Privacy Policy
Last updated 9 October 2026
The short version
- Students: the games send us nothing about them. Profiles, nicknames, scores and progress are saved only in the browser on the device they play on.
- Account holders (adults): we keep your email address, a scrambled (hashed) password, an optional display name and your membership details — nothing more.
- Payments are handled by PayPal. We never see card or bank details.
- No ads, no advertising trackers, no selling or sharing of personal information.
Who we are · Students and the games · Students under 13 · Account holders · Website visitors · Cookies and storage · Who we share with · How long we keep it · Your rights · Contact
Who we are
X-Shooter, X-Typer and x-shooter.com are run by Safer Games Studios (leon jonathan dobree benson). We decide how the information described here is used (we are the "controller"). Questions or requests: support@x-shooter.com.
Students and the games
The games are built so that information about students stays on the device:
- Profiles, nicknames, avatars, scores, progress, badges and the teacher/parent dashboard are saved in the browser's own storage on the device where the student plays. The games never send them to us or to anyone else, and we can't see them.
- The games have no chat, no social features, no ads and no links to other websites.
- Like any website, our server receives the requests a device makes for the game's pictures, sounds and videos (see server logs). Those requests don't contain profile names or progress.
- Read-aloud voices. Words and messages are read aloud by the voices built into the device or browser. Most of these voices work on the device. A few browsers also offer online voices — for example Chrome voices whose names start with "Google", or voices marked "Online". With an online voice, the browser sends the text being read (a word, a short message, sometimes the player's nickname) to its maker's speech service. To keep everything on the device, choose a voice without "Google" or "Online" in its name in the game's settings.
- Shared devices. Anyone using the same browser on the same device can see its profiles. In a classroom, nicknames work better than full names. Deleting a profile in the game, or clearing the browser's site data, removes the information from that device. Because we never receive it, we can't restore it.
Students under 13
X-Shooter and X-Typer are made for students of all ages, including young students, and are designed so that we do not collect personal information from students:
- Students don't create accounts. Accounts are for adults (18+) — parents, teachers and adult learners. Sign-up asks for a month and year of birth to check this; we don't store it.
- What a student types or chooses in the games stays on the device, as described above.
- Our website statistics (see below) are used only to keep the site working well — never to contact anyone, build profiles or show ads.
- If we learn that we have received personal information from a student under 13 without a parent's consent, we delete it. Parents can contact us at any time at support@x-shooter.com.
Account holders
| What we keep | Why |
|---|---|
| Email address | Your login; receipts, renewal reminders and important notices about your plan. No marketing emails. |
| Password | Stored only as a secure hash (we can't read it). |
| Display name (optional) | To greet you on your account page. |
| Membership status, plan, renewal date, PayPal subscription ID | To give you access to the games you paid for. The subscription ID is a reference number, not payment details. |
| Date, time and IP address of your last login | Security — spotting misuse of an account. Replaced at every login. |
| Records of what you agreed to and when (Terms version, the automatic-renewal terms), cancellations, withdrawals and reminders sent | Consumer law asks us to be able to prove these. |
| Emails you send us | To answer you. |
Payments. PayPal processes every payment. PayPal tells us when a subscription starts, renews, is cancelled or fails, so we can update your membership. PayPal's messages also contain the payer's name, email and country; we don't keep those. PayPal's own privacy statement applies to your payment.
Legal basis (for visitors in the EU, the UK and similar laws): we use account information to provide the membership you asked for (contract); we keep records because consumer and tax law require it (legal obligation); and we keep security logs and basic website statistics because we have a legitimate interest in running a safe, working site.
Website visitors
- Website statistics. Our homepage uses Cloudflare Web Analytics to count visits and measure how fast pages load. Cloudflare says it uses no cookies or local storage and doesn't fingerprint visitors; it handles your IP address only to deliver the service. We see totals only — never individual visitors.
- Server logs. Our web host, Hostinger, automatically records standard request logs (IP address, time, page requested, browser type) for security and troubleshooting, and keeps them for a limited time.
- Star rating and "games played" counter. Both are anonymous: we store only the running totals. Your browser remembers that you have rated, so you rate once.
- Videos. The video boxes show our own preview pictures. Nothing loads from YouTube until you press play; the video then plays from YouTube (Google) in privacy-enhanced mode, and Google's privacy policy applies.
- Fonts are stored on our own server, so no font requests go to Google or anyone else.
Cookies and similar storage
We use only what the site needs to work — no advertising or tracking cookies — so there is no cookie banner.
| Name | What it does | How long |
|---|---|---|
| PHPSESSID (cookie) | Keeps you logged in to the members area. | Until you close the browser |
| xs_age_blocked (cookie) | Set only if the sign-up age check isn't passed, so the form can't be retried straight away. | 1 day |
| Game storage (browser local storage) | Saves profiles, progress and settings on the device. Never sent to us. | Until you delete the profile or clear site data |
| xs_rated (browser local storage) | Remembers that this browser already rated the game. | Until you clear site data |
| xs_howto_seen (browser session storage) | Shows the "how it works" box on the login page once per visit. | Until you close the tab |
| PayPal cookies | Set by PayPal inside its payment window. | See PayPal's policy |
Who we share information with
We don't sell personal information, and we don't share it for advertising. Service providers handle it for us:
- PayPal — payments and subscriptions.
- Hostinger — hosts the website, the database and our email.
- Cloudflare — website statistics on the homepage.
- Google (YouTube) — only if you press play on a video.
We may also disclose information if the law requires it. We're a small online studio and may work on the site from different countries; the information itself is kept by the providers above, which may store it in other countries (for example in the EU, the UK or the US). Where the law requires it, they use approved safeguards such as standard contractual clauses.
How long we keep it
- Your account: while you have one. Ask us to delete it and we will, within 30 days.
- Records of agreements, payments, cancellations and withdrawals: 3 years after your subscription ends, or longer only where tax law requires.
- Last-login IP address: replaced at each login, deleted with your account.
- Emails with us: up to 3 years after the last message.
- Technical logs (such as payment notifications, which record only the type of event): replaced regularly as they grow.
- Student information: we don't receive any, so there is nothing for us to keep or delete.
How we protect it
The whole site uses HTTPS. Passwords are stored only as secure hashes. The database and our records are blocked from the web and only the owner can reach them. Payments never touch our server. If a security problem ever affects your information, we will tell you, and the authorities where the law requires.
Your rights
Wherever you live, you can ask us to show you the personal information we hold about you, correct it, delete it, give you a copy, or stop using it for a particular purpose. Email support@x-shooter.com from the email address of your account — we reply within 30 days and may need to check it's really you.
In the EU or the UK you can also complain to your data protection authority. California residents: we don't sell or share personal information and don't use sensitive personal information.
Changes to this policy
If we change this policy, we update the date at the top. For important changes we email account holders before they take effect.
Contact
Safer Games Studios (leon jonathan dobree benson)
support@x-shooter.com