Skip to content

Privacy Policy

Last updated:

This Privacy Policy describes the Play Simply Games website and separately explains our games' privacy practices.

Interpretation and Definitions

Company – Violet Rome, LLC, 5 Tomalyn Hill Road, Montville, NJ 07045 ("we," "us," or "our").

Website – Play Simply Games, accessible from https://playsimplygames.com. Personal Data means information relating to an identified or identifiable individual. Our games are separate applications; website collection should not be read as a description of data collected inside every game.

Types of Data Collected

  • Newsletter signup: the email address you submit. Addresses are trimmed and converted to lowercase; duplicate newsletter addresses are not saved again.
  • Support and contact: your name, email address, selected reason for contacting us, and message. Please do not include passwords, payment details, or other sensitive information.
  • Submission records: we save the submission time, type, and notification delivery status and retry information alongside your submission in a PostgreSQL database. The password-protected studio inbox displays signups and contact messages. Failed email delivery does not delete your submission.
  • Technical requests: servers receive request information such as IP addresses to deliver the site. Our API uses IP-based, temporary rate limiting to reduce form and login abuse. Application request logs record request identifiers, methods, URL paths without query strings, response status, and timing; they are configured not to log form contents. Hosting and provider logs are separate.

How We Use Your Information

We use contact information and messages to receive and respond to inquiries, record newsletter interest, notify the owner of submissions, and operate and protect the website. Newsletter communications, if sent, are handled manually; this website does not automatically send campaigns or add you to a Resend marketing audience. Signing up is not necessary to browse the website.

Cookies and Website Analytics

Administrator sign-in sets an essential simply_admin cookie for the admin API, with a maximum lifetime of 12 hours. It is HttpOnly, uses SameSite=Strict, and is marked Secure on HTTPS requests. The database stores a hash of the session token and its expiry. Logging out removes the session and clears the cookie; expired sessions are rejected. Public newsletter and contact forms do not require this cookie or a visitor account.

The application contains optional Replit analytics hooks. If analytics is enabled for the published site and Replit's tracker is present, it can record pageviews and events for App Store clicks, successful newsletter signups, and successful contact submissions. The custom events contain only fixed game and placement labels, not your name, email address, or message. They do nothing when the tracker is absent. See Replit's Project Analytics documentation.

No advertising pixels or visitor preference cookies are configured in the website application. The forms use server-side validation and rate limiting rather than a third-party CAPTCHA. These statements do not describe unrelated websites or services you visit through links.

Third-Party Services

  • Replit: provides website/API hosting, database infrastructure, and the connection used to send notification requests to Resend. Submitted information is stored and processed through this infrastructure. Provider backups and operational records may persist separately from live records. See Replit's Information Security documentation and database recovery documentation.
  • Resend: processes notification emails to the owner's inbox. A newsletter notification includes your email address and submission time. A support notification includes your name, email, selected reason, message, and submission time, and uses your email as the reply-to address. Resend processes email content and delivery records; the receiving mailbox also holds an email copy. See Resend's Privacy Policy and Data Processing Addendum. These owner notifications are separate from any manual newsletters.
  • Google Fonts: the website loads Fredoka and Nunito from Google's servers. Font requests send Google your IP address, requested resource URL, and HTTP headers such as browser/operating-system information and referrer information subject to browser policy. Google states that its Fonts API does not set or log cookies and does not use this information for user profiles or targeted advertising. See Google Fonts' privacy FAQ and Google's Privacy Policy.

Our Games, Including Peb World

Our currently published apps, including Peb World, do not collect data themselves; Apple separately collects information through the App Store. This does not mean that Apple collects no data, nor does it apply to information you voluntarily submit through this website.

Apple describes its collection of account, purchase, download, browsing, and device information in App Store & Privacy. Apple may provide developers with aggregate usage information and purchase reporting. Please consult each app's current App Store privacy information for app-specific details.

Information Sharing

Website submissions are available to the owner through the authenticated studio inbox and notification emails, and are processed by the providers described above.

Data Retention

No fixed retention periods are currently set for newsletter signups, support messages, or email copies. The website has no automatic expiry or deletion schedule for submissions. Delivery retries retain saved submissions. Admin sessions expire after 12 hours; expired session rows are cleaned up when a new admin session is created.

Email copies, provider delivery records, logs, and backups are separate from live website records and may remain after a live record is removed.

Your Rights and Requests

Contact us through the website support form to request access, correction, deletion, or removal from manual newsletter communications. Applicable rights depend on your location and circumstances. There is no public account-deletion screen or automated unsubscribe endpoint on this website.

Children's Privacy

If you believe a child has submitted personal information through this website, contact us using the support form. Please consult each app's current App Store listing for its age rating and app-specific privacy information.

Data Security

The website validates form inputs, rate-limits submissions and admin login attempts, and restricts the studio inbox to authenticated administrators. Session tokens are hashed in the database. These controls do not eliminate all risks; no method of transmission or storage can be guaranteed completely secure.

Changes to This Policy

We will post changes to this Privacy Policy on this page and update the date shown above.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, you can contact us by visiting the support page on our website at https://playsimplygames.com, or you can email us through the contact form on our site.