1. What we collect
At sign-up: your email address and a password hash, or the identifier of your Discord or Google account. Passwords are never stored in plain text.
While you play: your name, chosen avatar, match statistics, level and quest progress, and the history of in-game cosmetic purchases.
Technical data: the IP address and user agent of your session, and sign-in times. These are used to protect the account and to rate-limit requests.
2. What we do not collect
We do not collect phone numbers, home addresses or identity documents. User image uploads are disabled; avatars are chosen from a fixed set.
Card details never pass through our servers: payments are handled by the payment provider, and we only receive a transaction identifier.
3. How the data is used
To run your account and sessions, compute progression and leaderboards, process purchases, answer support tickets and act against rule violations.
Your name, avatar, level and match statistics are public: they appear on your profile, on leaderboards and on match pages. Your email address is never made public.
4. Cookies
Only technical session cookies are used. They are httpOnly, scoped to the service domain, and exist solely to keep you signed in.
There are no third-party advertising or tracking cookies.
5. Storage and sharing
Data is stored on the operator’s servers and with infrastructure providers: the database, cache, email service and payment provider. Only the data necessary to deliver the service is shared with them.
Data belonging to a deleted account is erased within 30 days. Records required by accounting law are kept in anonymised form for the statutory period.
6. Your rights
You may request a copy of your data, a correction, or deletion of your account through the support form.
Account deletion is irreversible: progress, cosmetics and purchased items cannot be restored.
The operating entity is named in the company details before public launch. Until then this document applies as the rules of a closed test.