Privacy

Tinysword Kingdoms Arena · last updated 28 September 2026

Short version: you can play without an account. If you sign in with Google, the game keeps your account id and the name you pick; your email and picture are never shown to other players. No ads, no analytics, no tracking cookies. You can delete your account in the game at any time: Settings → Delete account.

Who is responsible

Tinysword Kingdoms Arena (the game at tinyswordswars.com and its itch.io page) is made by Santi Herranz, an independent developer, who is responsible for the personal data described here. Contact: [email protected].

Playing as a guest

• In your browser: your display name and your settings (sound, the private match level) are kept in your browser's storage, on your device. They never leave it except the name, below.
• On the game server: when you play, the server receives your display name, your orders in the match and your connection's IP address. It uses them to run the match and to protect the game from abuse (for example, a limit of rooms per address). A match lives in the server's memory and is gone when it ends; nothing of it is stored.
• Server logs: the server notes when a room opens and the IP address it was opened from, plus technical errors. The hosting provider keeps these logs for a limited time (days to weeks), for operating and securing the game.
• Your display name is shown to the other players in the lobby and in the match.

Signing in with Google (optional)

• When you sign in, Google shares with our sign-in provider, Supabase: your Google account id, your email address, your name and your profile picture's address. Supabase keeps them as your sign-in account, with the times and IP addresses of your sign-ins, for security.
• The game itself keeps a profile: your account id, the name you register, and when it was created and last used. Your registered name is public: other players see it, with a mark (⚜), in the lobby and in matches, and nobody else can use it.
• Your email and picture are never shown to other players, never sent to matches, and not used to contact you or for anything else.
• Your session (a sign-in token) is kept in your browser's storage for the game's domain, so you stay signed in on your next visit, until you sign out.

Why (legal basis)

• To provide the game and the account you ask for (running matches, keeping your name and your sign-in).
• Our legitimate interest in keeping the game working and safe (the IP limits and the server logs).

Who else handles the data

Only the providers that run the game, each for its part, under its own privacy policy:

• Supabase: sign-in and the database (hosted in the EU).
• Railway: the game server (hosted in the EU, the Netherlands).
• Cloudflare: the game's web pages and the domain.
• Google: the sign-in, if you choose it.
• itch.io: the store page that shows the game; what itch.io keeps about you is covered by its own policy.

Some of these companies are based outside the EU or may process data there; they do so under the safeguards the GDPR requires (such as the EU–US Data Privacy Framework or standard contractual clauses). We do not sell or share your data with anyone else.

How long

• Your account and profile: until you delete them.
• A match: only while it is played.
• Server logs: the limited time the hosting provider keeps them.
• Your browser's storage: until you sign out or clear it.

Deleting your account

In the game, open Settings → Delete account and confirm. Your sign-in account and your profile are deleted at once, and your name becomes free for anyone. You can also ask by email at [email protected].

To also remove the game's access from your Google account, go to Google Account → Third-party connections.

Your rights

You can ask to access, correct, delete or export your data, or object to or restrict its use, by writing to [email protected]. You can also complain to your data protection authority.

Children

Signing in is for players aged 16 or over, or the lower age of digital consent in their country. Younger players can play as guests.

Changes

When the game starts keeping something new (for example, match history or a leaderboard), this page will say so first, with a new date at the top.