Tankrite Privacy Policy

Last updated: [DATE]

1. Who we are

Tankrite is an online tank game made by [YOUR LEGAL NAME], trading as Dynamika, [STREET, POSTCODE CITY, COUNTRY] ("we", "us"). We are the controller of the personal data described here.

Contact for anything about your data: hello@tankrite.com.

We are a solo developer, so we have no data protection officer (we are not required to have one). [FLAG: confirm with the lawyer. If you are outside the EU but have EU players, Art. 27 GDPR may require an EU representative; if you are outside the UK, the UK GDPR may require a UK representative. Name them here: [EU REPRESENTATIVE], [UK REPRESENTATIVE].]

2. The short version

We store what an online game needs to run: your account, your player name, your progress and stats, what you write in chat, and short-lived technical data such as IP addresses to protect the servers.
We do not sell your data, we do not show ads, and the game contains no advertising or analytics SDKs.
Your player name, rank and official match stats are public, like in most online games.
If you host a battle on your own PC, other players get your IP address, because they connect to you directly.
You can ask for a copy of your data or for your account to be deleted at any time.

3. What we collect and why

What	Where it comes from	Why we need it	Legal basis (GDPR Art. 6(1))
Account: account ID, player name, a salted password hash (password accounts) or a random guest name, creation date. Steam ID (SteamID64) once Steam login is live	You, when you register; Steam, when you sign in with Steam	To create your account and keep you signed in	(b) contract: running the game you asked to play
Sessions: a random sign-in token and its expiry (24 hours)	Generated by our server	To keep you signed in	(b) contract
Progress and inventory: crystals, XP, rank, garage items and upgrades, paints, cosmetics, loadouts, presets, crew, missions, quests, achievements, reward crates, ranked rating and season rewards	The game, as you play	To save your progress on our servers (the game is always online)	(b) contract
Match results and stats: battles played, map, mode, team, wins, kills, deaths, damage, score, shots and hits, positions where you got or lost a kill (heat maps), tournament entries and results	Our official battle servers and the other players' clients	Rewards, rankings, leaderboards, matchmaking, the public stats API	(b) contract; public stats: (f) legitimate interest in a competitive community
Social data: friends and friend groups, blocks, clan membership and roles, clan applications, notifications, presence (online / in battle, kept in memory for about 60 seconds)	You	Friends list, clans, invites	(b) contract
Messages: public chat (global, region, battle, language channels), clan chat, private messages	You	To deliver your messages. Public and clan chat are visible to other players	(b) contract
Reports and moderation: reports you file or that are filed about you (with the recent chat lines as context), mutes, kicks, bans, warnings, the moderators' action log, volunteer/creator applications	You, other players, our moderators	Keep the game safe and fair, handle appeals	(f) legitimate interest in a safe community; (c) legal obligation where we must act on illegal content (EU Digital Services Act)
Anti-cheat data: results reported by clients, mismatches between reports, anomaly records, the IP address a result report came from	The game and our servers	Detect cheating and fake results	(f) legitimate interest in fair play
User content: photos and clips you upload to the showcase, maps and mods you share, contest entries and votes, clan emblems, tactic boards	You	To host and show your content	(b) contract
IP address	Your connection	Rate limits against abuse (held in memory for about a minute), server logs, vote and like fraud checks, and, when you host a custom battle, so others can join it	(f) legitimate interest in security; hosting: (b) contract
Bug reports and crash logs [FLAG: planned, item 10 of the checklist]: your description, a screenshot of the game, the game log, your settings, PC specs (GPU, CPU, RAM, Windows version), game version, account ID	You (F8 bug report) or the game after a crash	Find and fix bugs	(f) legitimate interest in a working game; the F8 report is sent only when you press send
Support emails	You	Answer you	(b) contract / (f) legitimate interest
Playtest sign-up on the website: your email address, the player name you typed (optional), the language you picked, the date, that it came from the website form, and whether we invited you yet. Not your IP address (see section 11)	You, on tankrite.com	To email you a playtest invite	(a) consent, which you give with the tick box and can withdraw at any time

We do not collect your real name, address, date of birth, payment details, contacts, location (beyond the rough region you pick for servers), or microphone or camera data. The game has no voice chat.

Purchases [FLAG: only when the cosmetic store exists]: purchases go through Steam. Steam handles the payment; we only receive the item, the order ID and your Steam ID so we can give you the item.

4. What is public

Other players (and, through our public stats API, anyone on the internet) can see: your player name, rank, clan, chat titles, official match stats, ranked rating and division, tournament results, heat maps of your official matches, and any photos, clips, maps or mods you publish. Messages in public and clan chat are visible to the players in that channel. Private messages are visible only to you, the other person, and, when a message is reported, our moderators.

[FLAG: the public API (/v1/public/players/<name>) serves anyone's stats and heat maps without login. Consider an in-game "hide my stats from the public API" switch; it makes the Art. 21 objection easy to honour.]

5. Data stored on your own PC

The game keeps some files on your computer (in the Windows user data folder for Tankrite). We cannot see them unless you send them to us:

settings (settings.cfg), onboarding progress, local profile caches, garage and economy caches;
a per-install secret used to give you your seat back when you reconnect to a battle;
replays (.tkr) and clips of your matches: these contain the names and actions of the players in the match;
photos from photo mode, your own maps and mods, practice notes;
if you host battles: an anti-cheat evidence log and a ban list with player identities and, for up to 1 hour, IP addresses (kept for up to 180 days).

You can delete these files at any time. Uninstalling through Steam does not always delete them. [FLAG: document the exact folder once the Windows export is final, e.g. %APPDATA%\Godot\app_userdata\Tankrite.]

6. How long we keep it

These are proposed periods. [FLAG: Stella to confirm each one. Rows marked "automatic" are enforced by the master server since 2026-09-27 (server/master/master_privacy.py, values in master_config.RETENTION_DEFAULTS); change a bracket here and the matching value there together.]

Data	How long
Account, progress, inventory, stats, social data	Until you delete your account. Guest accounts: deleted after [12] months without a sign-in (automatic). Other accounts: deleted after [24] months without a sign-in, with an email/in-game warning first where possible (automatic; the warning is an in-game notice 30 days before, as we store no email)
Sign-in sessions	24 hours (automatic)
Public chat	Only the newest 100 messages per channel are kept, older ones are deleted automatically. At most [30] days (automatic)
Clan chat	Newest 300 messages per clan. At most [12] months (automatic)
Private messages	Newest 200 per conversation. At most [12] months (automatic)
Match history shown in your profile	Your last 10 matches
Detailed official match stats and heat maps	Until you delete your account (heat maps: newest 600 points per map)
Reports and their chat context	[12] months after the report is closed (automatic)
Sanctions (mutes, bans) and the moderation log	For the length of the sanction plus [12] months; permanent bans for as long as the ban stands (automatic)
Anti-cheat records, result reports	[12] months (automatic)
IP addresses on result reports, likes, contest votes, purchase records and bug reports	[30] days, then removed (automatic)
IP addresses in rate limits	About 1 minute, in memory only (the website's playtest sign-up: up to 24 hours, in memory only)
Server logs (include IP addresses)	[14] days (journald setting on the server, `tools/systemd/journald-tankrite.conf`)
The address of a battle you host	While the battle is listed, removed about 10 minutes after it ends (automatic)
Bug reports and crash logs	[90] days, or until the bug is fixed (automatic after 90 days)
Support emails	[12] months after the case is closed
Playtest sign-ups from the website	12 months after you signed up at the latest (automatic), or sooner when you ask us
Backups	Rolling, overwritten after [30] days

When you delete your account, we delete or anonymise your data within [30] days. Your old chat messages and public contest entries may stay under a "deleted player" label if other players' conversations or results depend on them; we keep a sanction record only when needed to stop a banned player from coming back. [FLAG: facts for Stella. The in-game DELETE ACCOUNT erases the account 14 days after the confirm (a sign-in before then cancels it) at the next cleanup run (every 6 hours); nightly backups keep 14 copies, so everything is gone from backups within about 29 days, inside the [30]. What stays, anonymised (no id, name replaced by "deleted-xxxxxxxx"): reports other players filed about you and the moderation log, contest entries, tournament and clan war results, purchase records (without Steam ID or IP, for tax law). Public chat and clan chat lines are deleted, not relabelled. An active ban leaves only a hash of the name and Steam ID until the ban ends.]

