Privacy Policy

Last updated 12 September 2026

WARPIXEL.cc is a browser game. This page says exactly what it stores, why, and who else sees it. It describes what the software actually does — if something here stops being true, the page changes with it.

Playing without an account

You can play as a guest. Guests get a randomly generated callsign, are not rated, and no account record is created. A guest match exists only in the server's memory while it is being played, and is discarded when the lobby closes.

What an account stores

• Email address and password — held by our authentication provider, Supabase. Passwords are hashed by Supabase; this site never sees or stores your password.
• Callsign — the username you choose, which is public: it appears to opponents, in the leaderboard and to your friends.
• Rating and record — your Elo rating and win/loss counts.
• Match history — for each rated match, the two accounts involved, their ratings before it, the rating change and the time it was played.
• Friends — friend requests you send or receive, and who you are friends with.

Callsigns, ratings and records are readable by anyone using the site, because the leaderboard and opponent names are public by design. Your email address is not: it is never shown to other players.

Storage in your browser

No advertising or analytics cookies are used, and there is no third-party tracking. The site keeps these values in your browser's local storage:

• Your sign-in session, so you are not signed out on every visit.
• Your callsign, so it is filled in the next time you play.
• Preferences — whether sound is muted, whether the news pane is open, the sidebar width and whether the 3D terrain is on.
• Your Armaments loadouts — the sets you build and their names.
• Operations progress — which theatres you have cleared, for players without an account. With an account this is stored on the server instead.
• Map markup — anything you draw on the board during a match, kept per lobby.
• The match you are in — its code and your seat in it, so a refresh or a crashed tab can put you straight back into the game. It is cleared when you leave the match.

All of this stays on your device: none of it is sent to the server, and your markup is never shown to your opponent. Clearing your browser's site data removes it and signs you out.

Who else processes your data

• Supabase — accounts, authentication and the database.
• Resend — sends the account confirmation email. It receives your email address for that purpose.
• Dataforest — hosts the server the game runs on. Its web server keeps standard request logs, which include IP addresses, for operating and securing the service.
• Google Fonts — the site's typeface is served from Google's font servers, so loading a page requests it from them. That request carries your IP address and browser details, as any request to any server does. It is not used to identify you here, and no Google cookie is set, but it is a request to Google and is listed for that reason.

Your data is not sold, rented, or shared with anyone else.

How long it is kept

Account data is kept while the account exists. Match records are kept so ratings and history remain meaningful. Lobbies and in-progress games are held in memory only and are dropped when the game ends or after a period of inactivity.

Your choices

You can ask for a copy of your data, correct it, or have your account and its data deleted. Deleting an account removes your profile, friend links and sign-in details; past match rows are kept but stop pointing at you. To make a request, use the contact form.

Children

Accounts are not intended for children under 13. If you believe a child has created one, tell us through the contact form and it will be removed.

Changes

If this policy changes, the date at the top changes with it. Significant changes will be noted in the game.

Questions, or a request about your data? Use the contact form.