Privacy policy
In effect from 2026-10-20
The short version
- We store your nickname, your game progress and a random code that keeps you signed in.
- We don't use cookies, ads, analytics or tracking, and we don't sell or share your data.
- Your IP address is kept for at most 24 hours, only to stop abuse.
- Email xxxtrglyn@gmail.com and we will delete your profile.
Who is responsible
Crater Corps is run by the Crater Corps team ("we"), who decides how the data described here is used. You can reach us at xxxtrglyn@gmail.com.
What we collect and why
| Data | Why we need it | How long we keep it |
|---|---|---|
| Your nickname. Other players see it in rooms, during matches and on results screens. | To show who is playing. | Until your profile is deleted. |
| A random sign-in code. Your browser keeps the code; our server keeps only a scrambled (hashed) copy. | To recognise you when you come back, without a password. | Until your profile is deleted, or until you clear your browser's site data. |
| Game progress: level, XP, gold, when you joined and when you last played. | To keep your progress between matches. | Until your profile is deleted. |
| Match results: who played, the teams, damage, knockouts, XP and gold won or lost. | To pay out rewards and bets correctly, exactly once, even if the server restarts. | Until your profile is deleted, when your entries are removed or anonymised. |
| Your IP address, stored with a new profile. | To limit how many profiles one network can create in an hour, which stops spam. | Erased automatically after 24 hours. |
| Server logs, which can include an IP address when a connection is cut off for sending bad data. | To keep the service secure and fix problems. | Up to 14 days. |
We don't ask for your real name, email address, location or contact list, and we don't need them. Please don't use your real name or anything personal as a nickname.
What we store on your device
Crater Corps uses your browser's local storage, not cookies, for three things: the sign-in code described above, and whether you have turned the music or the sound effects off. All three are needed for the game to work as you'd expect, so we don't ask for consent to store them. Clearing your browser's data for this site removes them, and you will start again as a new player.
Our legal reasons
Where data protection laws such as the GDPR or UK GDPR apply, we use your nickname, sign-in code, progress and match results because we need them to provide the game you asked to play (performance of a contract). We use IP addresses and server logs because we have a legitimate interest in keeping the service safe from abuse; we keep them as briefly as we can.
Who else sees your data
Other players see your nickname, level, team and in-game results. The game runs on servers provided by Amazon Web Services (Lightsail) in Singapore, who stores the data for us and may not use it for anything else. We don't sell your data, share it for advertising, or give it to anyone else unless the law requires us to.
The site loads no third-party scripts, fonts or trackers; everything comes from our own server.
Your rights
You can ask us to:
- tell you what data we hold about your profile and give you a copy;
- correct it;
- delete your profile and progress;
- stop using your data, where you have a right to object.
Email xxxtrglyn@gmail.com with your nickname. Because there are no passwords, we may ask you to confirm details only the player would know, such as your level, your gold, or when you last played, so that we don't delete someone else's profile. We reply within one month. If you are unhappy with how we handle your data, you can also complain to your local data protection authority.
Residents of California: we don't sell or share personal information, and we don't use it for targeted advertising.
Children
Crater Corps is not meant for children under 13, and we don't knowingly collect data from them. If you are under the age at which you can agree to online services in your country, ask a parent or guardian before you play. If you believe a child under 13 has created a profile, email us and we will delete it.
Security
Connections to the game are encrypted when the site is served over HTTPS. Sign-in codes are stored only in hashed form on the server, and access to the server is limited to the people who run it.
Changes to this policy
If we change this policy, we will update it here and change the date at the top. If a change matters to how your data is used, we will also say so on the game's home page.