Menu
Effective 10 September 2026
MiniAnt Games runs miniant.games, a portal of browser games, and the developer portal at publish.miniant.games where other people publish games onto it. The site is operated by Miniant Labs Limited, a company in Bangladesh, and that company is the one responsible for your data under this policy.
This policy covers everything that happens on miniant.games itself: signing in, playing, chatting, spectating, and buying things. A game you play through us can have its own developer, and that developer is a separate party from us for the data its game handles inside its own iframe. We say plainly, section by section, what we hand a game and what we never do.
We collect different things depending on what you are doing on the site. Here is the whole list, organised by situation rather than by data type, because that is the order you actually encounter it in.
Loading any page sets our functional cookies (listed below) and sends basic technical information — your browser, the page you loaded, and whether anything broke — to our error monitoring and performance tools. We do not build a profile of visitors who never sign in or play.
You can play without an account. We mint a guest id, stored in a cookie on your device, so we can count your 3 free sessions per device per day. A guest has no wallet, no saved profile, and no data tied to a name or email — the guest id resets when its cookie is cleared or expires.
Signing in needs an email address (for a one-time six-digit code) or a Google or Discord account (Apple is not yet turned on for everyone). We create a profile: a unique username, and whatever you choose to add to it — a display name, an avatar image address, a short bio, and a free-text country with a toggle for whether other players see your flag. We do not ask for your date of birth or your real name; at sign-in you confirm that you are 13 or older.
We rate-limit sign-in codes to stop abuse: at most 3 codes per email and 10 per IP address in any 10 minutes. Your IP address is used for that check and then discarded once the window passes; it is not kept as part of your profile.
We record every session you play: which game, when it started and ended, the result, and any XP it earned. If a game saves your progress, we store that save on our servers at the point you enter a level, so you can pick up where you left off. We also record integrity signals — automated anti-cheat flags — as an append-only log; these are never edited after the fact, only added to.
Games themselves run inside an iframe served from our separate game-host origin. For each game we start, we hand that iframe your display name, avatar, country flag (only if your flag toggle is on), whether you are a guest, your locale, and the cosmetics and entitlements you own for that game. We never hand a game your email address.
When ad impressions happen inside a game, we record which game, what kind of ad slot, which provider served it, and the outcome (shown, skipped, failed) — never anything about the ad's own content.
In a multiplayer match, the other players see your name, avatar, flag, and cosmetics — the same things a game iframe sees. Being watched is optional: the spectator switch in your settings is on by default and you can turn it off at any time. Watching someone else's match costs 2 Tickets. A spectator sees the match itself and a spectator-only chat channel; spectators cannot message the players.
If you or another player reports a game or a chat message, the report can include the message text and the surrounding context so our staff can review it fairly. Staff actions taken on a report are logged for audit purposes.
Purchases run through Stripe Checkout. We never see or store your card number — Stripe handles that and passes us only the confirmation that a purchase succeeded, its amount, and which product it was for.
A referral link sets a cookie with the referral code, read once when you sign up and then cleared. To catch referral fraud, we hash the referring and joining IP addresses (a one-way transformation we cannot reverse back into the original address) and compare hashes rather than raw addresses.
If you email us — for support, a deletion request, or anything else — we keep that email thread to handle your request and to have a record that we handled it.
Most of what we do with your data is to run the account and the games you asked to use — running a site necessarily means processing the data that makes it work. Where a legal basis has a name, we use it here once and explain it in plain terms.
Every cookie we set ourselves is listed here. They are all first-party, meaning they belong to miniant.games and no other site can read them.
Games run inside their own iframe and may use their own browser storage (for example, to remember a volume setting) inside that iframe's own origin. That storage belongs to the game, not to us; we don't read it and this policy doesn't cover what a specific game chooses to store there — its developer is responsible for that.
Once ads run on MiniAnt, Google sets its own advertising cookies and identifiers in the ad slots, subject to the consent choice described in the next section.
