🔒 PRIVACY POLICY
Last updated: 20 March 2026 · DSnakes Community · Applies to: games.dsnakes.com · dsnakes.com · kenionek.dsnakes.com
📋 Contents
1. Who We Are
DSnakes Gaming (games.dsnakes.com) is part of the DSnakes community platform operated by Kenionek, established in 2012. This privacy policy applies to:
- games.dsnakes.com — Gaming hub (this site) · optional account login, global leaderboards, comments
- dsnakes.com — Main community site · no login, localStorage only, no personal data collected
- kenionek.dsnakes.com — Kenionek artist page with music (YouTube embed) · no login, no personal data collected
- community.dsnakes.com — Community forum powered by MyBB · has its own separate privacy policy governed by MyBB
Data Controller: Kenionek / DSnakes Community
Contact: info@dsnakes.com · kenionek@dsnakes.com
2. What Data We Collect
2.1 Data you provide voluntarily
- Display name — chosen during registration
- Email address — used for login and account recovery
- Password — stored as a secure hash (bcrypt), never in plain text
- Profile information — optional bio, avatar
- Comments — text you post in game community sections
2.2 Data generated automatically
- Game scores — high scores submitted to leaderboards
- Achievements — unlocked in-game achievements
- Play statistics — number of games played, total XP
- Session data — login tokens (JWT), stored as HTTP-only session references
2.3 Guest play (no account)
If you play without an account, we assign a randomly generated guest name (e.g. "DSNeonViper247") stored only in your browser's localStorage. No personal data is collected. Scores are saved locally on your device only and are not transmitted to our servers.
2.4 Data we do NOT collect
- We do not collect IP addresses for profiling purposes
- We do not use advertising cookies or ad networks
- We do not sell or share your data with third parties for marketing
- We do not use fingerprinting or cross-site tracking
3. How We Use Your Data
| Purpose | Legal basis (GDPR) | Data used |
|---|---|---|
| Account creation & login | Contract (Art. 6.1.b) | Email, password hash, display name |
| Global leaderboards | Legitimate interest (Art. 6.1.f) | Display name, game scores |
| Achievements & XP | Legitimate interest (Art. 6.1.f) | User ID, achievement IDs |
| Comments & community | Legitimate interest (Art. 6.1.f) | Display name, comment text |
| Security & fraud prevention | Legitimate interest (Art. 6.1.f) | Session tokens, timestamps |
4. Cookies & Local Storage
4.1 Strictly necessary (no consent required)
| Name | Type | Purpose | Duration |
|---|---|---|---|
ds_access_token | localStorage | JWT login token | 30 days |
ds_refresh_token | localStorage | Session refresh token | 90 days |
dsnakes_guest | localStorage | Guest player name & ID | Permanent (local only) |
4.2 Functional (game saves)
| Name | Type | Purpose | Duration |
|---|---|---|---|
dsnakes_achievements_v2 | localStorage | Unlocked achievements | Permanent (local only) |
dsnakes_stats_v2 | localStorage | Game play statistics | Permanent (local only) |
dsnakes_leaderboard_v2 | localStorage | Local score backup | Permanent (local only) |
dsnakes_visited | localStorage | First visit detection | Permanent (local only) |
ds_pref_matrix | localStorage | Matrix rain preference | Permanent (local only) |
4.3 Third-party embeds
The music player on the lobby page embeds a YouTube playlist via an iframe. This is loaded only when you click the "OPEN" button — not automatically on page load. When you open the player, YouTube (Google) may set their own cookies according to Google's Privacy Policy. You can avoid this by not opening the music player.
4.4 Managing your cookies
You can clear all locally stored game data at any time:
- Go to your Profile page → Settings → "Clear All Data"
- Or in your browser: DevTools → Application → Local Storage → clear dsnakes entries
- Browser settings → Clear browsing data → Local storage
5. Third-Party Services
5.1 Google Fonts
We load Orbitron, Exo 2 and Press Start 2P fonts from Google Fonts. Google may log the request. See Google Privacy Policy.
5.2 Account login
When you register or log in with email and password, your credentials are processed entirely by our own server and database — no third-party identity provider is used.
5.3 MyBB (community.dsnakes.com)
The community forum at community.dsnakes.com runs on MyBB, an open-source forum software. That site has its own user accounts, cookies and privacy practices separate from this gaming site. Please refer to the forum's own privacy notice when registering there.
5.4 YouTube
The music player optionally embeds YouTube content. YouTube is operated by Google LLC. The embed is not loaded until you actively open the player.
6. Data Storage & Security
- Our database runs on a self-hosted VPS server with encrypted connections
- Passwords are hashed with bcrypt (cost factor 12) — never stored in plain text
- Login tokens are JWT with short expiry (30 days) and refresh token rotation
- The server uses HTTPS/TLS for all data transmission
- Access to the database is restricted to the server itself (localhost only)
- We do not transfer your data outside the EU/EEA without appropriate safeguards
7. Your Rights Under GDPR
As an EEA resident, you have the following rights under the GDPR:
| Right | What it means | How to exercise |
|---|---|---|
| Access (Art. 15) | Get a copy of all data we hold about you | Email info@dsnakes.com |
| Rectification (Art. 16) | Correct inaccurate personal data | Profile page or email us |
| Erasure (Art. 17) | Request deletion of your account and data | Email info@dsnakes.com |
| Restriction (Art. 18) | Limit how we process your data | Email info@dsnakes.com |
| Portability (Art. 20) | Receive your data in a machine-readable format | Email info@dsnakes.com |
| Object (Art. 21) | Object to processing based on legitimate interest | Email info@dsnakes.com |
| Withdraw consent | Stop optional data processing at any time | Profile settings or email us |
We will respond to all requests within 30 days as required by GDPR.
8. Data Retention
- Active accounts: Data kept as long as your account is active
- Inactive accounts: Data deleted after 3 years of inactivity
- Deleted accounts: Personal data removed within 30 days; anonymised score data may be retained
- Comments: Replaced with "[deleted]" when you delete them; removed completely on account deletion
- Local data (localStorage): Stored only in your browser until you clear it
- Expired tokens: Automatically purged from our database every hour
9. Children's Privacy
DSnakes Gaming is intended for users of all ages. However, we do not knowingly collect personal data from children under 13 (or under 16 in certain EU member states) without verifiable parental consent.
Children under 13 may play as a Guest without creating an account — no personal data is collected in this mode.
If you believe a child has provided us with personal data without appropriate consent, please contact us at info@dsnakes.com and we will delete the data promptly.
10. Contact & Complaints
CONTACT THE DATA CONTROLLER
DSnakes Community / Kenionek
Email: info@dsnakes.com
Website: dsnakes.com
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your national data protection authority:
- Belgium: Gegevensbeschermingsautoriteit (GBA)
- Netherlands: Autoriteit Persoonsgegevens
- Other EU countries: Find your national DPA
This policy was last updated on 20/03/2026. We may update it periodically — check back for changes.
© 2012–2026 DSnakes Community · games.dsnakes.com