Privacy Policy
Last updated February 7, 2026
The friendly version
67Cafe is a pretend shop. Everything you spend or earn is fake coins — we never take real money and we never ask for card details.
We remember your nickname, avatar, coin totals, stickers and orders on your own device so the game feels like yours. If you tell us your birthday, we save it so we can wish you happy birthday and understand who plays.
If you sign in with Google, we only see your name, email and profile picture. We do not read your Gmail, your contacts, or any other Google service.
We also collect basic visit stats — country, city, device type, timezone, language, and how many minutes you played — so we can make 67Cafe better and spot broken things.
We never sell your data. Ever.
The formal version
1. Data Controller. This Site ("67Cafe", "we", "us") is operated by the owner of the domain 67cafe.com. For privacy inquiries contact mohammed@alghafly.com.
2. Data We Collect. (a) Client-side game state stored in your browser's localStorage: nickname, avatar, date of birth (optional), wallet coins, cart, wishlist, orders, streak, stickers, achievements. (b) Server-side analytics stored in our MongoDB database: an anonymous visitor identifier, first/last seen timestamps, session playtime seconds, page paths, referrer, user agent, timezone, language, viewport, device type, IP-derived country/region/city (via ipapi.co), and per-game aggregate stats. (c) Google Sign-In (optional): your Google email, display name and profile picture, delivered by Emergent Authentication. We do not receive, store or request any other Google scope.
3. Cookies & Similar Technologies. We set a strictly-necessary admin session cookie for the private admin dashboard. Regular visitors are identified by an anonymous browser-local identifier — not a tracking cookie.
4. Lawful Basis. Legitimate interest in operating and improving a playful all-ages game, with your consent captured when you submit optional information such as date of birth or when you sign in with Google.
5. Data Retention. Client-side game state persists until you clear your browser. Server-side analytics are retained for up to 24 months and then anonymised. Google Sign-In records are retained while your account exists on 67Cafe.
6. Sharing. We do not sell personal data. We share data only with (a) the geolocation lookup vendor ipapi.co, (b) our authentication provider Emergent Authentication for Google Sign-In, and (c) hosting infrastructure. All parties process data on our behalf.
7. Children. 67Cafe is a playful pretend hangout suitable for all ages. If you are a child in a jurisdiction that requires parental consent for online services, please ask an adult before entering a nickname or birthday.
8. Your Rights. You may request access, correction, deletion, restriction, or portability of your data at any time by emailing mohammed@alghafly.com. You may also clear all client-side data instantly using your browser's clear-site-data settings.
9. Security. We use industry-standard TLS in transit and secure managed hosting. No system is perfectly secure; you use the Site at your own risk.
10. Changes. We may update this policy. Continued use of the Site after changes constitutes acceptance.
Questions? Email mohammed@alghafly.com.