Privacy

Playing and saved access

We use your display name, guest identifier, fighter, moves, scores, taunts, room membership and recent connection times to run and resume games. Your opponent sees your name, scores, revealed moves and sent taunts—not your hidden choice before the reveal. Guest access is protected with an expiring device credential; its hashed form is held with game records in Lovable Cloud.

Your browser saves guest access, the active game, adult confirmation, taunt preferences, sound and vibration choices, and visit-specific advert completion. This is separate from visitor analytics. Clearing browser data can remove your return access. Reset adult confirmation changes the age confirmation without deleting your saved game.

Existing accounts

Existing name-and-password accounts use a login address generated from the chosen name and store sign-in/session information through Lovable Cloud authentication. Passwords are handled by the authentication service; the game does not save password fields in game records. Owner permissions are restricted to an authorised account, not a typed display name.

Promotions, sharing and AI

We keep totals for game starts, invitations, completed adverts and advert website clicks, with identifiers to avoid duplicate counts. Advert files are hosted in Cloud storage. Clicking Visit website sends you to the advertiser’s separate website. Nothing is shared to WhatsApp or your phone’s sharing service until you choose to share; result images include player names and scores.

In the original account-based battle mode, requesting an AI taunt sends the entered battle moment, selected characters and score context to the AI service through Lovable’s AI Gateway. Ordinary solo decisions and automatic reactions do not use paid AI. Do not enter sensitive personal information in taunt requests.

Visitor analytics

Page visits, clicks and links, time on page, page speed and errors are recorded for visitors without waiting for an on-site consent choice. This analytics service uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors.

It records pages visited, where visitors came from, country, browser, operating system, device type, time spent, loading speed, errors and clicks. Detailed analytics is kept for 90 days and daily summaries for a year.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

Other services

Google Fonts supplies the site’s fonts and receives your browser’s font requests. Hosting, game storage, authentication and error-reporting services receive information needed to deliver and maintain the game. Advert destinations, WhatsApp and your chosen sharing services have their own privacy practices.

Retention and requests

Unfinished rooms and invitation access expire after 24 hours; access expiry is not a promise that the stored record is deleted. Game and account records currently have no automatic deletion schedule. Ask Stephen for access, correction or deletion of your records; identity checks may be needed to protect other players. Analytics does not identify individuals and cannot be matched to a personal deletion request.