Data used for guest play
This service is operated by Pending operator configuration. Privacy questions can be sent to Pending contact configuration.
The browser stores preferences, pilot display choices, room routing details, and a random reconnect token. The authoritative server may transform the reconnect token into a one-way HMAC identity for verified leaderboard records. The raw token is not stored in leaderboard tables.
Registered accounts
The authentication provider processes account identifiers, email verification, session tokens, and optional OAuth data. The game stores a public alias, visual preferences, selected skin, level, and experience information.
Match and leaderboard data
Completed human matches may store alias, score, wins, kills, territory percentage, duration, room identity, and a privacy-preserving participant key. Bots and incomplete matches are excluded from public rankings.
Forum data
Public topics and replies include the author's public alias, language, timestamps, and submitted Markdown content. Reports and moderation records are restricted. Security systems may retain salted IP hashes and account identifiers for rate limiting and abuse prevention.
Optional analytics
Google Analytics 4 loads only after analytics consent. Consent Mode defaults analytics and advertising storage to denied. Events measure page use, language changes, guide views, forum actions, and game launches. The production operator must publish the final GA4 retention setting and regional consent configuration.
Service logs and security
Infrastructure may process IP address, user agent, request path, timestamps, errors, and connection metadata for delivery, debugging, fraud prevention, and security.
Language suggestions
The site may use a country code supplied by the hosting proxy, with the browser's Accept-Language header as a fallback, to suggest English or Spanish. It does not replace the requested page solely from the IP location. A language choice is stored in a first-party cookie for up to one year.
Sharing
Data is shared only with providers needed for hosting, authentication, analytics after consent, database operation, and security. The service does not claim to sell personal information.
Retention and rights
The current retention policy is: Pending retention configuration. Applicable users may request access, correction, deletion, or restriction through the contact page.
Children
The minimum age is Pending age configuration. Where local law requires parental consent at a higher age, that local requirement applies.
Changes
Material changes update this page's revision date.