Privacy Policy
Effective
Your information, explained: what we collect, what other players see, cookies and notifications, payments, retention, and how to request help. We do not ask for wallet secrets.
1. Who is responsible
Crouton Jones LLC, 8 The Green, Suite A, Dover, DE 19901, United States operates Crispy Arcade and is responsible for the personal information described in this notice. Reach us through the support form or Support@respectitbaby.com for privacy questions, requests, or complaints.
This notice covers our arcade website, games, Players Cards, Market, and related account and community features. Independent wallet, payment, and other external services have their own notices. Our community includes adults outside the United States. This notice does not claim that all features are available in every country.
2. Information we collect
| Category | Information and examples |
|---|---|
| Account and agreement | Username, email address, password hash, account identifiers, account dates, moderation status, and registration records of age confirmation, acceptance time, and document versions. Registration uses an 18+ self-declaration; it does not collect a date of birth or verify government ID. |
| Profile and progression | Avatar or banner selections, uploaded avatar content, equipped character card, cosmetic ownership, XP, level, badges, achievements, streaks, missions, and showcase choices. |
| Gameplay and economy | Games and sessions, scores, timings, game events needed to validate play, high scores, match entries and outcomes, reward receipts, crate results, balances, purchases, and credit/debit records. |
| Friends and communications | Friends, blocks, invitations, party membership, presence, public chat, direct messages, notification preferences, and moderation reports including copies of reported content. |
| Referrals and abuse prevention | Referral codes and relationships, reward-delivery records, a random browser identifier, and hashed browser/network identifiers used to identify duplicate accounts, self-referrals, or collusion. Hashing does not make a linkable record anonymous. |
| Payments and wallets | Linked public wallet addresses, wallet-verification signatures, blockchain transaction references, payment provider/order references, amount, currency or asset, status, package, and delivery history. The payment method you choose may collect additional billing details directly. |
| Cash rewards and payouts | If you claim a cash reward (for example, a cash bounty): the payout method you choose (PayPal, USDC, SOL, or CJT), the PayPal email address or wallet address you enter, the amount, the review record, the payment reference, and the date it was paid. Where the law requires it (for example, US$600 or more paid to you in a calendar year), tax information such as a completed IRS Form W-9, requested from you separately and never through chat or the support form. |
| Support and safety | Your reply email, request type, subject, message, account reference when signed in, page and browser user-agent information, ticket status, correspondence, and the handling decision. |
| Device and connection | IP address, browser and connection information, requests and security logs, and errors used to provide and protect the Service. We do not request precise GPS location in the ordinary player flow. |
| Optional push notifications | If you allow notifications: browser push endpoint and delivery keys, a device label, timezone offset for timing, preferences, and delivery/failure timestamps. |
We receive information from you, your browser, your activity, relevant payment/network confirmations, and other users’ interactions or reports. A support message may contain additional information you choose to supply. Do not send passwords, full payment-card details, identity documents, seed phrases, or private keys. Passwords are processed for authentication and stored as hashes, not as plaintext database fields; we do not claim that a server never processes a password.
3. Why we use information
- Create and secure accounts; record agreement and age declarations; restore access and respond to requests.
- Run games and social features; validate scores; deliver purchases, plays, progression, rewards, and competitive results; prevent duplicate payment or reward claims.
- Process the payment method you choose, pay cash rewards to the payout details you give us, and meet tax reporting obligations for those rewards.
- Display the profile and social information that a feature makes public or shares with its participants.
- Detect fraud, cheating, collusion, account misuse, and security incidents; moderate reports and enforce rules.
- Send necessary service messages and the optional notifications you enable; troubleshoot failures and maintain reliable operation.
- Meet applicable recordkeeping or legal obligations and establish, exercise, or defend legal claims.
Where a legal basis is required, account operation and requested purchases rely on performance of the agreement; proportionate security, abuse prevention, support, and service maintenance rely on legitimate interests where permitted; legally required records and disclosures rely on legal obligations; optional permissions and processing that require consent rely on consent. You may withdraw a consent without invalidating earlier lawful processing. Data needed to provide a requested feature may be required; declining it can prevent that feature from working.
4. What other people can see
Public profiles, usernames, avatars, selected cards, showcase items, achievements, scores, rankings, and content you post publicly can be visible to players and visitors. Online presence and activity may be shown through social features. Friends, blocks, and party features have their own audiences. Do not put sensitive information into public fields.
Direct messages are delivered to their participants and stored for that purpose. They are not represented as end-to-end encrypted. Reported messages and related context can be reviewed by authorized personnel for safety, support, or legal reasons. A recipient can copy or report content; deleting your account cannot retrieve copies held independently by other people.
6. Public blockchain records
If you use cryptocurrency, the wallet address, transaction signature, amount, asset, and transaction time can be recorded on the public Solana blockchain. Public addresses are pseudonymous, not necessarily anonymous: a payment can associate an address with your account in our records. Independently replicated blockchain records generally cannot be erased or reversed by us.
Our account-to-wallet links and local payment records are separate from the public blockchain and remain subject to applicable access, retention, and deletion rules. Blockchain permanence is not a reason to keep all off-chain personal information indefinitely.
