Privacy & cookies
What we collect, why, and what you can do about it. Last updated September 23, 2026.
Who we are
GrowSnake ("we") runs this website. Questions or requests about your data: [email protected].
What we collect
| Data | Why | Kept for |
|---|---|---|
| Username, email, email verified status | Run your account, sign you in, send verification and password reset codes | While your account is open |
| Password | Sign you in. Stored only as an Argon2 hash, we can never see it | While your account is open |
| Google account ID and email (only if you use Google sign-in) | Link your Google login to your account | While linked |
| Balance, deposits, withdrawals, the GrowIDs you use, bets, game seeds, arena rounds | Provide the games, pay out winnings, prevent fraud, meet legal duties | Up to 5 years after your last activity |
| Profile picture, bio, chosen color and whether your stats are public | Your public profile. Other players can see your picture, bio and color, and your stats unless you hide them. Pictures are re-encoded on upload, so the original file and its metadata (such as location) are never kept | Until you change or remove them, or staff remove them |
| Transfers you send and receive (the other player, amount, fee, time) | Move locks between players, prevent fraud | Up to 5 years after your last activity |
| Chat messages | Public chat. Other players can see them | While your account is open, or until removed by staff |
| Verification codes | Prove you own your email. Stored only as one-way hashes | Expire after 10 minutes |
| IP address, device and browser details, sign-in times | Security, rate limiting and abuse prevention | IP counters last up to 1 hour; server logs up to 30 days |
We don't sell your data, show ads or use analytics or tracking. We never display your email to other players.
Legal basis
We process account, wallet and game data to provide the service you signed up for, security data because we have a legitimate interest in keeping the site safe, and financial records where the law requires us to keep them.
Cookies and local storage
| Name | Type | Purpose | Lasts |
|---|---|---|---|
| __Host-session | Essential | Keeps you signed in | 7 days |
| __Host-csrftoken | Essential | Protects forms against cross-site attacks | 1 year |
| gs-chat-open | Essential | Remembers whether you had the chat panel open | Until you close the tab |
We only store what the site needs to work, so there is nothing optional to turn off and no consent banner to click through. Clearing your browser data removes all of it, and signs you out.
Who we share data with
Cloudflare delivers and protects this website, so it processes your IP address and requests. Google receives your sign-in request if you choose Google sign-in, and serves the fonts on this site, which means your browser sends your IP address to Google when loading pages. Our email provider delivers verification and reset codes. We may share data with authorities when the law requires it. Some of these providers may process data outside your country under their own safeguards.
Security
Passwords are hashed with Argon2, codes are hashed and expire quickly, traffic between your browser and our network uses HTTPS, and sign-in, reset and chat are rate limited. No system is perfectly secure; tell us right away if you think your account was accessed without permission.
Your rights
You can download a copy of your data from Settings, fix your email there, and ask us to delete your account. Some records, like transactions, may have to be kept for the period above even after closing an account. Depending on where you live you may also object to processing or complain to your data protection authority.
Age
GrowSnake is for adults 18 and over only. We close accounts we learn belong to minors.
Changes
If we change this policy we'll update the date at the top, and tell signed-in players about important changes.