Privacy

This is short because there is very little to describe. We do not sell data, we do not run advertising, and there are no third-party trackers or analytics scripts on this website.

The controller is Ironvail Holdings LLC, New York, USA, trading as IronVail Studios.

What we collect

If you make an account

• Your email address and a hashed password. We use the address to sign you in, to send a confirmation link, and to send a reset link if you ask for one. We do not send marketing email.
• Your game progress. Whatever the game needs to put you back where you were — levels, items, buildings, and so on.

The lawful basis is performance of a contract: without these, an account that follows you between devices cannot work.

If you send a report

The text you write, plus your browser's user-agent string, the version of the game, and your account ID if you are signed in. If you supply an email address in the form so we can reply, that is stored with the report. Reports can only be read by us; they are not visible to anyone else.

Whether or not you have an account

The games record a row when a play session starts — a timestamp, the game version, the browser's user-agent, and your account ID if you have one — so we can tell roughly how many people are playing and whether they come back. There is no profile built from it and it is not linked to anything outside our own database.

What we deliberately do not collect

No advertising identifiers, no cross-site tracking, no analytics service, no cookie banner because we set no tracking cookies, and no payment information — there is nothing to buy, so there is nothing to charge.

What is kept on your device

Your sign-in is stored in your browser's local storage so you stay signed in between visits, and it is shared between our games because they are all served from this one address. Some games also keep a local copy of your save so they work offline. Clearing your browser's site data signs you out and removes the local copy; if you have an account, your progress is still on the account.

Who else sees it

Two processors, both used for hosting rather than for anything to do with you:

• Supabase — the database and the account service that stores your email, your password hash and your saves.
• Vercel — serves this website and the games, and processes request logs including IP addresses as a normal part of that.

Nobody else. We do not share, sell or rent your data, and we do not use it to train anything.

How long we keep it

Account data is kept until you ask us to delete it. Reports are kept while they are useful and cleared out periodically. Session rows are kept as aggregate counts rather than a permanent history.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it and your account with it. Email trevor.vail3@gmail.com from the address the account uses, or use the support form. There is no process to go through and no form to fill in; you will get a plain answer.

If you are in the UK or EU, you also have the right to complain to your data protection authority.

Children

Our games are not directed at children under 13 and we do not knowingly collect their data. If you believe a child under 13 has created an account, tell us and we will delete it.

International transfers

Our processors store data in the United States. If you are outside the US, using our games means your data is transferred there.

Changes

If this notice changes, the date at the top changes. A change that materially affects you will be noted in our news page.