Privacy

Your account

When you register we keep your login name, a hashed password (never the password itself), the display name you choose, your language and site theme, and your game data: cards, bots, battles, credits and progress.

An email address is optional. If you add one, we keep it and the time you confirmed it, and use it only for account mail such as confirmation and password reset.

What you write and send

Bot names, your profile bio, chat messages and battle results are visible to other players and guests. Lobby chat keeps only the most recent messages.

Feedback keeps your text, the page you sent it from, your browser name (user agent), your language and, if you add them, an email address and images. Images are re-encoded, which removes location and other metadata. Your IP address is not stored with your feedback.

When you report a chat message, a bot name or a profile, we keep who reported what and when, so the moderators can review it.

Technical data

A signed-in session remembers your browser and system name, a shortened network address (not your full IP address) and when it was last used. You can see and end your sessions in your account settings.

To spot duplicate accounts and abuse, we keep hashed (one-way scrambled) values of your device cookie and shortened network address. Rate limits briefly keep an IP address so the same address cannot flood a form.

Server logs record requests: the page address, the time, the response and the IP address of the connection. They are used to run and protect the service.

When you watch a battle we count the view against your account, or for guests against a hashed device cookie, and keep simple activity counters without personal data.

Cookies and local storage

The site uses only its own cookies; there are no advertising or third-party analytics cookies:

• arena_session keeps you signed in.
• arena_device is a random device id used for the safety checks and guest view counts above.
• arena_lang remembers your language.
• arena_theme remembers the site theme you picked.
• arena_news_seen remembers the latest news you have seen.
• arena_puzzle keeps a guest's answer to the daily puzzle for two days.
• arena_ref remembers which friend invited you, for up to 30 days.
• arena_move_push is set once when you come over from the old address. It lets your new notifications replace the old site's, and it is deleted as soon as you turn them on here.

Your browser's local storage also keeps small interface preferences, such as whether the chat panel is open.

Notifications

If you turn on push notifications, we keep the subscription your browser gives us (an address and keys of your browser's push service), a device label and your language. Notifications are delivered through that push service. You can turn them off at any time.

Who else sees your data

We do not sell your data and do not show ads. Account mail is sent through an email delivery provider, and push notifications go through your browser's push service. Everything else stays on the site's own server.

Your choices

You can change your display name, bio, email, theme, language and notifications yourself. To get a copy of your data or delete your account, contact us using the link below.

Contact

Questions about privacy? Write to Arthur Kasimov using Feedback.