Last updated 3 August 2026
The short version
Creator Gacha has no server. It is a folder of static files — HTML, CSS and JavaScript — served by a CDN and run entirely in your browser. There is nothing on our side to store anything in, which is why the rest of this page is mostly a list of things that do not happen.
What we collect
Nothing. No accounts, no sign-in, no analytics, no tracking pixels, no advertising, no cookies, no local telemetry of any kind. We do not know that you visited.
Your YouTube API key
The game does not ask you for one. Cards ship with the site, so there is nothing to set up and no key to supply. A developer-only Live mode still exists behind a URL flag, and if a key is ever entered there, this is what happens to it:
- is held in the page's memory for as long as the tab is open, and nowhere else;
- is never written to localStorage, a cookie, or any other storage;
- is never sent to us — we have nowhere to send it to;
- is sent only to
googleapis.com, as part of the requests you asked for.
Closing or reloading the tab discards it.
Your collection
Cards you pull are saved in your browser's localStorage, on your device. They
are never transmitted anywhere. They are not readable by us, and they do not sync between
your devices — a collection is per-browser.
You can delete it at any time with the "Clear collection" button on the main page, or by clearing site data in your browser. A copy of your data that you have no way to remove is not really yours, so the button is part of the promise rather than a convenience.
What your browser contacts
- Our CDN host — to serve the page and the card sets. Like every web host, it processes your IP address in order to answer the request. We do not receive, query or retain those logs.
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — for the three typefaces the design uses. - Google's image CDN (
*.ggpht.com/*.googleusercontent.com) — creator profile pictures on cards are loaded from YouTube's own servers rather than copied onto ours. They are requested withreferrerPolicy="no-referrer". - googleapis.com — not contacted while playing. Only the developer-only Live mode reaches it, only with a key entered there, and only when a channel is asked for.
Each of those sees a request from your browser and applies its own privacy policy, which we do not control. That is the honest boundary of what this page can promise.
Creator data on the cards
Cards are built from public YouTube channel statistics — subscriber, view and video counts, channel name and profile picture. They are refreshed on a fixed cadence and the published snapshot is never older than 30 days, matching YouTube's cap on stored statistics.
If you are a creator and want off, you are off. Write to ashish.barthwal.cs@gmail.com and you will be removed from every set within 7 days, with no questions asked and no proof of identity required. The removal is permanent: your channel id goes on a denylist that blocks it from every future build, so it cannot quietly return the next time cards are sourced.
Children
This is not a service directed at children, and it collects nothing from anyone. There is no monetisation of any kind in the game — no purchases, no currency, no paid pulls, no ads.
Changes
If this policy changes, the date at the top changes with it. The full revision history is public in the project's git log.