Squadlings
Privacy

What we keep

Squadlings keeps only what the game needs. This page lists all of it.

Who is responsible

Squadlings. Contact: [email protected]

Your account

  • Your player name (made up automatically), when the account was created, your last sign-in and your last visit.
  • If you sign in with Google: your Google account ID and your confirmed email address.
  • If you sign in with MetaMask: your wallet's public address.
  • When each sign-in method was linked and when it was last used.
  • A log of each sign-in, with the method and the date. It is deleted after 12 months.

The game

  • Your Runs. Only you see them.
  • The ghosts of your squads, with your player name. Other players see them as opponents.
  • The logs of your fights, for the replays.
  • The rankings, worked out from the Runs.

Your email address and your wallet address are never shown to other players.

In your browser

Only the game's own cookies, all httpOnly, secure and SameSite Lax:

  • sof.sid: your session. 180 days, renewed on every visit.
  • sof.nonce and sof.google: used while you sign in. 10 minutes.

In local storage: whether the sound is on or off, and which tips you have already seen. In session storage: the page to go back to after signing in with Google.

There are no ads and no third-party analytics. The fonts are served by this site.

What we do not keep

  • Passwords. There are none.
  • Your Google name or photo, or any Google tokens.
  • MetaMask messages or signatures.
  • IP addresses in the database. They are only used in memory, to limit how many requests one address can make.
  • Payment details.

Backups and logs

There is one backup a day and the last 14 are kept, so something deleted can stay in the backups for up to 14 days.

The server logs only hold technical errors, with no email addresses, wallets or IP addresses.

Other services

  • Cloudflare carries the site's traffic and sees IP addresses.
  • Google, only if you sign in with Google.
  • MetaMask runs in your browser. The game sends it nothing.

Deleting your data

Delete my account, in the account menu, deletes your account, your sign-in methods, your sign-in log and your Runs. In other players' replays your ghosts become Deleted player.

You can also ask by email: [email protected]

Accounts with no sign-in for 24 months are deleted automatically, in the same way.

See also the Terms.