Privacy policy.

Who is responsible

SSBU Arena (the website ssbuarena.com, the SSBU Arena launcher and its online services) is run by the SSBU Arena project, which is responsible for the personal data described here. Write to support@ssbuarena.com for anything about your data.

SSBU Arena is not affiliated with Nintendo. The game itself runs on your PC from your own copy; no game files are ever sent to us.

Your Arena account

When you create an account we store:

• your email address, used to sign in, to confirm the account and to reset its password;
• your password, which is stored only as a secure hash by our authentication provider: nobody can read it;
• your player name, the tag added to it, your rating and the date you joined. These form your public profile: other players see them in rooms and rankings.

We send you emails only about your account (confirmation and password reset), never newsletters or advertising.

The website

The site uses no analytics, no advertising and no tracking cookies. When you sign in, your session is kept in your browser’s local storage so you stay signed in until you sign out; nothing else is stored there.

Sign-in and sign-up pages may show a security check by Cloudflare Turnstile, which processes technical data about your browser to tell people from bots.

Like every website, the servers that deliver the pages process your IP address and browser details to send them to you, and keep short technical logs for security.

The launcher

Each time it starts, the launcher asks GitHub for the latest SSBU Arena release and downloads updates from there. GitHub sees your IP address and the launcher’s version.

The setup looks for your game files in the usual folders on your PC, reading only file names and headers. Your game, keys, firmware and saves stay on your PC and are never uploaded.

When you sign in to the launcher, it keeps your session on your PC, encrypted for your Windows user. It sends no usage data. Crash reports are described below.

Online play

Online matches go through our relay server. To connect you with your opponent it receives your IP address and the match traffic (your controller inputs and game messages), and passes them on. Your player name is shown to the players in your room.

The relay checks a short-lived ticket from your account to let you in. Its logs name players by their player name and an address inside the room, not by their internet address.

Crash reports

When the game crashes on a PC signed in to an Arena account, the launcher sends us a crash report so we can fix the problem: the crash details and the end of the game's log, with your account, the launcher and game versions, your graphics card and your Windows version.

Before sending, the launcher removes your Windows user name, your PC's name, your folders, email addresses and internet addresses. The log can still contain the player names of the match you were playing. Reports are private: only the project can read them, and we keep them for 12 months at most.

You can turn crash reports off in the launcher, under Settings > Online.

Who processes data for us

We use a few services to run SSBU Arena. They process data on our behalf and only for these purposes:

• Supabase: accounts, sign-in, the profile database and account emails;
• Vercel: hosting of this website;
• Cloudflare: the security check on sign-in and sign-up pages;
• GitHub: the launcher’s downloads, updates and the project’s source code;
• a server provider hosting our online relay.

Some of them may process data outside the European Union; they do so under the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses. We never sell your data.

Why we may use it

We process account and online-play data to provide the service you asked for (GDPR article 6(1)(b)), and security data, logs and update checks for our legitimate interest in keeping SSBU Arena safe, working and up to date (article 6(1)(f)).

How long we keep it

Account data stays until you delete your account. You can delete it yourself at any time from your account page, or write to support@ssbuarena.com from your account’s email and we will do it. Its profile goes with it. Technical logs are kept only as long as needed for security and troubleshooting, then deleted.

Your rights

You can ask to see, correct, export or delete your personal data, to restrict its use or to object to it, by writing to support@ssbuarena.com. We answer within one month.

You can also complain to a data protection authority: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of the country where you live.

Children

Arena accounts are not meant for children under 14. If you believe a child has created an account, write to us and we will delete it.

Changes

If this policy changes, the new version appears on this page with its date. Important changes will also be announced on the site.