Privacy Policy

This page explains how CYNNX handles information when you browse the launcher, use a CYNNX account, or save progress through its shared account service.

Last updated: 11 October 2026

Information we handle

• Account and sign-in. When you use Google sign-in, Google and Firebase Authentication process your sign-in and may hold your email address, account identifiers, and technical sign-in information. CYNNX uses a stable account ID and an editable CYNNX username. We do not show your full email address in the launcher.
• Phantom. If you connect or link Phantom, we receive a Solana public wallet address and a signed message proving control of it. We store the linked public address with your account. We do not receive your private key, and connecting a wallet does not authorize a payment or mint.
• Game and app data. Participating games and apps can save data under your CYNNX account ID and their own ID. The contents vary by project and can include progress, settings, and other data described by that project. We also keep up to five recently opened games to power “Continue Playing.”
• Achievements and choices. If you use the achievement service, we may store verified awards and your choices about sharing a public profile, discovering developer offers, or preparing an optional NFT mint. These features start private. NFT minting is not currently enabled.
• Technical and security data. Our host and authentication provider process request information such as IP address, browser details, and timestamps. CYNNX uses short-lived, hashed IP-based rate-limit records to help prevent abuse. We do not put passwords or wallet private keys in CYNNX game saves.

Why we use it

We use this information to sign you in, show your chosen username, connect participating games and apps to the same account, save and restore each project’s data, show recent launches, operate optional achievements, respond to support requests, and protect the service. Where applicable, these activities rely on providing the service you request, our legitimate interest in operating and securing it, or your choice to enable optional sharing. You can withdraw an optional sharing choice in the achievement settings.

Cookies and storage on your device

CYNNX uses an essential, secure, HTTP-only session cookie to keep you signed in; it can last up to five days unless you sign out or the session is revoked. A short-lived cookie supports Phantom sign-in challenges. The browser also uses temporary session storage for the secure return to a game, and local storage for recent-game navigation and account-specific interface state. Some games and apps use their own device storage and explain it separately. We do not use advertising cookies on the CYNNX launcher.

Who receives information

We use Google/Firebase for authentication and account-linked data, and Netlify to host the site and run its account API. A participating game or app receives a scoped sign-in and access to its own account data; it does not receive another project’s save through the shared progress API. A verified game identity adapter may receive linked public wallet addresses where its integration requires them. We do not make your email or wallet address part of your public CYNNX profile.

Achievements stay private unless you turn on public sharing. If you do, someone with your public profile link can see the active achievements made available there. Developer offer discovery is a separate choice. If NFT minting becomes available, it will require a separate approval for a specific achievement and wallet; a blockchain transaction, wallet association, and published metadata may remain public even if you later change your CYNNX settings. We do not currently sell your personal information or use the launcher for targeted advertising.

How long we keep it

Account profiles, linked wallets, per-project saves, and achievement records are kept while the account or relevant feature is in use, unless you request deletion or law requires a different period. Signing out revokes access but does not delete your saved progress. Temporary sign-in challenges, tickets, and rate-limit records have short expiry times and are configured for deletion after they expire. Hosting and authentication providers keep technical logs under their own retention practices.

Your choices and requests

You can change your CYNNX username in your account panel, sign out across participating games, and change achievement sharing choices in Achievements & Rewards. To request access, correction, export, or deletion of data held by CYNNX, email hello@cynnx.com. We may need to verify that the account is yours before acting. There is not yet a self-service account-deletion button. Rights and exceptions depend on where you live; where applicable, you may also complain to your local data-protection authority.

Security and international processing

We use HTTPS, restricted account APIs, and provider access controls to protect data, but no online service can promise perfect security. Google/Firebase and Netlify may process data outside your country. Their published privacy and data-processing information explains their safeguards. You can read Firebase’s privacy information and Netlify’s privacy notice.

Changes

We may update this policy as CYNNX’s features change. We will change the date above and give additional notice when a change materially affects how we use your information. Contact hello@cynnx.com with privacy questions.