Privacy Policy
Last updated: 19 April 2026
War 1792-1815 ("we", "us", "the Service") is operated by Steve Atkins, based in Australia. This policy explains what data we collect, why, and how we handle it.
1. Data We Collect
Account Data
When you register, we collect:
- Email address — used for login, password resets, and transactional emails only.
- Username — your chosen display name, visible to other players in-game.
- Country (optional) — if you choose to provide it on your profile.
Payment Data
Payments are processed by Creem (creem.io). We do not store credit card numbers, bank details, or other financial information on our servers. Creem handles all payment processing under their own privacy policy.
Game Data
When you play, we store your game state (orders, unit positions, game history) to provide the Service. This data is associated with your account or anonymous session.
Technical Data
- Session tokens — we use encrypted PASETO tokens stored in HTTP-only cookies to maintain your login session. Sessions expire after 24 hours.
- Theme preference — stored in your browser's localStorage (dark/light mode). Never sent to our servers.
- Server logs — we log IP addresses and request metadata for security and debugging purposes. Logs are rotated and not retained beyond 30 days.
2. How We Use Your Data
- To provide and maintain the game service.
- To authenticate your account and manage sessions.
- To process payments via Creem.
- To display your avatar via Gravatar (using a hash of your email — your email is never sent to Gravatar in plain text).
- To send transactional emails (login PINs, password resets). We do not send marketing emails.
3. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Creem | Payment processing | Email, payment details (handled by Creem) |
| Gravatar | Profile avatars | SHA-256 hash of email only |
| Leaflet / OpenTopoMap / Stadia | Map tiles | Map tile requests (no personal data) |
We do not use any analytics, tracking, or advertising services.
4. Data Storage & Security
Your data is stored on servers located in the United States. Account data is stored in PostgreSQL. Active game state is stored in-memory (Khepri/Mnesia) and archived to PostgreSQL on game completion. All connections use HTTPS/TLS encryption.
5. Data Retention
- Account data — retained until you request deletion.
- Game history — retained for replay and statistics. You may request deletion.
- Session data — automatically expires after 24 hours.
- Server logs — retained for up to 30 days.
6. Your Rights
You may at any time:
- Request a copy of the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and all associated data.
To exercise these rights, contact us at the address below.
7. Cookies
We use a single HTTP-only session cookie (session_id) for authentication. We do not use tracking cookies, advertising cookies, or any third-party cookies.
8. Children
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us.
9. Changes
We may update this policy from time to time. Material changes will be noted on this page with an updated revision date.
10. Contact
For privacy enquiries or data requests:
Email: admin@war1792.com