Privacy

SALVO is made by thehtml.studio in Cyprus, which is responsible for your data (the data controller). Questions or requests: info@salvothegame.com.

• Your account: the email address you sign in with, your captain name (yours to change; without one we pick a random one), and when the account was made.
• Signing in: we email you a link and a 6-digit code. We keep the request (your email, the page to come back to, and scrambled copies of the link and code). It works once, expires after 15 minutes, and is deleted soon after.
• One sign-in cookie, salvo_session, keeps you signed in for up to a year, or until you sign out. The game can't work without it, so it doesn't need your consent.
• Games and rating: for each finished online game we record who played whom, the result, how it ended, the number of rounds, whether it was a public or a friend's game, and the rating change. Other captains see your captain name and rating in games, in the open-battles list and on the leaderboard.
• In your browser only (local storage, never sent to us): your sound, music and camera settings, which tips you've seen, a captain name picked before signing in, and your analytics choice below.

If you accept, we use Google Analytics 4 to learn how people find and use SALVO. It counts:

• the pages you visit (the address only, without any of its parameters except campaign tags such as utm_source: never a room code), and the site you came from;
• the play buttons you press on our pages, the sign-in steps (never your email), games started and finished (against the computer or online, and the result), and invite links shared;
• what Google adds to every visit: device and browser details, and a rough location worked out from your IP address (Google Analytics doesn't store the IP address itself).

It sets the cookies _ga and _ga_YKTY7P8W7G, which last up to two years. We keep the data for 14 months. Google signals and ad personalisation are switched off: none of this is used for advertising. Google may process the data outside the EU, including in the US, under the safeguards it provides for that, such as the EU–US Data Privacy Framework.

If you decline, Google Analytics doesn't load at all. You can change your mind at any time; declining later stops the counting and deletes those cookies.

COOKIE SETTINGS

• Railway hosts the game server and its database, in the EU (the Netherlands).
• Cloudflare sits in front of the site, delivering pages and keeping out abuse; it sees your IP address.
• Resend sends the sign-in emails.
• Google Fonts: the game's fonts load from Google's servers, which see your IP address.
• Google Analytics, only if you accept (above).

• Your account, captain name and game history: until you ask us to delete them.
• Sign-in requests: deleted about half an hour after they're made.
• Sign-in sessions: up to a year, or until you sign out.

Under the GDPR you can ask to see, correct or delete your data, ask us to restrict or stop using it, take it with you, and withdraw your consent to analytics at any time (button above). There is no delete-account button yet: email info@salvothegame.com and we'll delete your account. You can also complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).

You need to be at least 13 to create a SALVO account. If you're younger than the age at which you can agree to online services yourself where you live (14 in Cyprus; between 13 and 16 elsewhere in the EU), ask a parent or guardian before accepting analytics.

If this changes, we'll update this page and the date at the top.