Privacy Policy

Last updated: July 2026

ROM Palace ("we", "us") operates rompalace.com. This policy explains what data we collect, why, and the choices you have. We keep data collection to the minimum needed to run a fast, free firmware archive.

1. Information we collect

• Usage analytics. With your consent, Google Analytics 4 uses cookies to measure page views, downloads and general behaviour. IP addresses are anonymised. If you decline, analytics cookies are not set.
• Cookieless analytics. Cloudflare Web Analytics may collect aggregate, anonymous traffic metrics without cookies and without tracking you across sites.
• Download counts. We keep an aggregate, anonymous count of how many times each firmware file has been requested. This is not linked to you.
• Comments. If you post a comment, we store the name you type and your comment text. We also store a one-way hashed form of your IP address (not your actual IP) purely to prevent spam and rate-abuse.
• Security. Cloudflare Turnstile helps us tell humans from bots. Server logs may briefly record IP address and request data to protect the service.

2. Cookies

Essential security cookies (e.g. Turnstile) are always used and cannot be disabled. Analytics and advertising cookies are only set after you accept them in the cookie banner. You can change your choice any time by clearing your browser storage for this site.

3. Advertising

We may display ads (e.g. Google AdSense) to keep downloads free. With your consent, ad partners may use cookies to show more relevant ads. You can opt out of personalised advertising via Google Ads Settings.

4. Third-party services

We rely on these providers, each with their own privacy policy:

• Cloudflare (hosting, storage, security, analytics)
• Google (Analytics 4, and AdSense if enabled)

5. How we use data

To operate and improve the site, understand which firmware is most useful, prevent abuse and spam, and keep the service secure. We do not sell your personal data.

6. Data retention

Comments remain until removed by you (on request) or by us. Aggregate counts and analytics are retained per the provider's defaults. Hashed IPs used for rate-limiting are short-lived.

7. Your rights

Depending on your location (e.g. EEA/UK under GDPR), you may request access to, correction of, or deletion of your data, and withdraw consent at any time. To exercise these rights or request removal of a comment, contact us below.

8. Children

ROM Palace is not directed at children under 13 and we do not knowingly collect their data.

9. Contact

Questions or requests: [email protected]

10. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.