Draft for the owner to review. This page was written to describe what the code does. It is not legal advice. Check it, fill in the parts in [square brackets] and remove this box before relying on it.
Privacy
Postbox 12 is a browser game. This page says, in plain English, what it keeps about you and how to have it removed.
The landing page
- The Postbox 12 landing page sets no cookies, loads nothing from other sites and collects nothing. It has no form and asks for no details.
- The "Join the Discord" and "Follow on X" links take you off this site. Once you are on Discord or X, their own privacy policies apply, not this one.
On your device
- Your game is saved in your browser's own storage on this device. It does not leave the device unless you turn on one of the options below or export a save code yourself.
- The game sets no cookies, shows no adverts and loads nothing from other companies.
What is sent to our server, and only if you allow it
- A random id. Your browser makes up a random string of letters and numbers the first time it is needed. It is not linked to your name, email or device, and we cannot work out who you are from it.
- Play statistics (Settings → Privacy → "Share play statistics", on by default). Small records such as: a raid started on a map; a raid ended (extracted, killed or missing in action, how many minutes, your level, roubles won or lost, experience); what killed you (for example "bleeding" or an enemy type); which enemy types you killed; and about how long you played (one record per five minutes of active play). They never include your callsign, chat, items or anything you type. We use them only to balance and improve the game.
- A copy of your save, if you turn on Cloud backup. The copy is the same as the "Export save" code, so it includes your callsign and everything in your game. Only a scrambled form (a salted hash) of your recovery code is kept, never the code itself.
- The founder code. If you claim a founder place, the server keeps a random claim id made by your browser and your place number.
If your browser sends "Do Not Track" or "Global Privacy Control", play statistics are treated as off.
What is not stored
- No name, no email address, no password, no payment details.
- No IP addresses. To stop abuse, the server briefly counts requests under a scrambled form of the address (a salted hash that cannot be turned back into it). Those counts are deleted within a day.
The game is hosted by Cloudflare. Like any host, Cloudflare handles the network traffic needed to deliver the site, under its own privacy policy.
How long it is kept
- Play statistics: deleted after about 12 months.
- A random id that has not been seen for about 12 months is deleted, with its statistics and any cloud backup.
- A founder place stays counted (so the 100 places stay fair) but is unlinked from your id when your data is deleted.
Removing your data
- In the game, open Settings → Privacy → Delete my cloud data. Everything stored for this browser's id is deleted at once, and play statistics are switched off.
- Or email [email protected] and include the anonymous id shown in Settings → Privacy, so we can find the records. We will not ask for anything else.
- Deleting your browser's site data removes your local save and id. It does not delete what is on the server: use the button above first.
Who runs the game
[Owner's name or trading name, and country.] Questions: [email protected].
Changes
If this changes, this page will be updated and the date below changed. Last updated: [date].