Privacy Policy

The short version

• You can play without an account. Guests are tracked only by a random ID stored in their own browser.
• If you make an account, we store what the game needs: your username, your progress and your purchases of in-game items.
• We don't sell your data, we don't show ads, and we don't use third-party analytics or trackers.
• You can delete your account at any time in Account settings.

If you play as a guest

Your browser keeps a random guest ID and your settings (keybinds, sound, theme) in local storage. The server records, against that ID: the name you play as, when you first and last played, how many visits and games you've had, your knockouts, your best and total score, time played, and the name of the website that sent you the first time (for example a game portal like itch.io, just the site name, never the full address). If you later log in on the same browser, we note which account that guest became.

This is only used to understand how many people play and to show stats to the game's admins. It isn't linked to your IP address.

Your bank and save codes

Banked gems carry over between raids. We keep that number on your account, or for guests against the guest ID above, so it follows you to your next game on the same browser.

When you use Save & leave, the server stores what your tank had (class, skill points, size, satchel, kit, gear, sidearm and raid points) under a code only you are shown, with your username or guest ID. We keep just a one-way hash of the code, and the save is deleted 30 days after it runs out (codes last 90 days). If your account is linked to Discord, or you add a code with the bot's /save command, the code is also kept encrypted in your Discord list so the bot can show it to you. It leaves the list once it's used or runs out. When a code is used we note who used it and, so nobody can restore saves back to back, a one-way keyed hash of the IP address that did. That hash is erased after a day.

If you send feedback

Feedback from the menu is stored with your username or guest ID and, unless you untick it, your game version, browser, window size and server, and is posted to a private Discord channel only the admins can see. Your IP address is not stored with it.

Daily rewards and pings

The daily rewards track keeps, with your username or guest ID, which day you are on, when you last claimed and roughly what time of day you usually play (so a reminder lands then). If you turn pings on, your browser gives us a push address and keys for it; we keep those with your username or guest ID and only use them for "your daily reward is ready" and Raid Night reminders. Turn them off with the bell on the menu or "Turn these off" on a ping, and the address is deleted. One you never use again is deleted after four months.

To see where new players get stuck, each visit to the game page notes, with your guest ID (and username if you are logged in): whether you are on a computer or a phone, the site that sent your browser the first time, whether it is your first visit, how long the page took to load, and whether you pressed Play, got into a raid and played for a minute. It holds no IP address and no browser details, stays on our own server, and is deleted after 90 days.

If you make an account

We store:

• Login details: your username and a securely hashed password (we never store the password itself), a hashed recovery code, and, if you log in with Discord, your Discord user ID, display name and avatar. We only ask Discord for the identify permission, so we never see your email, servers or messages.
• Game progress: rank and rank points, placement games, gemdust balance and every change to it, items you own, bought, gifted or refunded, what you're wearing, daily quests, achievements, raid results and per-game stats.
• Social: your friends, friend requests, blocks, and direct messages with friends (the most recent 200 per conversation).
• Invites: your invite code, and for an account made from someone's invite link, who invited it and whether it counted. To stop people inviting themselves, the sign-up IP address is kept only as a one-way keyed hash, and the IP addresses of both accounts are compared as hashes.
• Sessions and security: a session for each device you're logged in on (with its IP address and browser type, deleted when the session expires after 60 days), and a log of account events such as sign-up, purchases, password changes and moderator actions. IP addresses in that log are removed after 90 days.

Cookies and local storage

• A session cookie keeps you logged in. It's required for accounts to work and isn't used for tracking.
• A short-lived cookie is used during Discord login to protect it from forgery.
• If you open someone's invite link, its code is kept in a cookie and local storage for 30 days so it can be credited when you sign up. It's removed once you sign up or log in.
• Local storage holds your settings, the guest ID and a per-tab ID that lets you rejoin your raid after a disconnect.

There are no advertising or analytics cookies.

What's visible to other players

Your username, rank badge, equipped cosmetics and in-raid score are shown to everyone in the game, on the leaderboard and on your profile. Friends can see whether you're online, in the menu or in a raid. Chat messages in a raid are visible to the players in it.

Who else handles data

• Our hosting provider runs the server. Server logs, which include the IP addresses of connecting players, are used only for troubleshooting and abuse prevention.
• Discord, if you use Discord login or our Discord bot. Encrypted database backups are stored in a private Discord channel only the admins can access.
• Google Fonts serves one of the game's fonts, so your browser contacts Google when the page loads.

We don't share or sell data to anyone else. We may disclose information if required by law.

How long we keep it

Account data is kept while your account exists. When you delete your account it's removed right away from the game and permanently erased after 30 days (the grace period lets moderators help if the deletion was a mistake). Encrypted backups roll over and are gone within about 6 months. Guest records are kept to measure player numbers over time.

Your choices

• Delete your account, change your username, or link and unlink Discord in Account settings.
• Clear your browser's site data to remove your guest ID and settings.
• Ask us for a copy of your data or for anything else about your privacy in our Discord server.

Children

Accounts are for players aged 13 and older. If you believe a child under 13 has made an account, contact us and we'll delete it.

Changes

If this policy changes we'll update the date at the top, and for important changes we'll post in the game's update notes.