What I keep, and what I do not

Your account

An account is an email address and a password. The password is kept only as a scrambled hash by the sign-in service, so nobody can read it back, me included. The email is used to sign you in and to send the mail that signing in needs: confirming the address and resetting a password. Other players never see it.

News emails (new seasons, new features, what is next up) go only to players who tick the box for them, when they sign up or later in Account. The box starts unticked, every news email has an unsubscribe link, and the same switch in Account turns them off. I keep a record of when you said yes or no, and it goes when your account does.

Your player

Everything the game is made of: your username, nationality, region, language, position and look, your stats and level, coins and crowns, items, your club, your matches and ratings, your training and jobs, and when you were last in. The game also keeps a record of what you did, such as training, buying or joining a club, because that is how it checks its own sums.

What you write

Your bio, which any signed-in player can read, and club chat, direct messages, reactions, friend requests and any report you send. They are stored so the people they are for can read them. A message somebody reports is shown to the moderators along with the report.

What other players can see

Your username, look, nationality, bio, club, stats, results and place in the rankings. Not your email, and not anything you have not put into the game yourself.

What the game measures

While you are signed in, the game records how it is used: that it was opened, which screens you open and for how long, which buttons, tabs and menus you tap (by the name the game gives them), which popups you open, whether a match was watched or skipped, how far sign-up got, and any error along with the screen it happened on. It never records what you type, your messages or anything you write. Each visit gets a random number so one visit's steps can be told apart; nothing is stored on your device for it. It is kept with your account in the game's own database, capped each day, read only by me to find where the game is broken or confusing, and deleted after 30 days.

Before you have an account, the game counts only how far sign-up got: that the game was opened, that the sign-up form was shown, sent and confirmed, and that a player was made. Each step is stored as a name and a time against a random number your browser makes for itself and keeps until your player exists, then throws away. No address, no device details, no email and nothing that ties it to you. It is kept for 30 days, and it is not sent at all if your browser says Do Not Track.

There is no switch for this. It is part of running the game: it is how I find what is broken, it records nothing you write, it stays in the game's own database, and it is gone after 30 days. If you object to it, write to me and I will stop it for your account or delete the account.

Errors

When something in the game fails, the error is also sent to Sentry (sentry.io), a service for finding faults in code: what failed, in which part of the game, on which version, with your browser and system. It carries no name, no email and no account id, and addresses in it have ids removed. Sentry keeps it for up to 30 days.

Screen recordings, only if you say yes

The game may ask whether it can record how you move through it, with PostHog (posthog.com, stored in the United States). If you say yes, it records the screens, where you tap and scroll, and turns them into recordings and heat maps. Everything you type and every chat, message and bio is hidden in the recording. It is not linked to your account, and nothing is stored on your device for it. If you say no, or never answer, nothing is recorded. You can change your answer any time in Settings, under Privacy.

Reporting a problem

Report a problem (under your face at the top right, in Settings, and in Account) sends your words with what the game can see at that moment: the screen, the date and time, the game's version, your device (browser, system, window size, language and time zone) and your last actions, up to 50. The form shows all of it before you send. Reports are read by the game's staff, kept while your account exists and deleted with it.

Who else handles it

• Supabase hosts the database and the sign-in service, so everything above lives on their servers, and the sign-in service writes the game's emails.
• Cloudflare serves this site and the game. Like any web host it sees your IP address, your browser and which address you asked for, in order to answer. It also delivers the game's emails, so it sees the address and the email it carries.
• Google Fonts supplies the handwriting on one screen, the club contract you sign, so that screen asks Google for a font file.
• Sentry receives error reports, as above.
• PostHog receives screen recordings, only from players who said yes.
• Mail to contact@kingstrikers.com is forwarded to my own mailbox.

Each of them keeps its own records of the requests it serves. None of them gets anything else from me.

What your browser keeps

Your sign-in and your settings, including your answer about screen recordings, in the browser's own storage on your device. That is how you stay signed in. There are no advertising or tracking cookies, and clearing your browser data signs you out.

Deleting your account

Write to contact@kingstrikers.com from the address you signed up with and say you want your account deleted. It is done by hand, on request, so it can never happen by accident, and it cannot be undone. In the game, Account, then Deleting your account, says the same.

What goes: your sign-in and email, your player, stats, items, coins and crowns, your messages, reactions and conversations, friends, notifications, and the record of what you did and what the game measured.

What stays: the results of matches you played in, and everybody else's part in them, with your name replaced by "Former player". Money you paid into a club's bank stays in its books without your name, and so does a report you sent about another player, so a moderator can still finish it; a problem report goes with the account. If you ran a club, it passes on the way it does when somebody leaves.

The same address gets you a copy of what is held about you.

Players under 13

You must be 13 or older to play. An account we find belongs to someone younger is removed, with everything it holds. A parent can write to contact@kingstrikers.com.

How long it is kept

For as long as your account exists, except the record of how the game is used, which is deleted after 30 days. The alpha reset at launch wipes the game world; it is not an account deletion, and it is not a privacy measure.

Changes

This page changes when the game does. The date below says when it last did.