1. INFORMATION WE COLLECT
We collect information you provide directly to us when you register for an account, such as your email address, chosen callsign, and password used for authentication.
2. API KEYS & SENSITIVE DATA
To enable AI features, you may optionally provide third-party API keys (e.g., OpenRouter, Inworld). We take the security of this data extremely seriously.
- Encryption: Your API keys are encrypted at rest using AES-256-GCM.
- Usage: Keys are used strictly server-side to proxy requests to the respective AI services. They are never returned to the client browser after saving.
- Risk Acknowledgment: Despite our robust security measures, storing sensitive keys inevitably carries risk. By providing your keys, you acknowledge and accept this risk. We are not liable for any compromises.
3. GAME DATA AND TELEMETRY
We store game session data—including match outcomes, accuracy metrics, shots fired, and AI model performance—to maintain the global leaderboard and improve the game experience. Anonymized AI reasoning logs may also be securely retained for analysis and benchmarking purposes.
4. THIRD-PARTY SERVICES
When interacting with the AI functionalities, your chat prompts, system instructions, and simplified game states are sent to the services associated with your provided API keys (such as OpenRouter or Inworld). Please review their respective privacy policies to understand how your data is handled and processed by them.
5. DATA RETENTION & DELETION
Keys and metrics are stored alongside your account. If you wish to delete your account or wipe your stored API keys, please notify us, or use any integrated data management functionality if available. Wiping an API key will permanently remove its encrypted record from our database.