Last updated: Oct 5, 2026
Boxity.io (“Boxity,” “we,” “us”) is a free, browser-based platform where players join, play and create multiplayer games with no download.
This policy explains what information we collect when you use boxity.io and any related pages, games or services (the “Service”), why we collect it, who we share it with, and the choices you have. By using the Service you acknowledge this policy. If you do not agree, please do not use the Service.
You can play without an account. We collect only what the Service needs to run, stay safe and stay free.
| Category | What it includes | Source |
|---|---|---|
| Account data (optional) | Username, email address, hashed password, or a sign-in token if you log in with a third-party sign-in provider | You |
| Game and profile data | Display name, avatar, friends list, progress, stats, items, settings | You and your play |
| User content | Games, worlds, assets, scripts and descriptions you create or upload | You |
| Communications | In-game chat, messages, reports you file, and emails you send us | You |
| Device and technical data | IP address, browser type and version, operating system, device type, screen size, language, referring page | Automatically |
| Usage data | Pages and games visited, session length, clicks, crashes and performance logs | Automatically |
| Approximate location | Country or region, derived from IP address (never precise GPS location) | Automatically |
| Cookies and identifiers | Cookies, local storage, and advertising or analytics identifiers (see section 4) | Automatically |
We do not collect payment card numbers directly. If we offer purchases, payments are handled by a third-party processor, and we receive only a confirmation and limited transaction details.
We do not knowingly collect sensitive data (such as health, religion or biometric data). Please do not share it in chat or user content.
| Purpose | Legal basis (EEA/UK) |
|---|---|
| Run the Service: load games, host multiplayer sessions, save progress, keep you signed in | Performance of a contract |
| Host, display and share the games and content you create | Performance of a contract |
| Keep players safe: moderate chat and content, detect cheating, fraud, spam and abuse, enforce our Terms | Legitimate interests; legal obligation |
| Fix bugs, measure performance and improve games and features | Legitimate interests |
| Show advertising that keeps the Service free (section 4) | Consent where required; otherwise legitimate interests |
| Respond to support requests, reports and legal requests | Legitimate interests; legal obligation |
| Send service emails (security, account, policy changes) | Performance of a contract |
| Send optional updates or promotions | Consent (unsubscribe anytime) |
We do not sell your personal information for money. We do not use your data to make decisions that produce legal or similarly significant effects about you solely by automated means.
Boxity is free because it is ad-supported. We and our partners use cookies, local storage, pixels and similar technologies for these purposes:
Our partners may include advertising networks and ad-tech providers, analytics providers, hosting and content delivery providers, and sign-in providers. These partners may collect information directly from your browser under their own privacy policies.
Your choices. Visitors in the EEA, UK and Switzerland are shown a consent banner, and non-essential cookies are not set until you agree. You can change your choices at any time through the “Privacy settings” link in the site footer. You can also block or delete cookies in your browser and opt out of interest-based ads at optout.aboutads.info or youronlinechoices.eu. We honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing where required by law.
Where we use an industry consent framework, our current partner list is shown in the consent tool.
Some information is visible to other players by design: your username, avatar, profile, friends status, in-game chat, leaderboard entries, and any game or content you publish. Do not put personal details (real name, address, phone number, school) in your username, chat or games.
Chat may be automatically filtered and is logged so we can review reports and enforce our rules. Games on Boxity are created by players, not by us. A creator’s game may collect or display information inside that game; creators must not use games to collect personal information from players. Report any game that asks for personal information.
Boxity is intended for a general audience. We do not knowingly collect personal information from children under 13 (or under the minimum age of digital consent in their country, up to 16 in parts of the EEA) without verifiable parental consent.
For players under that age, we limit data collection to what is needed to run the game, show only contextual (non-personalized) ads, and restrict or disable free-text chat and account features. If you are a parent or guardian and believe your child has given us personal information, contact us at [email protected] and we will delete it. You can also contact us to review or stop further collection of your child’s information.
Who we share with. We share personal information only with: service providers who host, secure, analyze or support the Service under contract and only on our instructions; advertising and analytics partners as described in section 4; other players, for information you make public; authorities or other parties when required by law, to respond to valid legal process, or to protect the safety and rights of players, us or the public; and a buyer or successor if Boxity is involved in a merger, acquisition or sale of assets, who must honor this policy.
How long we keep it.
| Data | Retention |
|---|---|
| Account, profile and game data | Until you delete your account, then deleted within 30 days |
| Published games and content | Until you remove it or delete your account |
| Chat logs and reports | Up to 90 days, longer if needed for an open investigation |
| Technical and usage logs | Up to 12 months, then deleted or anonymized |
| Data we must keep by law | As long as the law requires |
Security. We use HTTPS encryption, hashed passwords, access controls and regular reviews to protect your data. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as the law requires.
International transfers. We and our providers may process data in the United States and other countries. When we transfer data from the EEA, UK or Switzerland, we use safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
Depending on where you live, you may have the right to:
To exercise a right, email [email protected] or use the account settings page. We may need to verify your identity, and we respond within 30 days (45 days where US law allows). You may use an authorized agent where the law permits. If we deny a request, you may appeal by replying to our decision.
California notice. In the past 12 months we collected the categories listed in section 2 (identifiers, internet activity, approximate geolocation, and user content) for the purposes in section 3. Disclosing data to advertising partners for cross-context behavioral advertising may count as “sharing” under California law; you can opt out through the “Do Not Sell or Share My Personal Information” link in the footer or by sending a GPC signal. We do not knowingly sell or share data of consumers under 16.
We may update this policy as the Service or the law changes. We will change the “Last updated” date above, and for material changes we will give notice on the site or by email before they take effect.
Questions, requests or complaints: