๐ŸŽฎ H5 Arcade ไธญๆ–‡

Privacy Policy

Last updated: 2026-08-31 ยท Effective for https://game.wuqingbao.com (H5 Arcade). This page describes exactly what information is collected, by whom, how it is used, and who to contact about it.

1. Introduction & owner of the processing

H5 Arcade ("the Site", "we", "us") is an independent, hobby-maintained website operated from within the People's Republic of China. For the purposes of applicable privacy regulations โ€” including the GDPR for European visitors and PIPL for visitors in China โ€” the data controller and primary point of contact is the site maintainers, reachable at hello@game.wuqingbao.com.

Our fundamental position is simple: we want as little data about you as we can reasonably run a website on. We do not sell data. We do not share data with advertisers. We do not run cross-site identity trackers. When we do collect something, we explain why it is collected, where it goes, and how long it stays โ€” and we give you a way to opt out.

2. Information we collect automatically

2.1 Server access logs

Like essentially every website on the internet, the static hosting provider that serves game.wuqingbao.com writes an access log for each HTTP request. A single log line contains:

  • the requesting IP address (or a truncated / anonymized form of it, depending on provider defaults);
  • the requested URL, HTTP method, status code and response size;
  • the timestamp and (optionally) the Referer and User-Agent headers your browser sends.

These logs are used solely to diagnose outages, detect abuse (scrapers hammering individual assets, brute-force scans, etc.), and for very coarse traffic sizing ("how many visits did we get last week?"). They are not linked to individual people, not cross-referenced with any other source, and are typically rotated within 14 to 30 days depending on the hosting provider's policy.

2.2 Browser storage: localStorage and cookies

The games you play inside the iframes use the browser's localStorage (and sometimes indexedDB) on their own โ€” for progress, high scores, settings like volume, language or tile themes. This storage is scoped to the /vendor/<game-slug>/ origin path of the iframe, so Game A can't read Game B's saved data, and the outer site can't read any iframe scoped storage at all. These are first-party game saves, not tracking cookies. You can clear them any time in your browser's site-data settings.

The outer site itself (the shell pages you are reading right now) does not set any cookies on its own. The only cookies that can be present on the game.wuqingbao.com domain come from third-party integrations which are only loaded when the site maintainers have explicitly opted into them, described in the next section.

3. Optional analytics: Umami

When (and only when) the site maintainers configure Umami during the build, we load a small, privacy-respecting analytics script from either cloud.umami.is or a self-hosted Umami instance at a subdomain of game.wuqingbao.com. Umami is explicitly configured in its "anonymize IP" mode and does not store any persistent client-side identifier. This satisfies ePrivacy rules: because no cross-session identifier is placed, there is no tracking cookie to consent-gate under the GDPR.

What Umami collects, and for how long

  • Per page view: the page path, the referrer, the browser's language, screen dimensions, country-level geo-IP, and the User-Agent, all aggregated and not linked to an individual.
  • Per event, only things the site explicitly records (e.g. a Play click on a specific game).
  • No cross-site identifiers, no device fingerprints, no browser extension sniffing, no ad network synchronisation.
  • Retention: the maintainers configure Umami for 12 months of retention after which raw events are dropped and only aggregate totals remain.

If Umami is currently enabled for this build, it will appear as a single <script defer src="โ€ฆ/script.js" data-website-id="โ€ฆ"> tag in the page <head>. To disable it entirely, enable your browser's generic tracking-protection (uBlock Origin, Safari Privacy, Brave Shields all block Umami by default) or simply turn JavaScript off for the site โ€” every page, including all game listings and this policy, renders perfectly without JavaScript. JavaScript is only used by the games themselves and the optional live-search box on list pages.

