Privacy policy

Last updated: November 2026

Who is responsible for your information

The data controller is arcademarigold.com, hello@arcademarigold.com, the operator of Arcade Marigold. If you have any question about this policy or about your information, email hello@arcademarigold.com.

This policy is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The short version

• There are no accounts and no sign-up, so we never ask for your name, email address or date of birth to play.
• Your token balance, age confirmation and settings are stored in your own browser and are not sent to us.
• Our hosting provider keeps brief technical logs to keep the site running and secure.
• If you email us, we use your message to reply.
• Google measurement cookies are only ever used if the operator switches them on, and only after you accept them in a cookie banner.

No accounts, no sign-up

You can play every game on Arcade Marigold without registering. We do not run user accounts, newsletters, leaderboards or chat, and we do not build profiles of the people who play. We cannot see who you are from the games themselves.

Information stored on your device

To make the games work, your browser keeps a few small values in its local storage and session storage. These include your Marigold Tokens balance, whether you have confirmed you are 18 or over, your reality-check setting, any break you have chosen, the stake you last used on each game, and how long you have been playing in the current session. The full list is on our Cookies & storage page.

These values stay on your device. They are never sent to us or to anyone else, and we cannot read them. You can remove them by clearing the site data in your browser, and the “Forget my settings” button on the responsible play page removes your balance, age confirmation and reminder setting. A break you have chosen stays in place until it ends.

Hosting and security logs

Arcade Marigold is delivered through Cloudflare, which acts as our hosting and security provider. When your browser requests a page, Cloudflare processes technical information such as your IP address, browser type (user agent), the page requested, the date and time and the response given. This is used to deliver the site, protect it from attacks and abuse, and diagnose faults. These logs are kept for a short period, normally no longer than 30 days, unless they are needed to investigate a specific security incident.

Emails you send us

If you write to hello@arcademarigold.com, we receive your email address, your message and anything you choose to include. We use it to answer you and to keep a record of the conversation. Please do not send us payment details, passwords or sensitive personal information; we will never ask for them.

Google measurement tags (only if enabled)

The operator may choose to measure visits and advertising using Google tags (such as Google Analytics or Google Ads conversion measurement). If, and only if, that is switched on:

• a cookie banner appears on your first visit, and no Google cookies are set unless you press Accept;
• if you accept, Google sets measurement cookies such as _ga, _ga_* and _gcl_au, and receives information such as pages viewed, the device and browser used, approximate location derived from your IP address, and the fact that a game was started;
• if you reject, the games work exactly the same and no Google cookies are set.

Google’s own use of this information is described in its privacy policy and in how Google uses information from sites that use its services.

Our lawful bases

• Hosting and security logs: our legitimate interests in running a safe, working website.
• Replying to emails: our legitimate interests in answering the people who contact us, or taking steps at your request.
• Google measurement cookies: your consent, which you can give or refuse in the banner and change at any time.
• Values stored on your device: these are strictly necessary for the games you ask to play, and they never leave your device.

How long we keep information

Hosting and security logs are kept for a short period, as described above. Emails are kept for as long as needed to deal with your enquiry and for up to two years afterwards, unless the law requires longer. Information stored on your device stays there until you remove it. Google measurement data, where enabled, is kept according to the retention period set in the Google account, which will not exceed 14 months.

Who we share it with

We do not sell your information and we do not share it with advertisers, data brokers or gambling companies. We use a small number of service providers who process information on our behalf: Cloudflare for hosting and security, our email provider for messages you send us, and Google, only if measurement tags are switched on and you have accepted them. We may also disclose information if the law requires it.

International transfers

Some of our providers may process information outside the UK, including in the United States. Where that happens, the transfer is protected by UK adequacy regulations or by appropriate safeguards such as the International Data Transfer Agreement or the UK addendum to the EU standard contractual clauses.

Your rights

Under UK GDPR you have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you may withdraw your consent at any time, without affecting anything that happened before. To use any of these rights, email hello@arcademarigold.com. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Children

Arcade Marigold is only for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has sent us personal information, please contact us and we will delete it.

Security

The site is served only over encrypted HTTPS connections, and we limit who can access the few records we hold. Because your game data never leaves your device, there is very little for anyone to take.

Changes to this policy

We may update this policy when our practices or the law change. The date at the top shows the latest version. If we ever make a change that affects how your information is used in a significant way, we will make it clear on the site.