Privacy Policy

Effective date: July 30, 2026

This Privacy Policy explains how alt games portal: GenAI-Mode (Android package dif.instantgames) and the gamesp.xyz website (together, the "Service") collect, use, disclose, and protect personal data. It also explains the choices and rights available to you.

1. Data Controller and Contact Details

The controller responsible for the Service is:

Safal Sharma

2-7-33 Kinuyama, Matsuyama, Ehime 791-8025, Japan

Email: safal.sharma.ss@gmail.com

We have not appointed a data protection officer. Privacy and data-rights requests may be sent to the email address above.

2. Personal Data We Process

Depending on how you use the Service, we may process the following categories of data:

  • Account and profile data: name, email address, profile picture, authentication provider, and account identifier when you sign in.
  • User content: AI prompts, sketches or images you submit, generated-game content, favourites, scores, achievements, and gameplay history. Do not submit sensitive personal data in prompts or images.
  • App activity: games viewed or played, feature interactions, ad views and interactions, session events, and consent choices.
  • Device, network, and identifier data: IP address, device type, operating system and app version, language, mobile advertising identifier, app or SDK instance identifiers, browser information, and approximate location inferred from IP address. The Service does not use precise GPS location for advertising unless we provide a separate notice and obtain any consent required by law.
  • Diagnostics and performance data: crash information, error logs, loading times, and other technical data used to maintain and secure the Service.

We receive data directly from you, automatically from your device and the software development kits used by the Service, and from sign-in, advertising, analytics, cloud, and game-content providers.

3. Why We Process Data and Our Legal Bases

  • Provide the Service and account features: to authenticate you, save preferences and progress, deliver games, and provide requested AI features. The legal basis is performance of our contract with you or taking steps at your request before entering a contract (GDPR Article 6(1)(b)).
  • Personalized advertising and optional analytics: to personalize ads, measure audiences, or use non-essential device storage when you choose to allow it. The legal basis is your consent (Article 6(1)(a)), together with any consent required under applicable ePrivacy rules.
  • Service operation, limited advertising, security, and fraud prevention: to deliver requested content, maintain app performance, prevent invalid ad traffic, protect accounts, and diagnose failures. The legal basis is our legitimate interests in operating a safe and sustainable Service (Article 6(1)(f)), except where consent is required for a particular technology or purpose.
  • Legal compliance: to keep records, respond to lawful requests, and establish or defend legal claims. The legal basis is compliance with legal obligations (Article 6(1)(c)) or our legitimate interests (Article 6(1)(f)), as applicable.

Account details are needed if you choose to create an account. You can use features that do not require an account without providing account details, although some saved or personalized features may then be unavailable. Consent for personalized ads and optional analytics is not required to access the Service.

4. AdMob, Advertising, and Consent

We use Google AdMob and the Google Mobile Ads SDK to fund the Service. Where configured, AdMob mediation may also make ad inventory available to providers such as Unity Ads and ironSource. Google and participating ad technology providers may collect, receive, or share IP addresses, mobile advertising and app identifiers, cookies or similar local-storage data, device and browser information, approximate location, app activity, ad interaction data, and diagnostics.

These providers use data to deliver and personalize ads, limit how often an ad appears, measure ad performance, produce aggregated reports, maintain security, and detect fraud and invalid traffic. Third parties may place or read cookies in a browser, use mobile identifiers, or use web beacons and IP addresses as a result of serving ads.

European advertising choices

For users in the European Economic Area, the United Kingdom, and Switzerland, the Service uses a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. Where required, a consent message is shown before ads or other technologies that require consent are requested. You may accept, reject, or manage the listed purposes and advertising providers. Depending on your choices and the available ad inventory, you may receive personalized ads, non-personalized ads, limited ads, or no ad.

You can change or withdraw your choice at any time using the Privacy choices entry point in the app when it is displayed. Withdrawal does not affect processing that was lawful before withdrawal. You may also control the Android advertising identifier and ad personalization in your device's Google settings.