4. Third-party advertising: Google AdSense and similar

This section exists to be transparent: at the moment of writing, we do not serve any ads. Nevertheless, if in the future the maintainers choose to enable Google AdSense (or a similar program) to cover hosting costs, the following applies from the moment AdSense is turned on, and you should assume it in any Google AdSense review you perform on this site:

  • Google, as a third-party vendor, uses cookies to serve ads on this site.
  • Google's use of advertising cookies enables it and its partners to show you ads based on your visits to this site and/or other sites on the Internet.
  • You can opt out of personalized advertising by visiting Google's Ads Settings and โ€” for partners using the NAI โ€” the NAI opt-out page.
  • A list of all third-party ad vendors we work with (initially: just Google) will be kept on this page, along with links to their own privacy policies and opt-out mechanisms.
  • Third-party ad servers or ad networks use technology to send, directly to your browser, the advertisements and links that appear on H5 Arcade. They automatically receive your IP address when this happens. They may also use other technologies (such as cookies, JavaScript, or web beacons) to measure the effectiveness of their advertisements and to personalize the advertising content you see.
  • H5 Arcade has no access to or control over these cookies that are used by third-party advertisers.

We will keep this policy's change log (Section 9) up to date when, and only when, ad serving is actually enabled. You should not assume ads are running just because this section exists; this section is for transparency with ad-network reviewers who require these paragraphs on file before approving a site.

5. Information we do not collect

  • We do not ask you for an account, an email, a phone number, or a real name to play games or browse listings.
  • We do not build cross-site profiles. We do not participate in Real-Time Bidding exchanges. We do not sync UIDs with ad partners.
  • We do not record keystrokes, mouse movement, game inputs or high scores on our servers. All of that stays in the iframe's localStorage on your own device, inside the game code.
  • We do not embed social media widgets, share counters, sign-in-with buttons, or any other third-party component that contacts social platforms on page load.

6. Data subject rights (GDPR, PIPL, CCPA/CPRA)

Under GDPR (EU / UK / EEA), PIPL (China), and CCPA/CPRA (California), you have the right to access, correct, delete, port, or object to the processing of personal data we hold about you. Given the intentionally minimal nature of the processing above, the practical answer is usually the same:

Right of access & data portability
Send us an email. We will export any server-log rows associated with a specific IP you can identify, plus any Umami event rows we can reasonably match to a User-Agent / IP window you specify. Note that because we intentionally do not store per-user identifiers, there are limits to how well rows can be de-aggregated.
Right to erasure (right to be forgotten)
Again, email us with as much context as you can and we will purge the specific log/event rows you identify. Storage beyond what we described in Section 2 / 3 does not exist.
Right to object & right to restrict processing
Disable JavaScript or block the Umami script via your ad-blocker. Because no processing is contingent on tracking, you are not penalized for opting out โ€” the site works identically without it.
Automated decision making / profiling
We do not do any. There is no credit scoring, recommender system, or classification system producing legal or similarly significant effects on visitors.

For visitors in China specifically: you also have the right to withdraw consent to processing at any time, and to receive a copy of your personal information in a commonly-readable format. Write to the address above and we will handle these requests in line with PIPL timelines.

7. International transfers

The Site's primary deployment target is a static hosting provider whose servers are physically located outside of China (commonly Germany or Singapore, depending on the provider used for any given deployment). Server access logs and Umami analytics events therefore cross borders in the ordinary course of serving the site. We rely on standard contractual clauses / adequacy decisions where applicable, and โ€” again โ€” the data being transferred is by design as thin as we can make it: aggregated page views, no personal profiles.

8. Minors and children

H5 Arcade is designed and marketed as a general-interest arcade site for players of all ages. That said, a number of the upstream open-source projects we link to carry a "13+" or "T for Teen" note in their READMEs, and we never knowingly ask children under the age that applies in their jurisdiction for personal information. If you are a parent or guardian and you believe we have inadvertently collected data from your child, please contact us and we will delete it within one business day.

9. Changes to this policy

We post material changes to this page with an updated "Last updated" line at the top, and โ€” when the change is about advertising or third-party tracking โ€” we additionally add a prominent notice on the homepage for at least 30 days. Non-material changes (grammar fixes, typo correction, re-ordering) do not get a homepage notice.

Short change log for reference:

  • 2026-08-31 โ€” Initial version published alongside the site's About and Contact pages.

10. Contact for privacy questions

For any question about this policy, to exercise a right listed in Section 6, to report a security or privacy incident, or to request takedown of personal data we may have published in error, write to hello@game.wuqingbao.com and include the word "Privacy" in the subject line. We will acknowledge receipt within one business day and respond substantively within a week.