Privacy Policy

Last updated 21 June 2026. This explains what we collect, why, and your choices.

What we collect

• Account: your email, name (optional), and a hashed password. We never store passwords in plain text.
• Rooms: room configs, version history, and the status/logs your rooms produce.
• Stats: in-room player names, ELO, and match history for your rooms' ladders.
• Replays: match replays, kept for your plan's retention window, then deleted.
• Operational: basic logs and IP addresses for security and rate-limiting.

We do not store Haxball headless tokens. A token you paste is used to open a room and then discarded.

How we use it

• To run and supervise your rooms, and to show you status, logs, and stats.
• To secure accounts — verification and password-reset emails, and rate-limiting against abuse.
• To operate paid plans and the marketplace (when live).

Who we share with

• Email: we send transactional email via Resend.
• Payments: when billing is live, Stripe handles all card data — we never see or store card numbers.
• Hosting: our servers and worker boxes. We don't sell your data.

Cookies

We use a session cookie to keep you signed in. No third-party advertising cookies.

Your choices

• Access or update your account from the dashboard.
• Delete your account to remove your data (some records may persist briefly in backups).
• Public room ladders show in-room player names by design; turn a room private to limit exposure.

Contact

Questions about your data? Reach us through the dashboard or community channels.