Effective date: September 28, 2026
This page describes the planned and implemented handling for the My 9 Games Template site at www.my9gamestemplate.com. The final public policy should be reviewed against the actual deployment, the operator’s business, and the laws that apply where visitors live. It is a practical description, not legal advice or a substitute for local legal review.
Analytics run by default. You can turn them off at any time.
What the tool stores in your browser
When you add games, the browser saves a small draft in Local Storage on the device you are using. It contains a version number, nine grid positions, catalog game IDs and names, cover-image references, basic release details, and an update time. The draft lets you return to your board after a refresh without signing in. It is not copied to a My 9 Games account because no user account or board database is part of this version.
The application also remembers whether you have turned analytics off in browser storage. Essential storage is used for these two purposes: restoring your grid and remembering your analytics setting. If you clear site data, use private browsing, change browsers, or switch devices, the draft or setting may disappear. Choose Start over in the tool to clear the nine-game draft from this browser. You can use the privacy control above to turn analytics off or back on.
Game searches and catalog information
When you search, the text you enter and the search request’s technical details are sent to this site’s Cloudflare Worker so it can look up matching games. The Worker sends the title query to the configured catalog provider, RAWG by default, using credentials configured privately by the operator. The retained IGDB integration sends requests through Twitch’s developer service when the operator selects that provider. A short-lived in-memory cache can temporarily hold matching results to reduce repeat requests. The app does not save search phrases or finished boards to a persistent game database.
The search endpoint receives the connecting IP address provided by the hosting layer for temporary rate limiting. A small, in-memory counter is retained for approximately one minute to prevent abusive bursts; it is not a visitor account or long-term profile. Cloudflare may process IP addresses, request paths, security signals, and diagnostic records to operate and protect the website. Exact log availability and retention depend on the hosting configuration and Cloudflare services enabled by the operator.
Game covers are requested from the catalog image host through a restricted first-party image route, then cached by the hosting infrastructure. The route accepts only image identifiers in a constrained format and does not accept arbitrary image URLs. The catalog response can include a title, release year, platform names, and cover identifier. These fields are used to populate the visible grid and the image that you ask the browser to generate.
Image creation and sharing
When you choose Generate image, the browser draws the selected catalog covers and labels on a canvas and creates a PNG locally. The site does not upload that PNG for rendering or store it in a public gallery. The downloaded file is under your control, and any information visible in it may be personal. If you share it through a device share sheet or post it on another service, that service’s own privacy terms apply.
The share control uses the browser’s Web Share capability when available. If the browser does not support sharing a file, the tool offers a download and copies the site link where clipboard access is permitted. No public link to your specific grid is created.
Google Analytics and Microsoft Clarity
Google Analytics 4 and Microsoft Clarity are built into this site and their scripts run by default when you visit. There is no analytics pop-up. Use the control above to turn analytics off; that setting is saved in your browser, and the page reloads so the change applies. A browser that sends a Global Privacy Control or Do Not Track signal is treated as opted out.
Google Analytics may receive page and interaction events such as a search being made, a game being selected, a grid being completed, or an image being generated or downloaded. The implementation is designed not to send the search text, game titles, IP address, exported image, or full set of selections as event parameters. Google may process device, browser, interaction, and online identifier information under its own terms. Configuration, retention controls, and any regional consent settings should be reviewed in the operator’s Analytics account before launch.
Microsoft Clarity may process session interaction signals, heatmaps, and session replays to help the operator see where the interface is difficult to use. Search input and the selected-games area are marked to be masked, and default sensitive text masking remains enabled. Masking reduces what a replay can show but does not replace review of Clarity’s current capture settings. Clarity can use cookies or similar storage to recognize a browser during a session or across visits under its own terms.
For information about their independent data handling, see Google’s and Microsoft’s privacy materials and Clarity documentation. The site operator does not control the vendors’ processing once data is sent to them. This site does not use Search Console or Bing Webmaster Tools to track an individual’s actions in the editor.
Search Console and Bing verification
Google Search Console and Bing Webmaster Tools are verified using site-verification meta tags in the HTML head. Verification allows an authorized site owner to view search indexing status, queries, and broad search performance in those services. It is not a visitor-facing behavior analytics script. Search engines may process normal crawler requests under their own policies.
Cookies and similar technologies
The core tool does not need a third-party advertising cookie. Essential browser storage is used for the grid draft and analytics setting. Google Analytics and Microsoft Clarity may use cookies or similar technologies unless you turn analytics off or your browser sends a privacy signal. Cloudflare may use strictly necessary security or performance signals as part of delivering the site. The services and exact storage behavior can change, so the production owner should periodically inspect vendor settings and this policy.
Most browsers provide controls to review, block, or delete cookies and local data. Blocking essential local storage can prevent a draft from being restored, but the search and image-generation features should remain available for the current page session. A browser privacy mode may remove saved data when the session ends.
Your choices and privacy rights
You can turn analytics off or back on, clear your draft, or use the tool without analytics. With analytics disabled, the main search, selection, arrangement, and export functions remain available. If applicable law gives you rights to access, correct, delete, restrict, or object to personal information, you may contact the published operator email to make a request. The operator may need to verify a request and may be subject to legal exceptions.
Global Privacy Control and Do Not Track signals are honored by leaving analytics disabled for that visit, even though analytics are otherwise on by default. You can also turn analytics off using the control above. The production operator should confirm that this default and the deployed privacy controls follow the rules applicable in each region it serves; some regions may require prior opt-in before analytics scripts run. No personal information is sold by this tool as part of the planned version-one operation.
International processing and retention
Cloudflare, RAWG, Twitch, IGDB, Google, and Microsoft operate services in multiple countries. When a request or analytics event is handled by them, information may be processed outside your home country under the safeguards and terms those providers make available. The operator should review current vendor contracts, transfer mechanisms, regional settings, and available data-processing terms before serving visitors in regulated jurisdictions.
The browser draft remains until you clear it, the website removes it, or browser storage is cleared. Search cache entries and rate-limit counters are intended to be short-lived in the Worker’s memory. Infrastructure and vendor records follow the retention settings of the relevant provider and plan. Analytics retention, access, and deletion settings should be configured in the relevant Google and Microsoft accounts by the site operator.
Children and teenagers
The site is designed for a general gaming audience and is not directed to children under 13 or to minors as a targeted audience. It does not ask visitors to create profiles, submit personal stories, or upload images. Visitors should not include sensitive personal information in search fields or in content they choose to share. If the operator learns that personal information from a child was collected contrary to an applicable law, the operator should take steps required by that law.
Policy updates and contact
This notice may be updated when the product, vendors, or legal requirements change. The effective date at the top will be revised when an update is published. Material changes to analytics or storage should be reflected in the privacy controls as well as this page. Check this page before relying on an earlier version.
For privacy questions or requests, use the monitored address published here by the site operator. The production owner must add a monitored privacy contact before launch.. Operator: not yet supplied for this development preview.