Privacy Policy

Last updated: 8 November 2026

TankWar is operated by Rainier Studio LLC ("XRainier", "we", "us"). This policy explains what we collect when you play TankWar on the web or in our apps, and how we use it.

What we collect

• Playing without an account. Single player needs no account. The callsign you type is used to issue a short-lived game session and is stored on your device.
• Accounts. Online play needs a free account. When you sign in with Google or Apple we receive an account identifier and your email address from that provider (Apple may give us a private relay address). With email sign-in we store your email address. We also store your callsign, the date you accepted the terms, your plan and a list of signed-in devices (a random device ID and browser name, never a hardware ID).
• Sign-in emails. One-time sign-in codes are sent from our Microsoft 365 mailbox (Microsoft Graph). If that fails, a backup email provider may send it. Codes expire after 10 minutes and we keep only a hash of the code.
• Payments. TankWar Pro is paid through Stripe. Stripe collects your card and billing details; we never see or store your full card number. We receive and keep your Stripe customer and subscription IDs, the subscription status and renewal date, and payment records needed for accounting and refunds.
• Gameplay data. Positions, shots, hits, chat messages and scores are processed in real time to run the match and to check for cheating. Recent chat and match events are kept briefly for moderation. Per-account statistics (kills, deaths, damage, wins, battles) are kept for your stats page and, for Pro players, the public leaderboard, which shows your callsign and scores.
• Technical data. IP address, browser type, approximate location derived from the IP address (rounded to about 10 km, city level) and connection quality, used for security, abuse prevention (including bans), anti-cheat and aggregated usage statistics.
• Voice. Voice chat is off until you turn it on. When it is on, your voice is sent only to your squadmates who have also turned voice on, encrypted end to end with WebRTC (DTLS-SRTP). Voice connects directly (peer to peer) with those squadmates, so they can see your IP address unless you turn on “Hide my IP address in voice chat” in Settings, which always routes your audio through our relay (TURN) server. A relay is also used when a direct connection isn't possible. The relay forwards encrypted audio and cannot decode it. We do not record or store voice. Your microphone is only used while you hold the talk button, and only after you grant permission.
• Location for weather. We do not use your device location. Our servers fetch the weather for the fixed coordinates of each battlefield from Open-Meteo; your browser never contacts Open-Meteo. Weather data by Open-Meteo.com (CC BY 4.0).
• Local storage. Your settings, callsign, sign-in pass and a random device ID are stored on your device (local storage). We don't use advertising cookies or trackers.

How we use it

Only to operate, secure and improve the game: sign-in, matchmaking, subscriptions, anti-cheat and moderation, support, aggregated statistics (such as how many people are online) and fixing bugs. We do not sell personal data and we do not show third-party advertising.

Service providers

We use Cloudflare (hosting, game servers, bot protection with Turnstile), Google and Apple (sign-in), Microsoft 365 (sign-in emails), Stripe (payments) and Open-Meteo (weather for the battlefields). They process data on our behalf under their own security and privacy terms.

Retention and deletion

Game session tokens expire after 12 hours and sign-in passes after 30 days. Server logs and moderation records are kept for up to 30 days unless needed to investigate abuse. You can delete your account at any time on the account page: this deletes your profile, callsign, devices and statistics and cancels an active web subscription. Payment records that we must keep by law (for example for tax) are kept for the required period. You can also email us to ask for deletion.

Children

TankWar is not directed at children under 13. If you believe a child has provided personal information, contact us and we will delete it.

Your rights

You can ask us to access, correct, export or delete data associated with you, or object to processing, subject to applicable law (including GDPR, UK GDPR and CCPA).

Contact

Rainier Studio LLC — [email protected]