The consent message identifies the advertising providers available for the Service and links to their information. You can also learn more from:

5. Analytics, Firebase, and Generative AI

We use Google services such as Firebase Authentication, Firebase databases and storage, Firebase App Check, Firebase Analytics, Google Analytics, Google Cloud Functions, and the Gemini API. These services may process account data, app activity, technical data, AI prompts, sketches or images, and generated output to provide authentication, storage, analytics, abuse prevention, and AI-assisted game generation.

AI input and output may be processed by Google's generative AI systems. Do not include confidential information or personal data about another person unless you have the right to do so. AI output is automated and may be inaccurate. It is not used by us to make decisions that produce legal or similarly significant effects about you.

6. When We Share Data

We share personal data only as needed with the following categories of recipients:

  • Google services, including AdMob, Google Play Services, Firebase, Google Analytics, Google Cloud, and Gemini;
  • advertising and measurement providers listed in the consent message, including mediated ad networks when enabled;
  • third-party game and content providers when you choose to load their content;
  • technical vendors that host, secure, support, or monitor the Service; and
  • public authorities or other parties when required by law, to protect rights and safety, or in connection with a business reorganization.

Some recipients act as our processors and others act as independent controllers under their own privacy policies. We do not sell your directly identifying account data.

7. International Data Transfers

The controller is located in Japan, and our providers may process data in Japan, the United States, and other countries outside the EEA, United Kingdom, or Switzerland. Transfers from the EEA are protected, as applicable, by a European Commission adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism. Google states that it also relies, where applicable, on adequacy decisions, the EU-U.S. Data Privacy Framework, and Standard Contractual Clauses. You may contact us for more information about applicable transfer safeguards.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described above. Account, profile, saved-game, and user-content data are generally retained while your account remains active and then deleted or anonymized following an account-deletion request, subject to reasonable backup cycles and legal requirements. Security, diagnostic, consent, and transaction records are retained for the shortest period reasonably needed to prevent fraud, demonstrate compliance, resolve disputes, and meet legal obligations. Advertising, analytics, and other providers apply the retention periods described in their own notices and controls.

9. Your Privacy Rights

If the GDPR or a similar law applies to you, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • request deletion of your data;
  • restrict or object to certain processing;
  • receive data you provided in a portable format where applicable;
  • withdraw consent at any time; and
  • lodge a complaint with the data protection authority in the country where you live or work, or where you believe an infringement occurred.

To exercise these rights, email safal.sharma.ss@gmail.com. We may need to verify your identity. We will respond without undue delay and generally within one month where the GDPR applies. You can also delete your account through the account deletion page. The rights above may be limited where an exception under applicable law applies.

Contact details for EU and EEA supervisory authorities are available from the European Data Protection Board.

10. Cookies and Similar Technologies on the Website

The website and its providers may use cookies, browser storage, pixels, web beacons, IP addresses, and similar technologies for essential operation, preferences, analytics, security, and advertising. In regions where consent is required, non-essential technologies are used only after an appropriate consent choice. Rejecting non-essential technologies does not prevent access to the basic Service.

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect account data from children under 13. For users in the EEA, the age at which a child can provide consent for an online service varies by country and may be between 13 and 16. Where consent is the legal basis and a user is below the applicable age, authorization from a parent or guardian is required. We do not use personalized advertising for users we know are below the applicable age. A parent or guardian who believes a child provided personal data without proper authorization should contact us so we can review and delete it.

12. Security

We use reasonable technical and organizational measures designed to protect personal data, including encrypted network connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Third-Party Content and Links

The Service includes games and links provided by third parties. When you open third-party content, that provider may process data under its own privacy policy. Review the provider's notice before submitting personal data.

14. Changes to This Policy

We may update this Privacy Policy when the Service, our providers, or legal requirements change. We will post the revised policy here and update the effective date. We will provide an additional notice where required for a material change.

15. Contact Us

For privacy questions, requests, or complaints, contact Safal Sharma at safal.sharma.ss@gmail.com.