Member accounts
You join with a username and password. No email needed. The site stores your username, a salted password hash, a hashed recovery code and sign-in sessions. Your username appears beside approved comments. I can’t retrieve your password or recovery code.
Cookies and visits
An HTTP-only cookie keeps you signed in for up to seven days. The visit counter counts page loads rather than individual people. Short-lived hashed request identifiers help limit abuse. The host may also keep connection logs.
Comments and votes
I read comments before they appear. I can reply, hide a comment or suspend an account. Each member has one vote in the poll; choosing again changes that vote.
Keep it relevant and civil. Leave out contact details, passwords, private logs and copyrighted game files. Don’t link to pirated downloads. If you’re reporting a problem, include the build, handheld, Windows Mobile version and what you did before it happened.
Downloads
Ports and the software archive don’t need an account. I can open downloads or require a separate code for either section. An HTTP-only cookie remembers an unlock for up to 12 hours; changing a code or its protection setting cancels old unlocks. Download codes are stored as salted hashes. Documents still need member sign-in.
A download doesn’t include a licence for the original games. Use your own legally obtained game files. Check the device requirements and known problems before trying a build. Before flashing a ROM, make sure you have the recovery instructions for your exact model.
Your account
On your member page you can sign out, change your password, replace your recovery code or permanently delete the account. Deleting it also removes your comments and poll vote. Backup copies and hosting logs are kept for the host’s retention period.
Email updates
The email list is separate from your member account. Signups open when the mail service is connected. The site stores your address, confirmation status and the updates sent to you. The confirmation link expires after 48 hours; unconfirmed addresses are removed periodically. You can use RSS without an account.
I choose which updates to send. Resend handles the address and message for delivery. Every update includes an unsubscribe link, which removes your address and delivery history from the active database. Unsubscribing keeps your member account. Deleting your member account leaves the separate email signup as it is.
Questions or a security problem?
Use Help & Comments for questions. If you spot a security problem, start with a brief description that doesn’t include secrets or exploit details.