# Privacy

fun.study Retro Arcade is designed to operate without an application backend.

## Data the app handles

When you choose a game file, the browser reads it locally. The app stores:

- the ROM bytes in this site's origin-private browser storage;
- library metadata such as title, filename, system, size, favorite status, and play dates in IndexedDB;
- a SHA-256 digest used only to detect duplicate ROM content;
- an optional PlayStation BIOS file, when you choose one, in IndexedDB;
- emulator saves, states, settings, and control preferences in browser storage; and
- public application/core files in the service-worker cache for offline use.

The app does not include an account, analytics, advertising, telemetry, cloud sync, metadata lookup, crash reporting, or a ROM upload endpoint. Its Content Security Policy allows network connections only to the same site and Blob URLs. The automated tests fail if importing a ROM or launching the test core makes an external request.

If you click a documentation or issue link that points to another site, your browser navigates there at your request and that site's privacy practices apply.

## Where data lives

Data belongs to the exact site origin (protocol, host, and port) and device/browser profile you used. Another origin cannot read the private file system. The app uses OPFS when available and stores smaller game Blobs in IndexedDB as a fallback. Files larger than 128 MB require OPFS and are not duplicated into IndexedDB.

Static hosting infrastructure may keep ordinary request logs for HTML, JavaScript, CSS, icons, and emulator core downloads. Those logs are controlled by the operator/hosting provider, not by this application. ROM contents are never part of those asset requests.

## Retention and deletion

Browser storage is best-effort unless your browser grants persistent storage. The app can ask for persistence, but browsers may deny it. Private browsing normally deletes storage when the private session ends. Storage pressure, clearing site data, browser removal, or changing this site's origin can remove the library and saves.

Use each game's “Delete from device” action to remove its library record and stored game file. Remove an optional PlayStation BIOS from the Storage panel. Emulator save data may remain under this site's browser data. To remove everything, clear storage/site data for this origin in browser settings.

Keep backup copies of your ROMs and export important save data from the emulator menu. Catalog export contains metadata only; it does not contain ROMs or saves.

## Network verification

The vendored EmulatorJS update check is disabled. Runtime code and cores are served locally. The shipped policy uses `connect-src 'self' blob:` and does not allow a remote CDN fallback. See the test suite and security section of `README.md` for reproducible verification.