Drop an HTML playable here
or
Playable Preview
Checking account…
Rotate your phone
This page is made for the upright screen
Policy version: October 8, 2026. Effective from publication of this version in the service.
Nowhere Playables is an internal work tool of Nowhere Pro for reviewing playable ads. It is not a public service: accounts are approved by an administrator.
Nowhere Pro runs the service and decides what is done with the data described here. For any question or request about your data, contact your Nowhere Pro representative.
Account data: your email, nickname, interface language, whether you receive review emails, an optional avatar picture and, if you connect it, your Telegram user ID. Authentication is handled by Google Firebase; passwords are processed there and are not sent to our service backend. If you sign in with Google, its account name can be suggested as your nickname and shown to administrators for accounts that have not applied yet. The service profile keeps your chosen nickname rather than a separate copy of the Google account name.
Content: the comments you leave and what you attach to them — screenshots, drawings, video clips and audio recordings — shown with your nickname to the other reviewers of the same playable.
Technical records: which review links you opened while signed in (other reviewers of that link see your nickname when they mention someone), and the dates your records were created and updated. Security events record the event type, request route and method, response status, datacenter and a request reference.
To provide the review tool you asked for — sign-in, comments, access-request and review notifications to the team; to manage who has access; and to keep the service secure. There is no marketing and no profiling.
Cloudflare (hosting, storage and administrator sign-in), Google Firebase (authentication; its scripts load from gstatic.com), and configured Telegram and email channels for access-request notifications (nickname, email and request time) and security alerts. Telegram review and operational messages can include playable, game and customer labels, the review action, actor and review link. If you connect Telegram in Profile settings, review notifications addressed to you reach your own Telegram chat until you disconnect it. Without Telegram, or when it does not deliver, they reach your account email instead: the sender’s nickname, the game and playable labels, the round and the review link. You can turn these emails off in Profile settings or by the link at the end of each one. Comment text and attachments are not included in these notifications. A bug report you send from the Viewer is the exception: its text, the pictures and videos you attach, your nickname, the playable’s name and round, and your browser details (browser and system version, window size and language) go to the Telegram chats of the team’s administrators. The service keeps no copy of a bug report; the copies remain in those chats.
Service data is held by Cloudflare and authentication data by Google Firebase. Configured notifications also reach the team through Telegram and email services. Storage locations and retention by these providers depend on their service configuration and terms; this policy does not promise a particular storage region.
The review tool does not implement marketing analytics or sell your data. Its performance, resource and console diagnostics stay in the Viewer during the current session; review-link visits are server records used to show participants for mentions. This is not a guarantee that an uploaded playable makes no external requests: its scripts and resources can contact third parties. Isolation from the surrounding page does not block its network access. Automatic cover capture also runs the uploaded playable and saves the resulting image to the service.
The application code does not set its own cookies. Firebase and Google sign-in, and Cloudflare Access for administrators, use their own authentication mechanisms and may use cookies or browser storage. Firebase scripts load when a non-administrator opens the Viewer, before a playable is loaded. Remember me asks Firebase to keep sign-in locally; without it, the application asks for session-only sign-in. Actual provider cookies and session durations depend on the provider configuration and browser.
Browser storage also keeps language, help acknowledgement, interface preferences, sign-in cooldowns and cached notes. Viewer Settings sync to an account identified by your verified email, with a local copy and a queue of unsent changes. Signing out does not erase all local data: cached notes and pending work may remain in that browser. Clearing site data can remove unsent work. Playable storage is isolated from this cache and is temporary for each frame load.
Account deletion removes the Firebase identity, avatar and service profile. A failed step can require an administrator to retry. It does not automatically erase working discussions, their authorship or attachments, review history, visits to still-valid links, shared Viewer Settings or local cached work. Rejecting an access request removes its profile and avatar but keeps the Firebase identity so the person can apply again.
Replacing a build closes its current review round and retains its discussion history; it does not start a 14-day deletion period. Closing a playable into Final moves its notes into the service bin for the configured retention period (14 days by default). Expired bin entries are no longer available for reading or restoration. Physical cleanup runs during later service operations, so expiry does not promise deletion at that exact moment.
Explicitly revoking or replacing a review link, or deleting its playable, clears the old link's visit records as part of that operation. Natural link expiry does not currently trigger the same cleanup. Server and browser records without a specific expiry remain until the relevant cleanup or a reviewed deletion request.
For a copy, correction or broader deletion of your data, contact your Nowhere Pro representative. This is a separate review of the relevant records, shared work and notification copies; the account-delete button alone does not carry it out.
You can ask for a copy of your data, have it corrected or deleted, and object to or restrict its processing; your nickname and interface language you can change yourself in your profile. Requests go to your Nowhere Pro representative. You may also complain to the data-protection authority of your country.
The review service is served over HTTPS, the administrator area uses Cloudflare Access, passwords are held by Google, and service requests are rate-limited against abuse. No method of storage or transmission is completely secure.
The service is not intended for children. By using it you confirm you are an adult.
We may update this text. A new version takes effect when it is published in the service; local preparation alone does not change the published policy. Questions — contact your Nowhere Pro representative.
