Skip to content

External Resources đź“Ą

To reduce risk and overhead related to privacy compliance, Poki blocks all external requests by default for games on our platform. This means your game may not call any third-party URLs unless they have been explicitly approved.

Forbidden Request Types

To maintain platform safety and performance, the following external request types are not allowed:

  • ❌ Unnecessary External Assets — Requests to third-party services for non-essential assets such as:

    • Google Fonts
    • Externally hosted images or audio
    • Code libraries from external CDNs (e.g. jsDelivr)

    Instead, you can download and bundle these assets directly into your game build. No calls to external URLs should be made at runtime for these resources.

  • ❌ In-Game Chat Systems — In-game chat can expose players, especially younger ones, to risks such as inappropriate language, bullying, and other interactions that may harm their experience. To address these risks, Poki does not allow any chat systems in games with the exception of those covered by Poki Guardian, our moderation tooling that is slowly being rolled out to select games). If you want to encourage players to interact with each other, you could instead have an emoji system that players can also use to express their feelings.

  • ❌ External Account Systems — Games should not collect any personal information from players. Login systems that require email addresses or integrations with services like Google or Facebook login are not allowed. Any system that asks for identifiable personal data like email must be removed.

Exceptions

While most external requests are restricted, there are some acceptable use cases for third-party resources.

  • Multiplayer Games with External Servers: If your game uses an externally hosted server for multiplayer, that’s fine once you get it approved by Poki!
  • Third-Party Analytics Providers: Analytics services like GameAnalytics, ByteBrew, or your own in-house solution may be approved on a case-by-case basis. You must provide a Privacy Policy covering any data collected and how it’s handled.
  • Leaderboards
  • Account systems with a username (with profanity filter) and password, but without personal data collection.

If your game requires external resources, follow these steps:

  1. Send the exact link(s) and a short explanation of how they’re used to the Developer Support team.
  2. If approved, Poki will configure the Content Security Policy (CSP) for your game.
  3. You’ll need to provide an up-to-date Privacy Policy: a. Must be hosted on a live webpage accessible to all players; b. Must be linked within the game itself; c. Must clearly describe how the external service handles user data;

Note: Poki cannot review or provide examples of privacy policies due to a conflict of interest. You’ll need to make sure your policy covers all necessary info.