This Privacy Policy explains how MonoGame.CC ("MonoGame", "we", "us", or "our") collects, uses, and shares information. It applies to everyone who uses our services, including:
cc.monogame.studio), which runs the Creator editor with native sign‑in and in‑app purchases.By using our services you agree to this Policy. If you do not agree, please do not use the services.
When you sign in (via Firebase Authentication, using Google Sign‑In or email), we receive and store a unique user ID and your email address. If you use Google Sign‑In, we receive basic profile information (such as your name and email) from Google according to your Google account settings. We do not receive or store your Google password.
We store the games, code, assets, and project files you create or upload, plus related metadata (titles, timestamps, publish status). This content is stored per account so you can return to it across devices and, if you choose to publish, make it viewable by others.
When you use the in‑editor AI assistant, the messages you send and the relevant game code/context are transmitted to third‑party AI model providers to generate a response. See Section 3.
When you buy credits or a subscription through the app, the purchase is processed by Google Play Billing. We do not receive or store your payment card or bank details. We do receive and store purchase records — such as the product ID, a purchase token, an obfuscated account identifier, and entitlement/renewal status — to grant and reconcile your credit balance. We keep a server‑side ledger of your credit balance and usage.
Like most online services, we automatically receive technical data: IP address, browser or app version, operating system, device type, language, referring pages, timestamps, and diagnostic/crash information. In the mobile app this may include app‑ and device‑level identifiers used for security, fraud prevention, and reliability.
If and when advertising or rewarded‑offer features are enabled (see Section 5), our advertising partners may access an advertising identifier (such as the Android Advertising ID) and related device/usage signals. Advertising is not required to use the core product.
We use cookies and browser/app local storage for essential functions — keeping you signed in, remembering preferences (such as your chosen theme), and maintaining sessions. We do not use third‑party advertising cookies on the website for cross‑site tracking.
We compute aggregate, non‑identifying figures (for example, how many people are currently playing) to display on the site. These are counts, not profiles.
Legal bases (where applicable, e.g. under the GDPR) include performance of a contract (providing the service you request), our legitimate interests (security, product improvement), consent (e.g. for personalized advertising), and legal compliance.
The in‑editor AI assistant works by sending your prompt and relevant project context to third‑party large‑language‑model providers that generate the response. We route these requests through our servers and do not sell your prompts. Do not include personal, confidential, or sensitive information in AI prompts that you would not want processed by a third‑party model provider. Providers process the request to return a result and may handle it under their own terms and privacy policies. We retain prompt/response and usage records to operate, meter, debug, and improve the feature.
In‑app purchases (consumable credit packs and, where offered, subscriptions) are sold and processed exclusively through Google Play Billing; your payment is handled by Google under Google's Privacy Policy. We receive purchase confirmations and tokens from Google to verify the purchase and add credits to your balance. Credits are spent as you use metered features such as the AI assistant. Refunds and payment disputes are handled according to Google Play's policies; entitlement adjustments (e.g. on refund) are reflected in your balance. We retain transaction and entitlement records as needed for accounting, support, and fraud prevention.
The core product does not require advertising. We may introduce optional advertising or rewarded formats (for example, watch‑to‑earn videos or offerwalls that grant credits). When such features are active:
We will update this Policy and, where required, request consent before enabling advertising that involves personal data.
We do not sell your personal information. We share it only with service providers ("processors") that operate the product on our behalf, and as required by law. Key providers include:
| Provider | Purpose |
|---|---|
| Google Firebase / Google Cloud | Authentication and related infrastructure |
| Cloudflare | Website hosting, storage of your projects, serverless compute, and the credit/wallet ledger |
| Third‑party AI model providers | Generating AI assistant responses from your prompts |
| Google Play | In‑app purchase processing and payments |
| Advertising / offerwall networks (when enabled, e.g. Google AdMob) | Serving and measuring optional ads and rewarded offers |
We may also disclose information to comply with law, enforce our terms, or protect the rights, safety, and security of our users and the service, and in connection with a business transfer (e.g. merger or acquisition).
We keep your account information and content for as long as your account is active. We keep transaction and entitlement records, and security/diagnostic logs, for as long as needed to provide the service and to meet legal, accounting, and anti‑fraud obligations. When you delete your account, we delete or de‑identify your personal data within a reasonable period, except where we must retain certain records (for example, purchase records) by law.
Depending on where you live (for example, the EEA/UK under the GDPR, or California under the CCPA/CPRA), you may have additional rights, including to object to or restrict certain processing and to lodge a complaint with your data protection authority. To exercise any right, contact us at the address below. We will not discriminate against you for exercising your rights.
Our services are not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
We use technical and organizational measures to protect information, including encryption in transit, access controls, and server‑authoritative handling of balances and purchases. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
Our providers may process and store data in countries other than yours. Where we transfer personal data internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by law.
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the services after an update means you accept the revised Policy.
Questions or requests about this Policy or your data:
Email: contact@monogame.cc