Privacy
The short version: this site sets no cookies, shows no ads, carries no trackers and sells nobody's data. Below is exactly what is stored, where, and how to get rid of it.
Without an account
Nothing reaches the server until you publish something yourself. Your browser's localStorage (not cookies) holds a random owner key — so your own entries look like yours — plus loadout and cargo drafts, the catalogue view you picked and your language. None of that leaves your device.
What does reach the server is what you deliberately create: a tactical room, a build in the hub, a contract, a chat message. Each carries that same owner key — otherwise we could not give you, and only you, the right to edit it.
With an account
| Always | callsign, emblem, creation date |
| Password | stored only as a hash — the password itself is not in the database |
| optional. Only ever used to restore access by hand if it comes to that | |
| If you choose | roles, hours in game, time zone, description, contact (Telegram or Discord) |
| Steam sign-in | Steam ID, nickname and avatar — what Steam itself returns on confirmation |
| Telegram sign-in | ID, name, username and photo — what the Telegram widget returns |
Only the callsign, emblem, faction, roles, description and contact ever become public — and only when you open a contract or join the reserve. The email is shown nowhere and handed to nobody.
Where it lives and for how long
Where
Pages are served by Cloudflare Pages. Data lives in Supabase (PostgreSQL). Traffic is counted by Cloudflare Web Analytics — a cookieless beacon with no identifiers; we only ever see anonymous totals.
The Steam player count comes from our own measurements through the public Steam API. That is a number about the game, not about people.
How long
A tactical room lives 14 days from its last edit, then goes away with its marks. A contract stays until you close or delete it. A published build stays until you unpublish it. An account stays until you ask us to delete it.
Getting your data out or deleted
Both are buttons — no asking, no waiting. At the bottom of your profile there is a “Your data” block: Download my data hands you a single JSON file with everything recorded against you, and Delete everything wipes the account, contracts, reserve listing, chat messages, builds and rooms. Deletion is confirmed by typing your callsign and cannot be undone.
Entries made without an account are yours too: rooms and builds are signed with your browser's key, and the same block takes them out or wipes them — even if you never created an account.
If you have lost access to the account and still need it gone, write to the community chat or the channel. We do it within 72 hours and confirm when it is done.
Third parties
Telegram and Discord are links and sign-in buttons: until you press one, nothing goes there. Steam only ever sees the sign-in confirmation itself. Trailers from YouTube and Twitch load only after you click the poster — which is exactly why the page carries a still image rather than a player.
There are no ad networks and no tracking pixels here, and none are planned.
Questions about data go to the chat. If this page changes, we will say so in the channel: no quiet edits to the policy.