PRIVACY

Last updated: June 20, 2026

This statement describes what the FRed Lobster Arcade (operated by FieldLabSolutionsLLC) collects, why, and what your options are.

1. WHAT WE COLLECT

When you create an account, we store:

• Required: a username, a password (stored as a one-way hash — even we can't read it), and your 3-letter initials.
• Optional: email address, real name, location, short bio, Facebook URL, and an avatar image. You can leave any of these blank, fill them in later, change them, or clear them from your profile page.

When you play, we store:

• The scores you submit, along with the game played, the round reached, the date, the initials submitted, and (if logged in) a link back to your account.
• If you play logged out as a guest, we store the score with the initials you entered, but no account is linked.

When you log in, we issue a session token stored as a small login cookie on your browser (see Cookies below). We do not store IP addresses or browsing history beyond the standard web server access logs maintained by our hosting provider.

2. WHY WE COLLECT IT

Strictly to run the site: to identify your account, to display your profile and avatar, to associate your scores with you on the leaderboards, and to keep you logged in across visits. We don't use this information for marketing, profiling, advertising, or anything else.

3. WHAT'S PUBLIC

If you create an account, the following becomes publicly visible to anyone who visits the site: your username, initials, avatar, and any optional profile fields you choose to fill in (real name, location, bio, Facebook link), along with your scores on the leaderboards. Your email and password are never displayed.

4. COOKIES

We use one cookie: a login session cookie (named fla_sess) that keeps you signed in for up to 30 days. It contains a random token, not your password or personal data. We do not use analytics cookies, advertising cookies, or any third-party trackers. The cookie is set with HttpOnly and SameSite=Lax flags, and is sent only over the secure connection to the Arcade.

5. WHO WE SHARE WITH

Nobody, with one practical exception: our hosting provider (currently Hostinger) stores the database and serves the site, so they necessarily have access to the data at the infrastructure level. We do not sell or share data with advertisers or other third parties.

We may disclose information if required to do so by law, or to protect the rights, property, or safety of the Arcade, its users, or others.

6. HOW LONG WE KEEP IT

Account information and scores are kept for as long as your account exists. Session tokens expire 30 days after they're created. Hosting provider access logs follow that provider's standard retention policy.

7. YOUR CONTROLS

• View and edit: see and change everything on your account from your profile page.
• Delete: from your profile page, click "Delete My Account". You'll be asked to confirm with your username and password. This permanently removes your account, profile fields, and avatar image. Past score entries remain on the leaderboards under the initials they were submitted with, but are no longer linked to any account.

8. SECURITY

Passwords are stored using one-way bcrypt hashing. Logins use HTTPS. We take reasonable steps to protect your information, but no system is perfectly secure. If something happens, we'll let affected users know.

9. CHILDREN

The Arcade is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has registered an account, please contact us and we'll delete it.

10. CHANGES

We may update this statement over time. When we do, we'll update the "Last updated" date at the top. Material changes will be noted on the Arcade.

11. CONTACT

Questions about your data, or want a copy or deletion? Reach out via the FRed Lobster Social Club site, or contact FieldLabSolutionsLLC directly.