Privacy policy

Last updated: November 1, 2026

Policy details still need completion: The operator has not provided a legal name, privacy contact, intended age range, or launch regions. The site also loads third-party scripts whose data practices have not been verified. Complete and review these details before relying on this policy as a final notice.

Who operates IOTA

IOTA is operated by [add the operator's legal name and country]. For privacy questions or requests, contact [add a monitored privacy email address].

The IOTA catalog

IOTA lists free games. The public catalog does not require a player account, and IOTA does not process payments. Game installers are hosted by an external file host, not by IOTA. IOTA does not store or scan installer files.

Information this site processes

Saved games: If you save a game, its identifier is stored in your browser's local storage. It remains there until you remove it or clear your browser data.
Download requests: When you request a game download, IOTA records the game and request time to count requests. A request does not show whether a download completed. These records are deleted when the related game record is deleted.
Administrator sign-in: The publisher dashboard uses a secure, HttpOnly session cookie for administrator access. It expires after 12 hours. Failed sign-in attempts are rate-limited using a keyed hash of the connecting IP address; the raw address is not stored in that rate-limit table. Old attempt records are cleaned up during later failed sign-ins.
Service requests: Cloudflare delivers and hosts the site and database. Cloudflare may process technical information such as connection and request data to provide and secure its services, subject to its own terms and privacy disclosures.

Hosting, storage, and security

The website and catalog database use Cloudflare Pages, Pages Functions, and D1. When you request a download, IOTA redirects your browser to the file host configured for that game. The file host then handles your connection and any download under its own terms and privacy policy. Review Cloudflare's and the relevant file host's current privacy disclosures for details about their processing, locations, and retention.

Advertising and third-party scripts

The site currently loads third-party scripts from nap5k.com and quge5.com. Those scripts may collect or receive technical information about your browser and visit, and may use cookies or similar technologies. IOTA has not verified their operators, specific data practices, retention periods, or available opt-out controls. Their processing is governed by their own terms and privacy notices. Separately, IOTA's Google advertising integration is not configured while no publisher ID is set. Do not assume that this disables the two scripts listed above.

Your choices and rights

You can remove saved-game preferences by removing them in the site or clearing this site's local storage in your browser. Depending on the laws where you live, you may also have rights to access, correct, delete, restrict, or object to certain processing, or to complain to a data-protection authority. Contact [add a monitored privacy email address] to make a request. The operator must add a working contact before publication.

Children and changes

The operator has not provided IOTA's intended age range or the regions it serves. Add the applicable age guidance and safeguards before launch. If this policy changes, the updated version will be posted on this page with a revised “Last updated” date.