I make horror games

Privacy Policy

Last updated: October 24, 2026

This Privacy Policy explains what information LOUREZ GAMES ("the site", "we", "I") collects when you visit lourez.com, how it is used, and the choices you have. The site showcases original Scratch games made by Lourez.

1. Information we collect

  • Account information. If you create an account: your email address, the username you choose, your date of birth (only to check you are 13 or older — see section 10), and your password, which is stored only as a salted, one-way hash (PBKDF2) — we can't read your password, and it is never stored in plain text.
  • Things you do on the site. Comments you post (with your username and the time), games you like, the players you follow, your Loonix balance, avatar items you buy or wear, the date you last collected the daily Loonix reward, and which games you've opened while logged in (shown only to you, as "Games You Visited" on your home page).
  • Your public profile. Every account has a profile page that anyone can see and find through the search box: your username, your avatar, your bio ("About me"), the date you joined, how many followers you have and how many players you follow, and the lists of those players. Your email address is never shown to other people.
  • Reports. If you report a player, we keep the report (who sent it, the reason, what you wrote, and a copy of the reported bio or comment) so admins can review it. The reported player is not told who reported them.
  • Forum messages. Messages and replies you post in the Community Forum are public and are deleted automatically after 24 hours (or sooner if you or a moderator delete them). If a message is reported, a copy is kept with the report so admins can review it.
  • Online status. While you're logged in, the site notes when you were last active and which of our games you're playing, so other players can see a status dot on your avatar (green: playing a game, blue: on the site, grey: offline) and the name of the game. Only the latest status is kept.
  • Ban appeals. If your account is banned and you appeal, we keep the email address you give us, what you wrote, and the ban message, so an admin can review it and answer you by email.
  • Community posts and pictures. What you post on the Community board, including the picture you upload — see 2. User uploads.
  • Settings stored in your browser. Your light/dark mode choice and whether game touch controls are on are saved only in your browser (local storage), not on our servers.
  • IP address and technical data. Like almost every website, our hosting provider receives your IP address, browser type and the pages you request, so it can deliver the site and protect it from abuse.
  • Turnstile signals. Our login forms are protected by Cloudflare Turnstile, an "I'm human" check. Because the Member Login box appears on every page, Turnstile runs whenever you visit the site while logged out. Cloudflare Turnstile collects IP addresses and TLS fingerprints to block bots, along with other browser and device signals used to tell people apart from automated programs. Your Turnstile result is checked on our server with Cloudflare before any login is attempted.
  • Page view counts. We count how many times each game page is opened. The count is not linked to you; your browser only remembers, for the current session, that it has already counted a visit.

2. User uploads

When you post a game on the Community board, you upload a picture and write a title and a description. Here's what happens to them:

  • Where they're stored. Your picture is made smaller in your browser (to at most 1080×1080, as a JPEG) and stored on Cloudflare R2, Cloudflare's file storage. The title, description, Scratch link, your username and the time you posted are stored in our database (Cloudflare D1).
  • They're public. Anyone can see your post and its picture — on the site and through the picture's direct web address — including people who aren't logged in.
  • Automatic deletion after 3 days. Posts stop being shown after 3 days and the picture is deleted from R2 automatically. You can delete your own post earlier with "Remove", and admins can remove any post. If a post is reported, a copy of its title and description is kept with the report so admins can review it.
  • Don't upload personal information. Please don't put anything sensitive or personal in your picture or text — no photos of your face, your real name, your school, where you live, phone numbers, or any other information that could identify you or someone else.

3. How we use information

  • Login authentication — to create your account, log you in and keep you logged in.
  • Bot prevention and security — to stop automated logins, spam and attacks (including the Cloudflare Turnstile check on login).
  • Site features — to show your comments, likes, Loonix balance and avatar.
  • Ad display — once advertising is enabled, to show ads that help keep the site free (see section 7).

We do not sell your personal information.

4. Account Emails and Authentication

  • Your email address — we collect it when you sign up, to create and manage your account.
  • Account emails — we send transactional emails that are needed for the security and running of your account, such as email confirmation links and password reset instructions.
  • Who sends them — these emails are sent through a third-party email service provider, Cloudflare Email Service, on our behalf. It only gets what it needs to deliver them: your email address and the message.
  • No opting out — you can't turn off these essential service emails while you have an active account. They are not marketing emails.

5. Third-party services

  • Cloudflare — hosts the website and its games (Cloudflare Pages and R2), runs our server code and stores site data such as accounts, comments, likes and Loonix balances (Cloudflare D1), provides our domain/DNS, runs the Turnstile bot check used on our login and signup forms, and sends our account emails (Cloudflare Email Service — see section 4). Cloudflare Privacy Policy · Turnstile Privacy Addendum
  • Google AdSense — will serve advertisements on the site. Google Privacy Policy
  • Google Fonts — provides the fonts used on the site; your browser requests them directly from Google.
  • Scratch — thumbnails of the featured community projects and Scratch review winners on the homepage load straight from Scratch's servers, and those projects open on scratch.mit.edu. Scratch Privacy Policy

6. Third-Party Donations

The Support page has a button that takes you to PayPal, a separate company with its own privacy policy. Any donation happens entirely on PayPal's website. Lourez Games never collects, sees or stores your card number, bank details or any other payment information.

PayPal tells me the name and note you choose to share with your donation. If you include your Lourez Games username, I mark your account as a supporter so the 💝 badge can show next to your name. I don't keep a list of supporters' emails on the site; the only thing stored is that your account has the badge. Ask me to remove it at any time.

7. Advertising

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this site or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.

Google AdSense is only loaded after you click "Accept" on our cookie banner. If you click "Reject", AdSense is not loaded. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

You may opt out of personalized advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info. See our Cookie Policy for more.

8. Your rights

  • Access — ask for a copy of the personal information we hold about you.
  • Deletion — ask us to delete your account and its data (comments, likes, Loonix and avatar items). You can also delete your own comments at any time.
  • Correction — ask us to fix information that is wrong.

To make a request, email us at the address below. We may need to confirm you own the account before acting on a request.

9. How long we keep data

Account data is kept while your account exists. When an account is deleted, its comments, likes, Loonix balance and items are deleted too. Hosting and security logs are kept by our providers for a limited time under their own policies.

10. Children's Privacy and Age Verification

  • Date of birth. When you sign up, we ask for your date of birth. We use it only to check that you are 13 or older.
  • Under 13s can't have an account. Users under 13 are not permitted to create an account. The games on this site can still be played without one.
  • Accounts made by children under 13. If we learn that a user under 13 has created an account, we will delete it promptly. If you believe this has happened, please contact us (see section 12).
  • Older accounts. Accounts created before this policy was updated may not have a date of birth on file, but they are subject to this policy from now on.

11. Changes to this policy

If this policy changes, we will update the date at the top of this page.

12. Contact

Questions or requests about privacy: [email protected]