Privacy policy

Last updated: 23 Jul 2026. Age of Shapes is a small browser game; we only process data needed for accounts and stats.

Controller

The operator of the Age of Shapes site and game is the operator of this instance (local / game server). For data questions, use the contact on the site or via the server admin account.

What data we process

• Account: username, password hash, optional email, registration and last login dates, policy consent.
• Avatar: optional uploaded image (stored on the server).
• Game data: multiplayer results (win/loss, race, duration in ticks), aggregated stats and rating.
• Technical: session cookie for login; game token in localStorage per game; language preference cookie.

Purpose and legal basis

• Providing account, login, and stats – contract / legitimate interest.
• Policy consent at registration – consent (GDPR Art. 6(1)(a)).
• Essential cookies (session, language) – legitimate interest / necessary for the service.

Cookies

We use a browser session cookie to stay logged in and a language cookie (geowars_lang). Without session, the account cannot be used. We do not use marketing or ad cookies. Cookie banner consent is stored in browser localStorage.

Retention

We keep account and game stats while the account exists. After deletion we remove personal user data (users row, avatar, session). Player links in active/historical games are detached (players.user_id = NULL). Result records tied to the account are deleted with it.

Your rights

• Access and correction – in My account.
• Account deletion – on the account page (GDPR section), with password confirmation.
• Withdraw consent – by deleting the account; you can play without registering.

Security

Passwords are stored as hashes only. Avatars are checked for type and size. We do not share data with third parties for marketing.

This text is a practical summary for a small game site, not legal advice.