Last updated: 16 April 2026 · Operated by Crit Publishing Pty. Ltd. (ACN pending), Australia
This Privacy Policy explains how Crit Publishing Pty. Ltd. ("we", "us", "our") collects, uses, and protects personal information when you use Warstrife (the "Service"). We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Plain-language summary: We only collect what we need to run the game. If you sign in with Google or Discord, we receive your name and email from them. We store match history and skill ratings. We don't sell your data. You can request deletion at any time.
1. Information we collect
We collect the following categories of personal information:
- Account information (only if you sign in): name and email address provided by Google or Discord via OAuth. We do not display or store profile images from these providers; all in-game player portraits are placeholder letters until first-party art ships.
- Gameplay data: match history, skill rating (Elo), wins/losses, performance statistics, chat messages, and commands sent during matches.
- Technical data: IP address, browser/device information, session cookies (required to keep you signed in).
- Guest-mode players: we do not collect any account information. A temporary per-session identifier is used while you are connected, and is discarded when you disconnect.
2. How we use your information
- To operate the Service, match players, and run ranked games.
- To maintain match history, leaderboards, and skill ratings.
- To detect and prevent cheating, harassment, and abuse.
- To communicate about the Service (e.g., service announcements, not marketing).
- To comply with legal obligations.
3. Third-party services
We rely on the following third parties, each of whom may process limited personal data on our behalf:
4. Cookies
We use a single session cookie (better-auth.session) to keep you signed in for up to 30 days. We do not use advertising, analytics, or tracking cookies. Guest mode uses only sessionStorage, which is local to your browser tab and never sent to our servers.
5. Data retention
- Account data: retained while your account exists. Deleted within 30 days of account-deletion request.
- Match history: retained indefinitely as part of leaderboard integrity, or until you request deletion.
- Command audit logs: per-match JSON files are retained for 90 days to support replay, cheat analysis, and dispute resolution, then automatically purged.
- IP logs: retained for 30 days for anti-abuse purposes.
6. Your rights
Under the Australian Privacy Act, you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your account and associated data.
- Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your data.
7. Security
We take reasonable measures to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure — including TLS-encrypted connections, hashed/opaque session tokens, and limited-access hosting. No system is perfectly secure; use a strong unique password on your Google/Discord account and enable multi-factor authentication.
8. Children
The Service is not intended for children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced in-game and the "Last updated" date above will be revised. Continued use of the Service after changes constitutes acceptance.
10. Contact
For privacy questions or deletion requests, email critpublishing@gmail.com with the subject line "Privacy Request". Include your account email (if signed in) or a description of the data concerned.