Privacy policy

Data we process

The prototype stores a nickname, a random profile identifier, a hashed access token, deck choices, mission progress and earned decorations. Your browser stores the access token and chosen language. Hosting services may process connection information, including IP addresses, to operate and protect the service.

Why we use data

We use profile data to provide and save the game at your request. We use limited technical data for service security and reliability. These purposes rely on providing the requested service and legitimate interests in protecting it. Optional marketing will not be enabled without the consent required by law.

Service providers and retention

Infrastructure and email providers process data needed to host the game and handle support. The current game backend is hosted on Contabo; the domain and mailbox use Namecheap. Fonts are currently loaded from Google Fonts, which receives connection information. Supabase is being prepared for future account services; it does not yet store this prototype's game profiles.

We keep profile data while it is needed to provide the profile, subject to deletion requests and legal obligations. Retention periods and any required international-transfer safeguards will be reviewed before production account and payment services are enabled. We do not sell personal data.

Optional analytics

Google Tag Manager (GTM-TXWLPN5D) loads only after you allow optional analytics. Tags configured in that container may process usage events and connection data. Advertising consent remains denied. Choosing essential only blocks the container. You can change or withdraw your choice using Privacy choices in the footer. The container configuration and provider retention settings require review before a production launch.

Your choices

Contact support to request access, correction, deletion, restriction or portability of your data, or to object where applicable. We may need to verify ownership of the profile. You can complain to the relevant data protection authority, including the UK Information Commissioner's Office. Do not email your access token or password.

Support and privacy requests