Policies

The short version

You can play with a username and a password. An email address is optional until you want ranked play, leagues, trades or sign-in links. We do not sell anything about you, and there is no advertising or third-party analytics on this site.

Intrepid Systems decides what is collected here and is responsible for it.

What we collect

Account

Your username, a hashed password, and your email address if you add one, along with whether it is verified. You confirm you are 13 or older when you register; we do not ask for your date of birth.

Profile

Anything you choose to put on your profile: a short bio, a country, an avatar, a favourite team, and your visibility and direct-message settings.

Gameplay records

Matches you play and their box scores, your rating and its history, your club and its players, XP and progression, league and tournament entries, and the integrity signals that flag a suspect result.

Messages

Room chat, spectator chat and direct messages, with who sent them and when. Chat around a match is held on the game server for a few minutes so it can be attached to a report.

Notifications

Your notification settings and quiet hours, a record of what we sent you, and, if you turn on push, the subscription your browser gives us for this device. That subscription is an address at your browser maker's push service plus two keys; it identifies the browser, not you.

Technical

Server logs of requests, and for each sign-in session the IP address and browser it came from. A random device number in a cookie, described on the Cookies page.

Moderation

Reports you file, reports about you, the evidence attached to them, and any sanction and the reason for it.

Why we hold it

• To run your account and keep you signed in.
• To play matches, rank them, and run clubs, leagues and tournaments.
• To let players talk to each other.
• To send the notifications you asked for.
• To keep the game fair and to act on reports.
• To keep the service up, find faults, and defend it from attacks.

Where the law asks for a basis: most of this is what we need to give you the game you signed up for. Fair play, security and moderation are our legitimate interest in a game that works. Notifications are on the settings you choose.

How long we keep it

• A notification in your bell: for as long as your account exists.
• The record of how we tried to deliver it, by email or push: 30 days.
• Email delivery events from our mail provider, such as a bounce: 90 days.
• A push subscription for a device: 90 days after the last time it worked, then dropped.
• Sign-in links and password reset links: they expire in minutes, and are swept a day later.
• A sign-in session: up to 7 days, extended while you play, gone when you sign out.
• Server logs: they roll over by size, so days rather than months.
• Your account, profile, club, matches and messages: for as long as your account exists.
• Moderation records and match results: these stay after an account is deleted, with the account no longer named, because a ban that can be erased by deleting an account is not a ban and a league table cannot lose half a season.

Who else sees it

We use as few outside services as we can. Today there are three.

Mailgun

Sends our email, in the United States. It receives your address and the message, and tells us whether it arrived.

Your browser's push service

Only if you turn on push. Chrome and Android use Google, Edge uses Microsoft, Safari uses Apple, Firefox uses Mozilla. The message body is encrypted before it leaves us, so the service delivers it without reading it.

Our hosting provider

Runs the servers and the database this site sits on, and sees traffic the way any host does.

We also hand over data if the law requires it, and we would tell you where we are allowed to. Other players see what your profile and visibility settings let them see.

Cookies and browser storage

Only the cookies needed to sign you in and keep the game fair, plus settings kept in your own browser. Every one of them is listed on the Cookies page.

Your rights

Go to Settings, under Account. From there you can download a copy of your account, profile, club, players, matches, direct messages, notifications, sign-in sessions, friends, ratings and support requests, correct your profile, and delete your account.

Deleting your account clears your profile, your avatar, your address and your notification settings, ends every session, and releases your username, which anyone can then register.

Your club is frozen and stays with the anonymous account so league tables still add up. Messages you sent stay in the other person's inbox, shown as Deleted player, and so does chat in a room, a league or a support request. Match results and moderation records stay, with your name removed from them.

You can turn any notification off under Settings, or use the unsubscribe link in any email.

If something is not available in the app, write to contact@intrepid.systems and we will do it by hand. Depending on where you live you may also have a right to complain to a data protection authority.

Children

Whiteout is for players aged 13 and over. We do not knowingly hold data about anyone younger. If you believe we do, write to contact@intrepid.systems and we will delete it.

Security

Passwords are stored hashed. Traffic is encrypted in transit. Tokens, cookies and addresses are kept out of our logs on purpose.

No service is perfect. If we lose data in a way that puts you at risk, we will tell you.

Changes and contact

We will update this page as the game changes, and the date at the top is the date of the current version.

Questions about any of this go to contact@intrepid.systems.