Privacy

Local by default, explicit at the boundary.

The homepage terminal starts a temporary isolated Linux session and connects your browser to its PTY. Files and processes in that session are discarded when it expires. The site owns no shared AI Gateway credential. When you authorize Arcade, the team-scoped key exists only inside the separate Arcade process; neither the browser nor the visitor shell receives it. General shell network access is denied.

Hosted terminal telemetry is disabled. Arcade's existing telemetry policy still applies to local installations, where it can be disabled with ARCADE_TELEMETRY=0 or the in-app setting. Browser-safe rendering primitives run locally in the browser.

CLI authentication

The full terminal Arcade can use Vercel device authentication to obtain a team-scoped AI Gateway key. The selected account information is stored in the user's Arcade configuration directory with restricted permissions; the minted Gateway key is re-derived rather than committed to the repository. Browser-safe packages cannot import authentication, filesystem, terminal, or telemetry modules.

Telemetry and traces

Arcade telemetry records anonymous usage and canonical game records. Lightweight events use random install and session IDs. Human game records use a pseudonymous hash of the install ID so personal statistics can be attributed without a Vercel account identity. Arcade does not send prompts, private reasoning, table chat, voice, credentials, or account identity. Telemetry can be disabled with ARCADE_TELEMETRY=0, arcade telemetry disable, or the home-menu setting. Match Lab forces telemetry off and writes persistent test traces only to the local run directory, which is gitignored. Review the implementation and schemas in the source repository.