7. Who we share it with

Other players: see section 4. When you join a battle hosted by another player, you connect to their PC directly and they get your IP address; when you host, the players who join get yours. Official servers run by us do not have this.
Hosting provider: our servers run at [HOSTING PROVIDER, e.g. Hetzner Online GmbH, Germany], who processes the data only on our behalf under a data processing agreement (Art. 28 GDPR). [FLAG: sign their DPA; list each region's provider if you use several.]
Website hosting: the website runs on our own server at the same hosting provider, see section 11.
Email: [EMAIL PROVIDER] for hello@tankrite.com.
Valve / Steam: you get and run the game through Steam. Valve is an independent controller for what it collects (your Steam account, purchases, playtime, Steam friends, achievements, overlay, Workshop). Their privacy policy applies: https://store.steampowered.com/privacy_agreement/. When you sign in with Steam we receive your SteamID64 and your Steam persona name; with Steam features (friends, Rich Presence, invites, achievements, Workshop) the game exchanges the matching data with Steam.
Authorities: only when the law requires it.

We never sell personal data and never share it for advertising.

8. International transfers

Our servers are in [COUNTRY/REGIONS]. If you play on a server in another region (for example North America or Asia), the data needed for that battle is processed there. Where data leaves the EU/EEA, we rely on an adequacy decision (for example the EU-US Data Privacy Framework for certified US providers) or the EU Standard Contractual Clauses. Valve is based in the USA. [FLAG: check which providers are DPF-certified once they are chosen.]

9. Your rights

You can ask us to:

access your data and get a copy of it;
export it in a machine-readable format (JSON);
correct it (you can rename yourself in the game where the game allows it);
delete it (delete your account);
restrict or object to processing based on our legitimate interests (for example the public stats);
withdraw any consent you gave, at any time.

Email hello@tankrite.com from the email you use for support, or tell us your player name and, to prove the account is yours, [VERIFICATION, e.g. send us a code shown in the game's settings]. We answer within one month. You can also do both yourself in the game: Settings > ACCOUNT > DOWNLOAD MY DATA (a zip file with your data as JSON) and DELETE ACCOUNT. [FLAG: built 2026-09-27 (/v1/account/*, server/master/master_privacy.py). Email requests: an admin runs python master_privacy.py --export <id> / --erase <id>. The export leaves out who reported or blocked the player and the moderators' notes (other people's data); say so if a lawyer asks.]

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live. Ours is [SUPERVISORY AUTHORITY, e.g. the data protection authority of your German state].

10. Children

You must be at least [13] years old to play Tankrite. If you are under the age of digital consent in your country (13 to 16 in the EU, for example 16 in Germany), a parent or guardian must agree to this policy and the EULA for you. We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, contact us and we will delete it.

FLAG, decision for Stella: (a) 13+ with parental consent below the local age (matches the EULA; Steam's own minimum is 13), or (b) 16+ everywhere, which avoids parental consent questions in every EU country but loses younger players. Most of our processing is based on the contract, not consent, so Art. 8 GDPR mostly does not apply, but chat with strangers means youth protection still matters (in Germany: JuSchG / USK rating). Ask the lawyer.

11. The website

tankrite.com sets no cookies and uses no trackers, analytics, ads, or third-party fonts or scripts. It stores nothing in your browser (no local storage either); the language versions are separate pages.

The website runs on our own server at [HOSTING PROVIDER]. To deliver a page, the server necessarily sees your IP address and browser details; it keeps no access log of website visits. The home page and the status page ask our master server (master.tankrite.com) whether it is online; like any request to the master server, that request carries your IP address, which lands in the master server's log for 14 days (section 6). Legal basis: (f) legitimate interest in running a secure website.

The sign-up form on the home page sends what you type to our master server, which stores: your email address, the player name you typed (optional), the language you picked for the invite, the date and time of the sign-up, that it came from the website form, the version of the consent text you agreed to, and the status we set (new, invited, declined).

Why: only to email you a playtest invite (dates and the download link). No newsletter, no ads; we never sell or share the list. When we write to you, our email provider ([EMAIL PROVIDER]) carries the message.
Legal basis: your consent (Art. 6(1)(a) GDPR), given with the tick box. You can withdraw it at any time; we then delete your sign-up.
What we do not store with it: your IP address. To stop spam, the server counts sign-ups per connection in memory only, for at most 24 hours; the form also has a hidden field and a minimum fill time instead of a third-party captcha. Like every request to the master server, the sign-up request appears in the server log for 14 days (IP address, time, browser details; not what you typed).
How long: 12 months after you signed up at the latest; the master server deletes older sign-ups automatically. Ask us and we delete yours sooner. Copies in our backups are overwritten within the backup period (section 6).
Your rights: email hello@tankrite.com from the address you signed up with to get a copy of your sign-up, to correct it, or to have it deleted. Section 9 lists all your rights.
Where: in the master server's database on our server at [HOSTING PROVIDER]. Signing up does not create a game account and is never linked to one.