The ad layer is built and switches on once our AdSense account is approved and live; until then, nothing in this section is running yet. When ads run on MiniAnt, here is how they will work.
Ads appear as interstitials between games and as rewarded ads you choose to watch for a benefit (see the Tickets section of our Terms). You never see an ad in your first session on the site. If you have MiniAnt Plus, interstitial ads are removed for you; rewarded ads you opt into still play, since you are asking for the reward.
Google is the ad network (AdSense / H5 Games Ads). If you are in the EEA, the UK, or Switzerland, we will ask for your consent before any personalised ad is shown, through a consent banner, and ads will run in non-personalised form until you answer. You can change that choice at any time under Settings → Legal & data, whether or not you ever saw the banner. Outside those regions, ads may be personalised by default, subject to Google's own settings for your account and browser.
Our database and the site itself run in Mumbai, India (Supabase and Vercel's ap-south region), so your data lives outside Bangladesh and, most likely, outside your own country too. Cloudflare serves games and the multiplayer relay from whichever of its data centres is nearest you, and Stripe, Sentry and Resend process their part in the United States. Where a transfer like that needs a legal safeguard, we rely on our vendors' standard contractual clauses, the mechanism the law provides for exactly this.
You can ask us to access, correct, delete, or export your data, or to object to a particular use of it, at any time by emailing privacy@miniant.games. We confirm it is really you by asking you to write from the email address on the account. Where we rely on your consent (personalised ads), you can withdraw it at any time using the consent control described above, and that withdrawal does not affect anything already done under it.
Account deletion and data export are now self-serve, under Settings → Legal & data. Export hands you a JSON file of your data straight away. Deletion deactivates your account immediately and schedules it for permanent erasure 30 days later; you can cancel at any point in those 30 days by signing back in, and after that it cannot be undone. You can still email privacy@miniant.games if you would rather a person handled it. Before you ask, know that deleting your account forfeits your Tickets balance, MiniAnt Plus, cosmetics, and pass progress, and none of it is refunded.
Deletion erases your profile, saved game progress, friends and follows, and notifications, and replaces your player name everywhere it appears so that no one can tell who you were. Two things survive it. We keep your purchase and Ticket records — what was bought, when, and for how much — because tax and accounting law requires us to hold financial records for a number of years, and because those entries are one half of a double-entry ledger that would stop balancing if we removed them. We also keep the bare record that you accepted these terms, and when, because that record is the evidence for the agreement itself. Neither is kept for marketing, profiling, or any other use; we rely on our legal obligation to retain them, not on your consent. Everything in them is detached from your name once the erasure runs.
The rights above are the ones your data protection law already gives you (access, rectification, erasure, portability, objection, and withdrawal of consent), and you also have the right to complain to your local data protection authority. We would rather hear from you first and put things right.
The same rights apply, under whichever state law covers you. We do not sell personal information and there is nothing to opt out of on that front; the access, correction, deletion, and appeal rights your state law gives you work the same way as described above.
We extend the same access, correction, deletion, and export rights to every player, regardless of where you live, because it is the right way to run this.
MiniAnt is a general-audience site for players aged 13 and over. If you are under 18, a parent or guardian needs to agree to our Terms on your behalf before you use the site. We do not knowingly collect data from anyone under 13; if we learn that we have, we delete it. If you believe a child under 13 has an account, please email privacy@miniant.games and we will look into it right away.
Connections to the site are encrypted, sign-in cookies are invisible to page scripts, identifiers are hashed wherever the raw value is not needed, and each vendor and staff role can reach only what its job requires. No system is perfectly secure and we will not pretend otherwise; if we ever learn of a breach that affects you, we will tell you.
When we make a material change to this policy, we will update the effective date above and add an entry here. Small clarifications that do not change what we actually do may not get their own entry.
For privacy questions, or to exercise any of the rights above, email privacy@miniant.games. For anything else, our support team is at support@miniant.games. You can also read our Terms of Service.