Privacy Policy

Last updated: 2026-09-07

This policy describes what BattleBrew (battlebrew.online and the Android app “BattleBrew”) collects, how it is used, and how you can reach us. It is intentionally short because the app is intentionally simple.

1. What we collect

Account (only if you create one): a username (3–20 characters) and a password. The password is stored only as a scrypt hash with a per-user salt — never in plaintext, and it cannot be viewed again by anyone, including us.
Sessions: while you are logged in, the server keeps an in-memory session token so you do not have to log in on every page load. Sessions are discarded when the server restarts or when you log out.
Progress: game progress tied to your account (statistics, achievements, unlocked skins, purchased rune loadout, Elo rating). This is the game itself.
Guests: “Play as Guest” never registers anything. A random player ID is generated in your browser, kept only for the current session, and is not tied to you in any way.

We collect nothing else: no email address, no phone number, no payment information, no location, no device identifiers, and no usage analytics.

2. How we use it

Only to run the game: authenticating you, queuing you into matches, and storing your in-game progress. We do not build advertising profiles and we do not sell or license data.

3. Analytics and advertising

There is no analytics, no advertising, no tracking, and no third-party SDK of any kind in the web app or the Android app. The game contains no ads at all.

4. What other players can see

During a match, your in-game state (board, life, gold, purchased runes) is visible to your opponents — that is the game. The public Top 100 toplist shows usernames and Elo ratings. Nothing about you is visible outside the game.

5. Security

The production site runs over HTTPS. Passwords are scrypt-hashed with a per-user salt. Match state is kept in server memory and is never persisted — a server restart simply clears all active matches.

6. Children

BattleBrew is not directed at children under 13, and we do not knowingly collect personal information from children.

7. Data retention and deletion

Match state is never retained. Account data (username, password hash, progress) is kept as long as the account exists. To delete your account and all of its data, email support@battlebrew.online.

8. Changes to this policy

If the app ever changes what it collects or how it works, this page will be updated and the date above will change. The game remains free to play with no ads; if that ever stops being true, the policy change will say so explicitly.

9. Contact

Email support@battlebrew.online for any privacy question.