Das Anmeldeformular auf der Startseite schickt deine Eingaben an unseren Masterserver. Gespeichert werden: deine E-Mail-Adresse, der Spielername, den du eingibst (freiwillig), die Sprache der Einladung, Datum und Uhrzeit der Anmeldung, dass sie aus dem Formular der Website kommt, die Version des Einwilligungstextes und der Status, den wir setzen (neu, eingeladen, abgelehnt).

Wozu: nur, um dir eine Playtest-Einladung zu schicken (Termine und Download-Link). Kein Newsletter, keine Werbung; wir verkaufen oder teilen die Liste nie. Wenn wir dir schreiben, überträgt unser E-Mail-Anbieter die Nachricht.
Rechtsgrundlage: deine Einwilligung (Art. 6 Abs. 1 lit. a DSGVO) per Häkchen. Du kannst sie jederzeit widerrufen; dann löschen wir deine Anmeldung.
Nicht gespeichert: deine IP-Adresse. Gegen Spam zählt der Server Anmeldungen pro Verbindung nur im Arbeitsspeicher, höchstens 24 Stunden lang; dazu kommen ein verstecktes Feld und eine Mindestzeit zum Ausfüllen statt eines Captchas von Dritten. Wie jede Anfrage an den Masterserver erscheint die Anmeldung 14 Tage im Serverprotokoll (IP-Adresse, Zeit, Browserangaben; nicht deine Eingaben).
Wie lange: spätestens 12 Monate nach der Anmeldung; ältere Anmeldungen löscht der Masterserver automatisch. Auf Wunsch löschen wir deine früher. Kopien in unseren Backups werden innerhalb der Backup-Frist überschrieben (Abschnitt 6).
Deine Rechte: schreib an hello@tankrite.com von der Adresse, mit der du dich angemeldet hast, um eine Kopie deiner Anmeldung zu bekommen, sie zu berichtigen oder löschen zu lassen. Alle Rechte stehen in Abschnitt 9.
Wo: in der Datenbank des Masterservers auf unserem Server. Die Anmeldung legt kein Spielkonto an und wird nie mit einem verknüpft.

Форма записи на главной странице отправляет введённые данные на наш мастер-сервер. Он хранит: твой адрес email, имя игрока, если ты его указал(а) (необязательно), выбранный язык приглашения, дату и время записи, то, что запись пришла из формы на сайте, версию текста согласия и статус, который ставим мы (новая, приглашён(а), отклонена).

Зачем: только чтобы прислать тебе приглашение на плейтест (даты и ссылку на загрузку). Никаких рассылок и рекламы; мы никогда не продаём и не передаём этот список. Когда мы пишем тебе, письмо доставляет наш почтовый провайдер.
Правовое основание: твоё согласие (ст. 6(1)(a) GDPR), которое ты даёшь галочкой. Ты можешь отозвать его в любой момент; тогда мы удалим твою запись.
Что мы не храним: твой IP-адрес. Для защиты от спама сервер считает записи с одного подключения только в оперативной памяти, не дольше 24 часов; кроме того, в форме есть скрытое поле и минимальное время заполнения вместо капчи сторонних сервисов. Как и любой запрос к мастер-серверу, запрос записи 14 дней виден в журнале сервера (IP-адрес, время, данные браузера; но не то, что ты ввёл(а)).
Как долго: не дольше 12 месяцев после записи; более старые записи мастер-сервер удаляет автоматически. По твоей просьбе мы удалим запись раньше. Копии в резервных копиях перезаписываются в течение срока хранения резервных копий (раздел 6).
Твои права: напиши на hello@tankrite.com с адреса, с которым ты записывался(лась), чтобы получить копию записи, исправить её или удалить. Все права перечислены в разделе 9.
Где: в базе данных мастер-сервера на нашем сервере. Запись не создаёт игровой аккаунт и никогда с ним не связывается.

12. Security

Passwords are stored only as salted hashes. Traffic to our master server uses HTTPS. Official battle servers sign their messages. Access to the database is limited to us. No system is perfect: if a breach puts your data at risk, we will tell you and the authorities as the law requires.

13. Changes

If we change this policy, we update the date above and announce important changes in the game and on the website before they take effect.

14. Contact

Dynamika, [YOUR LEGAL NAME], [ADDRESS] Email: hello@tankrite.com Website: https://tankrite.com