Privacy
Plain-language version. Last updated 15 October 2026 (feedback form; before that: Sign in through Steam, friends; the analytics choice below is
unchanged since policy version 2026-10-11).
Short version. PAWFARE always records crashes, performance and anonymous gameplay totals so we can fix and balance the game. If you press Accept, we also remember your device with a random id so we can see how players find the game and whether they come back. We don't sell data, show ads, or use third-party trackers. We don't keep your IP address in our databases or analytics.
Your current choice: …
Always collected (essential)
Needed to run the game and keep it working. Not linked to you across visits.
| What | Why |
|---|---|
| Error reports: error message, code location, game version, browser and GPU family (e.g. "chrome", "nvidia"), map and mode | Find and fix bugs |
| Performance: frame rate, loading times, network round-trip time, server tick time | Make the game run well on your hardware |
| Gameplay totals: matches played per mode and map, heroes and weapons picked, KOs, wins, menu features used | Balance heroes and weapons, see which features work |
| A random session id that lives only in this browser tab | Group the events of one visit (counts sessions and session length) |
| Country (from our host, Cloudflare), device type (desktop / mobile / tablet), browser and OS family | Know where to put servers and what to support |
| A daily-changing, salted hash of your IP address and browser (the salt is deleted after two days) | Count unique visitors per day and stop abuse, without being able to recognise you tomorrow |
| Your account (guest or member): name, password hash (if you set a password), XP, stats, match results | Accounts, levels and leaderboards (you can play as a guest) |
| If you sign in with Google or Discord: their user id for you and the email address they report (and whether they verified it). We never see your Google or Discord password, contacts or messages | Sign you in with that account |
| If you sign in through Steam: your Steam ID (the public 17-digit number of your Steam account). Steam doesn't give us your email, password, friends, games or anything else. When you first create an account with Steam, we may look up your public Steam profile once and use its name as your starting PAWFARE name (if it fits our name rules and is free; you can change it any time). It is kept only as that account name; your Steam avatar is not stored | Sign you in with that Steam account; a ready-made display name |
| If you add an email or sign in with an email link: your verified email address | Sign-in links and password resets. We only send those (no newsletters or marketing). Under-13 accounts can't add one |
| Friends: your friend tag (your name and a number), your friend link, your friends list, friend requests, the players you've blocked, and your "show when I'm online" choice | Let you add friends, play together and keep unwanted players away (guests can have friends too) |
| Recent players: the accounts you finished an online match with, when, and in which mode | The Recent list, so you can add someone you just played with |
| Online status while the game is open: in the menu, in a party or in a match (mode, map and room), never stored, only kept while your game tab is connected | Show your friends that you're online and let them join you. Set "Show when I'm online" to Nobody to hide it |
| Feedback and bug reports you send (only when you press Send): the type you picked, your message, the 1-5 fun rating if you give one, the email or Discord name you type into the optional contact box, a screenshot of the 3D game view only if it's ticked (no names or chat), and the diagnostics the form lists under "What we'll send": game version, page path, browser and OS with version, screen size, graphics card name, graphics settings, recent frame rate, the match you're in or just left (mode, map, room code, region, ping), your account name and id if you have one, and recent error messages. Also stored with it: a keyed hash of your IP address (the same one used to enforce bans; not the address itself) to stop spam | Fix the bugs you report and decide what to build next. The contact is used only to reply to you |
Only if you press Accept (analytics & marketing)
| What | Why |
|---|---|
A random client id stored in your browser (localStorage), linked to your PAWFARE account id when signed in | See whether players come back (retention) and how they progress |
| How you arrived: campaign tags in the link (utm_*), the website that linked to us (domain only), the page you landed on, and who invited you (their referral code) | Understand which channels and invites bring players, so we spend marketing well |
| Your language, first-visit date, number of visits and matches | Engagement and "is this a new player?" analysis |
Choosing "Essential only" (or not choosing) means none of the above is collected. You can change your mind any time in Settings → Share analytics or with the buttons above; turning it off deletes the client id from your browser.
Children
PAWFARE is not directed at children under 13, and we don't knowingly collect personal information from them. We don't ask your age. If we learn that an account belongs to a child under 13, we delete its personal information (email, sign-in links, analytics tied to it). Parents or guardians can ask us to see or delete their child's account (contact below).
Voice chat
- Voice chat is off until you click Join voice (your browser then asks for the microphone), and push-to-talk by default.
- Voice goes directly between your browser and the other players' browsers (WebRTC). Like any direct connection, that lets the players you talk with see your IP address, and you theirs. When a direct connection isn't possible, it goes through a Cloudflare relay instead.
- We never record, store or listen to voice. The game server only passes on the connection set-up messages, and we count how many voice connections were made (no content).
- You can mute or block any player; blocks are remembered on your device.
Where it's stored and for how long
- Everything is stored with Cloudflare (Workers Analytics Engine and D1), which hosts the game. Like any web host, Cloudflare sees your IP address to deliver the game and protect it from attacks; our server logs are kept for 7 days.
- The game's fonts are served from our own site: loading PAWFARE doesn't contact Google or any other font or analytics service.
- Raw analytics events: about 3 months (Analytics Engine retention). Sessions, client records (where you came from), active days and daily visitor counts: 60 days, then deleted. 15-minute totals: 30 days.
- Error groups: until fixed, at most 13 months. Bug reports and feedback (with the contact you left): 12 months; their screenshots 30 days. Ask us and we delete yours sooner. Records of your consent choice: 13 months.
- Guest profiles that never finished a match: deleted after 30 days without a visit (you get a fresh one if you come back). Expired sign-ins are deleted daily.
- Friends lists, friend tags and links, and blocks: kept with your account and deleted with it (a guest's with the guest profile). Friend requests nobody answers: 90 days. Recent players: 30 days. Online status is never stored: it disappears when you close the game.
- Accounts (including a linked Google / Discord / Steam id and a verified email): until you ask us to delete them. Sign-in and reset links expire within 15 minutes to 24 hours and work once; only a scrambled form of them is stored.
- Emails are sent for us by Resend (resend.com), only to deliver the sign-in, confirmation and reset messages you ask for.
Who sees it
The PAWFARE team, through a password-protected dashboard. Our email provider (Resend) handles your address only to deliver the messages you ask for. Google, Discord or Steam (Valve) learn that you signed in to PAWFARE when you use them to sign in. A short summary of each feedback message (its type, rating, map and mode, and the first 300 characters of the message, never your contact details or screenshot) may be posted to the team's private Discord or Slack channel. We use it to decide what to fix and build next, to balance the game and to plan marketing. We don't sell or share personal data, and we don't use advertising networks or third-party analytics. Your account name, level, stats and match history are public: on the leaderboards, on your profile page and to the players in your matches. Your friends see your friend tag and, unless you turn it off, whether you're online and what you're playing. Players you blocked can't see it, send you requests or invite you.
Your rights
You can ask for a copy of your data, or for your account and data to be deleted, by contacting us. If you are in the EU/UK (GDPR) or Australia (Privacy Act), you also have the right to complain to your data-protection regulator.
Contact
[Owner to fill in: name / company, email address, postal address].