1. Introduction
At Crypto Wars, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our free multiplayer browser game.
By using Crypto Wars, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Guest Players
When you play as a guest, we collect minimal information:
- Browser Information: Browser type, version, and language
- Device Information: Device type, operating system
- IP Address: For security and rate limiting purposes
- Game Session Data: Username (temporary), game statistics, actions during gameplay
Guest data is temporary and typically deleted within 24-48 hours after your session ends.
2.2 Registered Users
When you create an account, we additionally collect:
- Account Information: Email address, username, password (hashed)
- Profile Data: Level, XP, tokens earned, premium status
- Game Statistics: Total kills, deaths, games played, playtime
- Transaction History: Skin purchases, token usage (in-game currency only)
- Referral Data: Referral code, referrals made
2.3 Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for details.
3. How We Use Your Information
We use the collected information for the following purposes:
- Provide Game Service: Enable gameplay, save progress, maintain leaderboards
- Account Management: Create and manage your account, authentication
- Game Improvements: Analyze gameplay patterns, fix bugs, balance game mechanics
- Security: Prevent cheating, detect abuse, rate limiting, ban enforcement
- Communication: Send important updates, respond to support requests
- Analytics: Understand user behavior, improve features, optimize performance
4. Data Sharing and Disclosure
We do NOT sell your personal data to third parties.
We may share your information only in the following circumstances:
- Service Providers: Third-party services that help operate our game (hosting, database, analytics)
- Legal Compliance: When required by law, court order, or government regulation
- Security: To protect against fraud, abuse, or harmful activities
- Business Transfer: In the event of a merger, acquisition, or asset sale
4.1 Third-Party Services
Crypto Wars uses the following third-party services:
- Vercel: Website hosting
- Neon Database: PostgreSQL database hosting
- Socket.IO: Real-time game communication
5. Data Security
We implement industry-standard security measures to protect your data:
- 🔒 SSL/TLS Encryption: All data transmitted is encrypted
- 🔐 Password Hashing: Passwords are hashed using bcrypt (never stored in plain text)
- 🛡️ Rate Limiting: Protection against brute-force attacks
- 🔍 Regular Security Audits: Code reviews and vulnerability scanning
- 🚫 Access Control: Limited employee access to personal data
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Rights (GDPR Compliance)
If you are located in the European Economic Area (EEA), you have certain data protection rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your account and data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, contact us at [email protected] or visit our Contact page.
7. Data Retention
We retain your personal data only as long as necessary:
- Guest Data: Deleted within 24-48 hours after session ends
- Registered User Data: Retained while your account is active
- After Account Deletion: Most data deleted immediately, some retained for legal/security purposes (up to 90 days)
- Legal Requirements: Some data may be retained longer if required by law
8. Children's Privacy
Crypto Wars is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending an email notification (for registered users)
You are advised to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, contact us: