Terms & privacy

Version 2026-11-10

Local play

The emulator, original demos, and a cartridge you select execute in this browser. Cartridge bytes, game inputs, save RAM, and browser boot logs are not submitted to the operator. Closing or stopping the console discards session state. Use cartridges you have permission to use.

Interaction rights

For content submitted to the site, its API, or its agent tools, you grant the site operator non-exclusive rights to retain, reproduce, use, and adapt agentic interactions, submitted content, outputs, and interaction records, to the extent you can grant those rights. You retain ownership and your rights to use that content. This grant does not disclose private submissions publicly or override the privacy controls below.

Contact submissions require explicit acceptance. Agent use requires acceptance of this version and a recorded, signed delegation from the represented user. A visit, download, installation, or public discovery request does not constitute acceptance or authorize an agent to accept on your behalf.

Records and access

Contact messages and their reply addresses are stored for administrator review. Agent applications retain public identity keys, requested scopes, approved delivery destinations, acceptance evidence, decisions, delivery status, and audit events. API keys are stored as hashes; delivery retries use encrypted envelopes that are deleted after acknowledgement or expiry. Never submit secrets or sensitive device paths in contact messages or applications.

Administrative records are accessible only through server-authenticated administrator access. Audit records are cleaned after 90 days. Contact and approval records remain until the operator removes them; use the contact form to request access or deletion. Cloudflare processes hosting traffic under its own service policies. A hash of the trusted client IP identifies unauthenticated callers for rate limits. No advertising analytics are installed.

Access limits and approvals

Ordinary callers share at most 30 operations in a rolling 60-second window across pages, downloads, API and MCP, every key belonging to the same user, and delivery work. Honor HTTP 429 and Retry-After. Only server-authenticated administrators are exempt. All keys, including administrator keys, expire within seven days and can be revoked sooner.

The first agent/user application requires administrator approval. Callback ownership is verified before key delivery. Approval is limited to the recorded identity, scopes, destination, and delegation expiry. Material changes require a new review. Downloading a skill does not grant permission to submit an application, accept terms, or send messages.

Software

The original demos are MIT licensed. The linked BlastEm frontend is GPL-3.0-or-later. QEMU and guest system components retain their licenses. See the source and notices and runtime provenance. This experimental player is provided without warranty. It is an independent project and is not affiliated with Sega.