Privacy Policy

Effective date: 12.10.2026. This policy explains what personal data Terrace Wars ("the Game", "we") collects, why, how long we keep it and what rights you have. The controller of your data is the Terrace Wars project (terracewars.com). Contact for any privacy question: info@terracewars.com.

1. Who may use the Game

The Game is intended for adults only. You must be at least 18 years old to create an account. We do not knowingly collect data from minors; if we learn that an account belongs to a person under 18, we delete it.

2. What data we collect

• Account data: login, e-mail (to recover the password and answer your requests), password (stored only as a salted scrypt hash, never in plain text), interface language, registration date, your settings and the date and version of the documents you accepted.
• Telegram sign-in: if you play through the Telegram Mini App we receive your Telegram user ID, username/first name and language code from Telegram. We do not receive your phone number.
• Game data: your fan character (name, club, appearance, stats, gear, progress), currency balance and its history, fights, matchday activity, crafting, market listings, crew membership and achievements.
• Content you create: chat messages, crew announcements, the "About me" text of your public page and messages you send to the developers (feedback).
• Moderation data: reports you send or receive, sanctions and appeals.
• Technical data: a session token (in a cookie or the app's storage) and the time of your last activity. Our hosting provider may keep standard server logs (IP address, time, requested URL) for security for a short period.
• Usage statistics — Google Analytics 4 (pages viewed, device and browser type, approximate country). Until you press "Accept" in the cookie banner it works without cookies and receives only anonymous signals (Google Consent Mode); with your consent it also uses analytics cookies.

We do not collect payment card data, precise location, contacts, photos or biometric data, and we do not use your data for advertising or profiling.

3. Why we process it and on what legal basis

• To provide the Game and your account (performance of the contract — GDPR art. 6(1)(b); LGPD art. 7 V; KVKK art. 5(2)(c)).
• To keep the community safe: moderation, fraud and cheating prevention, security logs (legitimate interest — GDPR art. 6(1)(f); LGPD art. 7 IX).
• To show your public page, rankings and chat messages to other players (contract; the public page can be switched off in Settings).
• Usage statistics without cookies — our legitimate interest in keeping the Game working and improving it (GDPR art. 6(1)(f)); analytics cookies — your consent in the cookie banner (art. 6(1)(a)), which you can change in Settings at any time.
• Where the law requires consent (for example Russian Federal Law No. 152-FZ and Chinese PIPL), we rely on the consent you give when registering. You may withdraw it at any time; this ends your use of the Game because the account cannot work without the data.

4. Who sees your data

• Other players see your character name, club, level, gear, stats, achievements, chat messages, crew and — if enabled — your public page with the "About me" text. Your login, password, language and settings are never shown.
• Service providers that process data on our behalf under a data processing agreement: hosting / data-centre provider; Google Ireland Ltd / Google LLC (Google Analytics, only with your consent). Telegram processes data under its own policy when you use the Mini App.
• Authorities, only when required by applicable law.

We do not sell or rent personal data and do not "share" it for cross-context behavioural advertising (CCPA/CPRA).

5. Where the data is stored and international transfers

The data is stored on servers of our hosting provider. If data is transferred outside your country (for example outside the EEA/UK, Brazil, Turkey or China), we use the safeguards required by law, such as the European Commission's standard contractual clauses or your explicit consent where that is the required basis. Where the law of your country requires local storage of citizens' data (for example Russia), we comply with it.

6. How long we keep it

• Account and game data — while your account exists. When you delete the account, it is erased within 30 days, except data we must keep by law.
• Chat messages — up to 12 months; deleted together with the account.
• Moderation records — up to 24 months after the sanction ends, to handle repeat violations and appeals.
• Server security logs — up to 30 days.
• Google Analytics data — 14 months.

7. Your rights

Depending on where you live you have the right to: access your data and get a copy (portability); rectify it; erase it ("right to be forgotten"); restrict or object to processing; withdraw consent; not be subject to solely automated decisions with legal effects (we make none); and lodge a complaint with your data protection authority (for example your EU/UK supervisory authority, Roskomnadzor, ANPD in Brazil, KVKK in Turkey). California residents have the rights to know, delete, correct and opt out of sale/sharing — we do not sell or share data.

You can exercise most rights yourself in Settings: "Download my data" and "Delete account". For anything else write to info@terracewars.com; we answer within 30 days (15 days where Brazilian law applies).

8. Security

Passwords are hashed with scrypt and a unique salt; sessions use random tokens; the site works over HTTPS; access to the servers is limited to authorised staff. No system is perfectly secure: if a breach affects your data, we will notify you and the authorities as the law requires.

9. Cookies and local storage

We use strictly necessary cookies and local storage and, only with your consent, Google Analytics cookies. See the Cookie Policy.

10. Changes

We may update this policy. If the changes are material, the Game will ask you to review and accept the new version at your next sign-in.