Privacy Policy
Last updated: 2026-10-09
QuickGamesArena ("we") describes here how we handle information about users of quickgamesarena.com, the games offered there (TWINFRONT, CANNONFRONT, DUELFRONT and others) and their apps (together, "the Service"). If this English version and the Japanese version differ, the Japanese version prevails.
1. Operator
- Operator: QuickGamesArena (operated by an individual in Japan)
- The operator's name and address will be disclosed without delay upon request from the person concerned.
- Contact: https://quickgamesarena.com/contact/
2. Information we collect
| Category | Details | How |
|---|---|---|
| Account | Username, email address, password (stored hashed; we cannot see it), display name | When you register, sign in or edit your profile |
| Sign in with Google / Apple | Identifier, email address, name, and whether the email address is verified (we do not store other data the service sends). For Sign in with Apple, a token used to revoke the link with Apple when you delete your account (stored encrypted) | When you sign in with Google or Apple |
| Profile | Bio, profile image, avatar settings, uploaded images | When you set them |
| Guest identifier | A random key that identifies people playing without an account (we store only a hash) | Saved in a cookie when you first play |
| Play records | Match results, ratings, rankings, replays, story progress, achievements, clans and friends | When you play |
| Content you write | Chat, forum posts, messages, reports | When you send them |
| Purchases | Pass (subscription) status and period, purchase records. For purchases in an app store, the store transaction number (on Google Play, the purchase token and order number) and a random number that links the purchase to your account (passed to the App Store at purchase). Card and payment details are handled by the payment provider (Stripe or the app store); we do not receive them | When you purchase, renew or cancel |
| Enquiries | Name (optional), email (optional), message, your environment, IP address | When you contact us |
| Connection records | IP address, browser type (user agent), referrer, pages viewed, time | Automatically when you use the site or games |
| Notification address (apps) | An identifier for delivering notifications (a Firebase Cloud Messaging registration token or app installation ID), device type (iOS / Android), which app, language and settings for each notification category | When you allow or configure notifications in an app |
| On your device | Settings (volume, controls, graphics), display name, reconnection data, a copy of story progress | Stored in your browser; some of it is never sent to us |
We do not track you for advertising, share data with advertising networks, or collect location data.
Voice input
Voice input in chat works only while you press the microphone button. Your browser or device processes the audio with its speech recognition, and some browsers send it to their provider (for example, Google). We do not record or store audio. Recognised text is handled like ordinary chat.
3. Purposes
- Providing the Service (sign-in, matchmaking, showing results and rankings, saving story progress, etc.)
- Processing pass purchases, renewals and cancellations, and managing the free allowance
- Handling cheating and abuse, reviewing reports, restricting use, and keeping the Service safe
- Answering enquiries and sending important notices
- Investigating bugs, monitoring load and improving the Service (including non-identifying statistics)
- Complying with the law
4. Cookies and device storage
| Name | Purpose | Lifetime |
|---|---|---|
| sessionid | Keeps you signed in | 30 days |
| csrftoken | Prevents forged requests | 1 year |
| django_language | Display language | 30 days |
| quickcms_guest | Identifies people playing without an account | 1 year |
| visitor_id | Visit statistics (random number) | 1 year |
| twinfront_session / cannonfront_session / duelfront_session | Identifies your connection to a game server | 30 days |
We also store game settings and reconnection data in your browser (localStorage / sessionStorage). You can delete cookies and storage in your browser settings, but you may then lose records made as a guest.
5. Sharing and external services
We do not provide your personal information to third parties except with your consent, when required by law, or when necessary to protect life, body or property.
We use the following external services to provide the Service. Each handles information under its own privacy policy.
| Service | Information sent | Purpose |
|---|---|---|
| Stripe (Stripe, Inc. and affiliates; USA and elsewhere) | A number identifying you and what you purchase (which pass or which thank-you item). You enter payment details directly with Stripe | Web payments for passes and thank-you items |
| Apple (App Store), Google (Google Play), Microsoft (Microsoft Store) | Purchase information in each store, and a random number that links the purchase to your account (App Store only; it does not identify you) | In-app purchases |
| Google, Apple (sign-in) | Information needed for sign-in | Signing in with those services |
| jsDelivr (CDN), Google Fonts | Network requests needed to display pages (IP address, browser type) | Page components and fonts |
| Your browser's speech recognition provider | Audio while you use voice input (depends on the browser) | Voice input |
| Google (Firebase Cloud Messaging), Apple (Apple Push Notification service) | The notification address, notification text (invitations, friend requests, match starts, sortie hours, etc.; invitation and friend-request notifications include the other player's display name), category, recipient's account number, app and URL to open in the app | Push notifications and checking the recipient and preferences |
The Firebase notification SDK uses an app installation ID to deliver notifications. We use Firebase for notifications and do not use Google Analytics. See https://firebase.google.com/support/privacy for details of the identifiers and other information Firebase processes.
