DocsSign in

Privacy

Effective 28 October 2026.

AppAfterApp is a home for playable browser games and demos made with AI. It is run by Michael Anthony, trading as NEX6, a sole trader in the UK, who is responsible for your personal data (the data controller). "We" and "us" on this page mean him. AppAfterApp is in a private preview: you need an invited preview account to play and publish. This page says what we collect, why, where it is kept and for how long. It covers this website and the AppAfterApp connector that AI apps such as Claude and Codex use to publish games.

What we collect

  • Your account. Your email address and your password, which our sign-in service stores only in a scrambled form we can't read. If you sign in with Google or GitHub, we get the email address and basic profile that service shares.
  • What you add. Your display name and short bio, the games and creators you follow, your thumbs up or down, Discussion posts and replies, and project updates.
  • Plays. Each time you press Play, we make a play pass for your account and that build. It works for 30 minutes. We count plays per build; your own plays on your own games aren't counted.
  • Games you publish. The game file (a ZIP or one HTML file), its cover, and the details you or your assistant send: title, type, descriptions, controls, credits, engine, the AI models that made it and, for One Shot games, the original prompt.
  • Test reports. The short TESTING report your assistant sends with each build: when and where it was tested, which AI or person tested it, and the results.
  • Our checks. The results of our package, security and gameplay checks on each build, and the reports they produce.
  • AI assistant connections. When you connect an AI app such as Claude or Codex, we record which app it is (by the name it gives itself), when it connected, when it was last used (to within an hour) and, if you disconnect it, when. You can see your connections in YOU → Connections.
  • Sign-in records. Our sign-in service keeps your sign-in sessions and a security log of sign-ins, which includes IP addresses.
  • Technical logs. Our hosting services keep short-lived request logs, such as the time, the page asked for, the IP address and the browser. Our own code never logs sign-in tokens or upload addresses.
  • Messages to us. If you email us, we keep your message and our reply.

The website uses sign-in cookies only. There are no advertising or analytics trackers. A page may remember small things in your browser, such as tips you've already seen.

What the connector receives

The connector gets only what your AI app sends it when it uses one of its tools: your build's details, its TESTING report, and the file's size and fingerprint (SHA-256). It never receives your conversation or chat history. Your AI app sends the file itself straight from your computer to our private storage, using a one-time upload address that works for 15 minutes and only for that exact file; the file's contents never pass through the conversation. Your AI app's own provider (for example Anthropic or OpenAI) handles your conversation under its own privacy policy.

How we use it

  • To run your account and show your games and posts on AppAfterApp.
  • To check each build before it goes live, and to let you connect your AI app to publish.
  • To prevent abuse, keep costs in check and fix problems.
  • To reply when you write to us.

We use your data to provide the service you signed up for, and to keep it safe and working, which is in our and our users' legitimate interests. We don't sell your data or use it for advertising.

Who can see it

  • Published games are public on AppAfterApp; there are no private games. A game's page shows the game, its details and cover, the creator's display name, its Discussion and its Updates, and its follower and play counts. Creator profiles show the display name, bio and live games.
  • During the preview, these pages need sign-in. Today every game page, creator profile and the front page can be seen by anyone signed in with a preview account, and by nobody who is signed out. Open links, which will let anyone with a game's link see its page without signing in, are planned but not switched on yet; we'll update this page when they are.
  • Your email address is never shown to other people on the site.
  • Test reports and check results are private: you see them where the site shows them, and so do AppAfterApp's reviewers and admin.

Where it is stored

  • Supabase: our database and sign-in service, in London, UK. It also sends sign-up and password-reset emails.
  • Cloudflare: game files, covers and check reports in private storage (R2) in Western Europe. Games are played from a separate games address (nex6.ai), never from this website's address.
  • Vercel: runs this website and the connector, and runs our automated checks on each submitted build in a temporary, isolated machine in London that is shut down when the check ends.
  • Google: our email on appafterapp.com (Google Workspace), including messages you send us.
  • Anthropic and OpenAI: if you connect AppAfterApp through claude.ai or ChatGPT, that company keeps the connection's sign-in for your account with them.

We share your data with these services only so they can do these jobs for us.

Some of these companies are based in the United States, so your data may be handled outside the UK. Where that happens, it is protected by the safeguards UK law requires, such as the UK–US data bridge or the UK's standard data-transfer contracts.

How long we keep it

  • Builds that don't go live: when a build fails our checks, is held by them or is cleared by a reviewer, its uploaded file, the files prepared for play and the check reports are deleted automatically 30 days after that outcome, unless it is checked again first. A small record stays: the build's ID, its fingerprint, its outcome, and the details and test report that were sent.
  • A submission still waiting for details, or for a person to play it, is kept until it is finished or cleared.
  • An upload address that isn't used stops working after 15 minutes. If no file arrives, its submission is closed an hour or two later, and then cleared like any build that doesn't go live.
  • Live games: the current build and earlier builds are kept while the game is on AppAfterApp, so an earlier build can be restored.
  • Play passes stop working after 30 minutes; the record of each pass is kept.
  • AI assistant connections: an approval is remembered for up to 30 days, then you approve again. Connection records are kept, and marked as disconnected when you disconnect. YOU → Connections stops listing an app that has no approval and hasn't been used for 30 days. When you approve a new claude.ai or ChatGPT connection, your older connections of that same app are disconnected.
  • Your account, profile, posts, follows and votes: kept until you ask us to delete them. For now, deleting an account or a game is done by hand: write to us. When we delete a game, it comes off the site at once and its files are deleted after 30 days.
  • Messages to us stay in our mailbox until we delete them; you can ask us to.
  • Sign-in records and hosting logs: a sign-in session ends when you sign out on that device. The sign-in service's security log and the hosting logs are kept under those services' own settings.

Children

You must be 13 or older to have a AppAfterApp account (see our Terms).

Your choices

  • Change your display name and bio in YOU → Profile.
  • Disconnect an AI app in YOU → Connections. This withdraws its access straight away: it can't use your account again until you approve it again. You can also remove the connector in your AI app.
  • Write to us to get a copy of your data, correct it or delete it.
  • If you're unhappy with how we handle your data, please tell us. You can also complain to the Information Commissioner's Office (ico.org.uk), the UK's data-protection regulator.

Changes

When this changes, we update this page and its date.

Contact

Questions or requests: support@appafterapp.com. By post: Michael Anthony, trading as NEX6, 2 Cross Street, Basingstoke, RG21 7DQ.