8. Emails, notifications, and advertising
We send account, password-reset, support, and transaction messages needed for the Service. Available account controls can turn off optional event emails. Browser push requires your permission and can be disabled in the browser; available in-app controls select notification categories. Promotional deal notifications have a separate opt-in. We store a timezone offset to help time notifications, not a precise location.
Rewarded ads are shown only when an eligible provider is configured and available. The current release can display “currently unavailable”; it does not guarantee ad inventory or rewards for an unverified view. A future provider that collects additional information requires appropriate disclosure and controls before use.
9. Retention and deletion
Retention depends on the record’s purpose, your account’s status, unresolved transactions or reports, security needs, and applicable legal obligations. We do not promise that closing an account instantly deletes all records. Account closure, a data-deletion request, and a payment dispute are separate processes.
| Record | Current retention approach |
|---|---|
| Direct messages | Scheduled database expiry after 90 days. A reported message can have a separate evidence copy retained with the report. |
| Notifications and social activity | Player-notification records have a configured 60-day expiry; social-event records have a 30-day expiry; stale presence records have a 24-hour expiry. |
| Accounts, progression, and ownership | Kept to operate the account and maintain entitlements; deletion or anonymization is assessed on a verified request and when no longer needed. There is no claim of an automatic inactivity purge. |
| Payments, economy receipts, disputes, and moderation/support cases | Kept as needed for fulfillment, accounting, fraud prevention, open cases, applicable recordkeeping, and legal claims. The necessary period varies by record and obligation. |
| Cash reward payouts and tax information | Kept for as long as tax and accounting rules require for the payment, then deleted or anonymized. Tax forms are stored separately from your game account and seen only by the people who handle payouts. |
| Infrastructure logs and backups | Follow the deployed provider’s and operator’s retention configuration. A request may require removal from active systems before aged backup copies are overwritten; restored data must remain subject to applicable deletion obligations. |
Scheduled expiry is not an exact-to-the-second deletion promise. A narrowly applicable legal hold or an independently maintained report record can require longer preservation. We will explain a lawful reason when a deletion request cannot be fully honored.
10. Your rights and how to make a request
Depending on the law that applies to you, you may have rights to access, receive a copy, correct, delete, or port eligible information; restrict or object to certain processing; withdraw consent; and opt out of a covered sale, sharing, targeted advertising, or certain profiling. Some rights have conditions or exceptions. We will not unlawfully discriminate against you for exercising them.
Use privacy access, data export, data deletion, or Support@respectitbaby.com. The form can be used without signing in. Describe your request and the relevant account. These are request routes handled by staff, not instant self-service export or deletion buttons. We may make proportionate identity and authority checks to prevent disclosure or deletion by an impostor; do not send identity documents unless we arrange a suitable method.
We assess requests within the time required by applicable law and explain any permitted extension or refusal. Where applicable, an authorized representative can act for you. You may appeal a decision or complain to the competent regulator, including your relevant European supervisory authority, the UK Information Commissioner, or a U.S. state authority. Contacting us first does not prevent a regulatory complaint.
11. Automated checks and human review
The Service automatically calculates progression, rewards, entry eligibility, and gameplay outcomes, and checks score plausibility, duplicate submissions, payment delivery, and some abuse signals. These checks can reject a result or block a suspicious action. A stored device/network match is an indicator, not conclusive proof that two people are the same person.
If you believe a decision is wrong, request review through support with the game, time, and relevant reference. Where applicable law provides safeguards concerning solely automated decisions with legal or similarly significant effects, those rights remain available. We do not claim that every gameplay calculation is such a decision.
12. Security
The application uses password hashing, authenticated access, role checks, rate limits, and server-side checks for important rewards and payments. No website, network, or storage system can guarantee complete security. We do not claim a security certification or that all data is inaccessible to staff.
Protect your credentials and wallet, use a unique password, and report suspected compromise through the support form. A qualifying incident will be assessed for legally required notices and other action. Never send secrets through chat or an ordinary ticket.
13. Adults only
Accounts are intended for people who are 18 years old or older and meet any higher applicable age requirement. Registration records an age assertion rather than a birth date or identity verification. We do not provide a parental-consent account program.
If you believe a minor has supplied information or is using an account, contact Support@respectitbaby.com or safety support. We will assess the report and take legally required action, which may include restricting access and deleting information not lawfully retained. An age statement alone does not eliminate duties that may apply to children’s data.
14. International processing
The operator is based in the United States. Your information may be processed in countries where the actual hosting, communications, payment, and other providers operate, which may have different laws from your country. We do not promise that all information stays in the United States.
Where transfer safeguards are legally required, the applicable mechanism and supplementary protections must be established for the actual transfer. Acceptance of this policy is not a substitute. Ask Support@respectitbaby.com for information about the locations, recipients, and safeguards applicable to your account.
15. Changes and contact
We will identify the effective date of an adopted notice and provide any legally required notice of material changes through the Service or account email. New processing that requires consent needs the appropriate choice before it begins. Updating a policy does not create retroactive consent.
Crouton Jones LLC, 8 The Green, Suite A, Dover, DE 19901, United States
Privacy requests and complaints: Support@respectitbaby.com or the support form. Keep your request reference for follow-up.