Providing personal data to third parties in foreign countries
Among the services above, we may provide your personal data to the following third parties located outside Japan (Article 28 of the Act on the Protection of Personal Information). We do so only when you use the relevant features (web purchases, in-app purchases, sign-in and push notifications). We ask for your consent to this provision together with your consent to this Privacy Policy on the consent screen before playing and on the registration screen.
| Recipient | Country | Information provided |
|---|---|---|
| Stripe, Inc. and its affiliates | USA and elsewhere (see the note below) | Your account number, what you purchase (which pass or which thank-you item), and the site identifier |
| Apple Inc. | USA | A random number that links purchases to your account, transaction information used to verify purchases, the token used to unlink Sign in with Apple, and the notification information in the table above (notifications to the iOS apps, passed through Google) |
| Google LLC | USA | Purchase tokens used to verify purchases, information needed for sign-in, and the notification information in the table above |
- Data protection system of the country: The United States has no comprehensive federal data protection law, but it has sector-specific federal laws and state laws (such as the California Consumer Privacy Act). For details, see the survey of foreign data protection systems published by the Personal Information Protection Commission of Japan: https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku
- Measures taken by the recipients: Each company publishes its privacy policy and handles personal information in accordance with it. Stripe: https://stripe.com/privacy, Apple: https://www.apple.com/legal/privacy/, Google: https://policies.google.com/privacy
- Note (when the country cannot be identified): In addition to the United States, Stripe may handle information in countries where its affiliates and service providers are located. Because this depends on Stripe's operations, we cannot identify all of those countries at the time of provision. Please refer to Stripe's privacy policy for reference.
External communications for jsDelivr, Google Fonts and your browser's speech recognition take place between your browser and the provider without passing through our servers. Whether speech is processed on your device or sent to the provider depends on your browser and device.
Our servers are located in Japan.
6. Retention
| Information | Period |
|---|---|
| Account, profile, play records | Until you delete your account |
| Guest records | 2 years after you last played, then deleted (except those with an active subscription or order) |
| Sign-in sessions | 30 days; expired records are deleted regularly |
| Reported messages | 30 days (up to 5,000) |
| Lobby chat | 24 hours (up to 100 messages) |
| Room chat | Not stored (kept only in the game server's memory during the match) |
| Connection records (visit statistics) | 90 days |
| Server access logs | 14 days |
| Audit records (for abuse handling) | 1 year |
| API usage records (for auditing) | 1 year |
| Match results (game server copies) | 180 days after they are sent to the site |
| Abuse evidence | 365 days (evidence that must be preserved for an investigation or response is kept until the preservation ends) |
| Enquiries | 1 year after we finish handling them (1 year after receipt for enquiries we have not handled) |
| Notification address (apps) | Until you sign out of the app or delete your account; addresses that stop working are deleted after 90 days; records of sent notifications are kept for 30 days |
| Purchase and payment records | As required by law (up to 7 years) |
| Backups | 14 days |
7. Deleting your account
You can delete your account at any time.
- Web: https://quickgamesarena.com/auth/account/delete/ (sign in first; if you play without an account, open it in the browser you play in)
- Apps: "Delete account" in the settings screen
When you delete your account, we delete your sign-in information, profile, display name, avatar, ratings and rankings, friends, notifications, messages, story progress and similar data. Match results remain as part of your opponents' records, but your name is replaced with "Withdrawn player" so they are no longer linked to you. Forum and chat posts remain as part of conversations, shown as written by "Withdrawn player". Display names left on game servers are erased by our operations in due course.
We keep purchase and payment records required by law, and reports and moderation records needed for safety, only for the required period.
A pass purchased on the web is cancelled when you delete your account. Passes purchased in an app store are not cancelled automatically; cancel them in the store's settings.
If you cannot sign in, ask us through the contact form. We will delete the account after confirming your identity.
8. Your requests
You may request disclosure, correction, addition, deletion, suspension of use or suspension of third-party provision of your personal information that we hold. Contact us through the form; we will respond in accordance with the law after confirming your identity.
9. Security
We protect information with encrypted connections (HTTPS), hashed passwords and sign-in keys, and restricted access (backups are kept for only 14 days on a server that only a limited number of people can access).
10. Children and minors
The Service is for people aged 13 and over. Children under 13 may not use it. Users under 18 must have parental consent to use the Service, and also to buy passes or thank-you items. If we learn that we have collected information from a child under 13, we will delete it promptly.
11. Changes
We will announce changes to this policy in the Service, and give clear notice of important changes before they take effect.