performance for our own website, https://games.ctsoftwares.com/, from Google Search Console and Bing Webmaster Tools. With the account owner’s consent, we request read-only access and verify that the signed-in account can access this website. The connection cannot submit URLs, change search settings or publish website content.

We read daily clicks and impressions, with average position where supplied. This version does not read individual visitors, search queries or page-level reports. Website read permission is required to view reports; Website edit permission is required to connect or disconnect. We use these observations to understand how people find our website. We do not sell this provider data, use it for advertising, disclose it to data brokers or use it to train generalized artificial-intelligence models.

Sign-in takes place with Google or Microsoft/Bing. We never receive your provider password. Microsoft Azure hosts our internal application and protected database. Access tokens are encrypted, tied to their provider connection and retained for at most one hour. We do not retain refresh tokens. Pending authorization expires after ten minutes. Cleanup removes expired credentials while the API is running and on restart; expired grants cannot be used while cleanup is pending. Reports exist only temporarily in server memory and the current Admin view, which clears on refresh, navigation, disconnect or detected expiry. Reports are not saved in our database or publishing history.

Encrypted connection records may remain in protected Azure SQL backups for up to seven days, subject to verification of the live retention setting before activation. A recovery must invalidate restored connections before access resumes. This integration does not add advertising cookies. Existing staff session cookies protect the internal Admin.

CTSoftwares Gaming Studio’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Provider processing is described in the Google Privacy Policy and Microsoft Privacy Statement.

Use Disconnect / clear stored access in Website → Search & SEO to remove Studio’s active credentials and pending authorization. You can also revoke access through your Google Account connections or Bing Webmaster Tools account controls. Disconnecting does not delete website content or independently saved website checks. For privacy questions or requests, contact chuan@ctsoftwares.com using the rights and contact process in this policy.

Contribution payments

Stripe processes your payment details and handles its own payment records under its privacy policy. CTSoftwares Gaming does not receive or store your full card number or security code. We keep minimal payment references, amounts, currency, dates, status and dated refund/dispute records for seven years from the end of the year of the last financial activity, and longer while a dispute, investigation or record hold remains unresolved. Unreferenced event receipts for terminal unpaid attempts are reviewed for removal after 90 days; receipts needed for a payment or unresolved matter remain with the related records. Access is restricted to authorized roles. Recovery copies and operational evidence are protected separately. Contact players@ctsoftwares.com for payment, refund or privacy questions.

Optional player accounts and account information

CTS player accounts are optional and initially offered to United States residents aged 13 or older. Free guest games need no account. You can sign in with Google, a personal Microsoft account, or a CTS email and password account. CTS does not receive your Google or Microsoft password. For CTS email accounts, we keep your private email address, a salted password hash and security and lockout records; we do not store your password itself. We keep a provider-specific identifier, your profile, sessions and account-action records. The eligibility form uses residence and birth date but does not retain birth date or exact age in your profile or agreement receipt. Eligibility and the under-18 permission statement are self-declarations, not verified age or guardian identity. We record the accepted Terms and Privacy versions, agreement time and ceremony/rule versions. Functional sign-in records are separate from optional analytics.

CTS email sign-in requires a password and a short-lived emailed code. Microsoft 365 sends verification codes from players@ctsoftwares.com, and a functional browser cookie binds each request to its browser. Requests expire within ten minutes. Pending hashes and proof material are cleared when used or when expiry processing runs. Remaining request metadata, including the normalized email used to limit repeated requests, becomes eligible for removal after one hour; processing outages can delay cleanup. Your account download includes your private email and credential metadata, never password hashes or codes. Account deletion removes the credential and linked requests, subject to the existing backup limits.

Your profile starts private. If you share it, anyone can view its display name, handle and arcade initials; the sign-in identifier stays private. You can withdraw sharing, download your account information, sign out other sessions and delete the account after confirming the same sign-in account. Deletion removes personal profile/provider details and relevant report and appeal text and ends CTS sessions; the handle stays reserved. After deletion, you can create a new empty private CTS account. Agreement receipts are included in your download and erased with the account. Existing-account privacy access remains available if you decline current Terms, without creating an account or permitting public participation. Authorized staff review reports, restrictions and appeals; restrictions do not remove privacy controls.

Contact players@ctsoftwares.com for account support. Keep passwords, sign-in codes and unsolicited identity documents out of messages and reports. For CTS email accounts, use Reset your password on the email account page; a successful reset ends your CTS sessions. For Google or Microsoft, use the original provider recovery process first. Staff can track and review requests; the support queue cannot delete an account for you, issue a replacement sign-in, merge accounts or deliver an account download. A handle, email or representative statement alone does not establish authority. Unresolved requests still need an appropriate authority, response and deadline review; a referral is not fulfillment.

Eligible expired/revoked sessions may be cleaned after 30 days, closed report/appeal text after 90 days and ended moderation history after 12 months. Minimal support-case and audit records are kept for 24 calendar months from the later of closure and actual final response, subject to documented exceptions and relevant holds. Unnecessary correspondence/evidence is removed within 90 days after closure, sooner when no longer needed, with documented exceptions. Controlled and recoverable copies require reconciliation or a documented exception; recording disposal does not delete email or backups. Reserved handles are reviewed annually. Cleanup holds do not override account erasure, and overdue exceptions stay active until reviewed and released.

A protected record separate from the database keeps deletion and restriction outcomes for exceptional recovery. It contains internal account identities, reserved handles and necessary decision provenance, without display names, provider sign-in identifiers, report text, correspondence, birth dates or credentials. Recovery requires access to remain stopped until those outcomes and account access are reconciled. Erasure is not a promise of immediate physical deletion from every protected backup. Account creation alone does not synchronize device saves. Optional cloud saves in supported games are described below. Achievements and optional leaderboards for supported activities are described below. Purchases and subscriptions are separate features.

Cloud saves are optional and available only in supported games. When you confirm an import or cloud replacement, we store the supported game progress, game and save-slot identifiers, format version and saved time with your CTS account. Star Fall Rush currently supports Arcade and 60-second personal bests. Signing in alone does not upload or apply device progress. You choose when to save to cloud or use a cloud save on a device; this version does not automatically synchronize progress.

Cloud saves stay private. We keep the current save until you replace it or delete your CTS account. Your account download includes cloud saves; deleting the account removes them from the active database, subject to the existing backup limits in this notice. Device saves remain on your devices unless you change or clear them.

When you use supported activities while signed in, we store achievement identifiers, progress counts and earned dates with your CTS account. Explorer milestones record opening a published comic, story, book or making article, rather than reading completion. Optional ranked games send a limited sequence of game controls and timing with a short-lived run ticket. We replay supported game rules to calculate the score and achievement progress. Raw controls are used for validation and are not saved in the player database. We keep a limited set of run validation records and your current best validated scores for each supported game and ranking period.

Achievements and validated bests stay private unless you separately join a game’s public leaderboards with an eligible public profile. Public boards show your handle, arcade initials, score, rank and score date. You can hide your scores or make your profile private. Your account download includes achievement and ranked-play records; account deletion removes them from the active database, subject to the existing backup limits. Achievement progress and current bests remain until account deletion. Reusable run records may be replaced by later runs and are removed with eligible expired or revoked sessions under the existing session schedule. Free guest play does not submit ranked proofs or earn account achievements.

If you use My library, we store the games you choose to add or remove with your CTS account so those choices can appear on your other devices. Existing browser-only saved-for-later choices stay on that browser unless you separately add games to your account library. For account content, we store the content identifier, current grant, start, expiry and revocation dates, and operational audit details. Saved games are bookmarks, not purchases. Library choices and current access records remain while your account exists, including removed, expired or revoked states. They are included in your account download and removed from the active database when you delete your account, subject to the backup limits above. Your library stays private even if your profile is public. Current free games remain available to guests. This feature does not offer purchases or subscriptions.

Instagram connections in Studio

Authorized Studio operators may choose to connect an Instagram professional account they manage. With basic read-only permission, CTSoftwares Gaming Studio checks that the returned account matches its saved profile and reads the account identifier, username, professional account type and up to 25 published media records, including post identifiers, captions, publication times, media types and public post links. With a separate optional insights permission, Studio also reads aggregate account views, estimated reach and total interactions for the previous 7 or 28 complete UTC days, and lifetime views, estimated reach and total interactions for an individually selected published post. Post views and interactions exclude ad engagement. We use this information to display the connected account, its published posts and its account and post performance to staff with Studio read permission. Studio edit permission is required to connect or disconnect. Insights may be delayed by up to 48 hours or unavailable. This connection does not read audience demographics or individual followers, publish content, change schedules or read messages.

Access credentials are encrypted on the server. Production Studio uses an access token valid for up to 60 days and renews it automatically before expiry while the account remains connected, including optional insights access when granted. Local development connections expire within one hour and are not renewed automatically. Studio does not store a separate refresh token. Reconnection is required if access is revoked or the token expires. Expired credentials are cleared by background cleanup. Retrieved profile, post and insights results exist temporarily in server memory and the current Admin page; they are not saved to our database or publishing history. The page clears results on refresh, navigation, disconnect or detected expiry or loss of Studio access. Independently saved account profiles, publication history and schedule records remain separate.

Use Disconnect in the Instagram account's Studio Settings to stop automatic renewal, remove its active credentials and cancel pending sign-in. Disconnecting in Studio does not delete independently saved account, post or schedule records and does not revoke the separate Meta app grant. You may also revoke the app grant in Instagram's Apps and Websites controls. Protected Azure database backups may retain encrypted connection data for up to seven days. Sanitized local recovery exports exclude connection grants, and restored grants must be cleared before provider access is enabled. For privacy questions or requests concerning separately saved records, contact chuan@ctsoftwares.com using the rights and contact process in this notice.