Privacy Policy

CloudSims (“CloudSims”, “we”, “us”) is a catalogue of educational simulation games operated by XAD Labs, a company based in Sri Lanka(xadlabs.com). This policy explains what we collect when you use cloudsims.online and the games available through it, why we collect it, and the choices you have. We act as the data controller for your information and process it in accordance with Sri Lanka’s Personal Data Protection Act No. 9 of 2022 and other applicable law.

We keep data collection to what the games actually need to work.

• Account information. If you create an account, we store the sign-in method you use: your email address (for email magic-link sign-in) or the basic profile your identity provider shares when you use Google sign-in (your name, email address, and Google account identifier). We do not receive or store your Google password.
• Profile. A username you choose, shown on leaderboards across the games. You can change it at any time on your account page.
• Gameplay data. Records of your play — submissions, designs, scores, runs, and leaderboard entries — associated with your account so your progress and rankings persist.
• Anonymous play. You can play many games without signing up. When you do, we create an anonymous session identifier so your in-progress play works. It is not linked to your name or email unless you later sign in.
• Cookies. We use a single essential authentication cookie to keep you signed in and to carry your session across our game subdomains (single sign-on). It is required for signed-in features; we do not use advertising or third-party tracking cookies.
• Technical data. Our hosting and infrastructure providers automatically process standard technical information (such as IP address, browser type, and request logs) to serve the site securely.

• To provide the games, save your progress, and show leaderboards.
• To authenticate you and keep you signed in across CloudSims games.
• To operate, secure, debug, and improve the platform.
• To communicate with you about your account or important service changes.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for third-party advertising.

We share information with a small number of processors that run the platform on our behalf, only as needed to provide the service:

• Supabase — authentication and database (stores your account and gameplay data).
• Vercel — application hosting and delivery.
• Google — only if you choose Google sign-in, to authenticate you.

These providers may process data in countries other than yours. We may also disclose information if required by law or to protect the rights, safety, and security of our users and the platform.

We keep your account and gameplay data for as long as your account is active. If you ask us to delete your account, we remove your personal data, except where we must retain limited information to meet legal, security, or accounting obligations. Anonymous play data may be retained in de-identified form.

• Access and update. You can view and change your username on your account page.
• Deletion. You can request deletion of your account and associated personal data by contacting us (see below).
• Sri Lanka. Under the Personal Data Protection Act No. 9 of 2022, you have rights to access, correct, and request erasure of your personal data, to withdraw consent, and to object to certain processing. We handle these requests as the Act requires.
• Other regions. Depending on where you live (for example, the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, or port your data, and to object to or restrict certain processing. We honour these requests as required by applicable law.

CloudSims is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

We use industry-standard measures to protect your data, including encrypted connections and database access controls (row-level security) that restrict data to the account it belongs to. No method of transmission or storage is perfectly secure, but we work to protect your information.

We may update this policy from time to time. When we do, we will revise the “last updated” date above, and for material changes we will provide a more prominent notice.

Questions or requests about your privacy? Email zameer@xadlabs.com, or reach XAD Labs via xadlabs.com.