Privacy
The short version: we keep your email address (if you sign up with one), your wallet address (if you sign in with one) and your game progress. For anti-cheat, every online match is logged with the IP address and device information of each player, and the log is kept for 60 days. We use all of this to run the game and keep it fair, and for nothing else. No ads, no trackers, no selling of data. You can delete your account from your profile at any time.
1. Who is responsible
The Dusk Brawl team runs duskbrawl.com and decides how the data below is used (the "controller"). Write to support@duskbrawl.com about anything on this page.
2. What we keep, and why
| What | Why | How long |
|---|---|---|
| Email address, and the date the account was made (email accounts only) | To sign you in: we send a six-digit code to it. We send nothing else: no newsletters, no marketing. | Until you delete the account. |
| Sign-in codes | To check the code you type. Kept only in the server's memory in a scrambled form, never on disk. | 10 minutes, or until used. |
| Wallet address (wallet accounts only) | It is your account's id. It is also where staked winnings and stock gifts are sent. We never see private keys or recovery phrases. | Until you delete the account. See section 5 for records that involve money. |
| Game profile: the name you chose, matches, wins, knockouts, experience and level, ratings, auras, mission progress, and the date you accepted the terms | To run the game: progress, ranks, leaderboards, missions. | Until you delete the account. |
| Staked matches and stock gifts: which wallet address entered which staked match, what was paid out, which gifts a wallet address won and claimed | To pay the right player, to return entries, to settle disputes and to keep accounts of money that went through the game. | As long as accounting rules and the handling of disputes require. |
| IP address | To limit how many sign-in codes can be asked for from one place (against abuse), in the short-lived technical logs of the server and its hosting, and in the anti-cheat match log (below). | About an hour in the server's memory for the limits. 60 days in the match log. Technical logs are short-lived. |
| Lobby chat | What you write is shown to the players in that lobby. The last 30 lines are kept in the server's memory so that someone who joins later can read along. If a message breaks the chat rules, the fact that the account is muted is kept, not the message. | Until the lobby closes. Chat is not written to disk. A mute lasts 30 minutes. |
| What happens in a match (movement, shots, results) | To play the match. | Gone when the match ends. The result goes into your profile. |
| Anti-cheat match log: for every online match, who was in the lobby and the match, the results, how much each player moved and attacked, and the IP address and device information (which browser and system) of each player | To find win trading, bots and players who farm wins with other accounts. Only the Dusk Brawl team can see it. | 60 days, then it is deleted. |
Guests have no profile. The only thing kept about a guest is the anti-cheat match log of the matches they play, under their guest name, for 60 days.
We do not ask for your real name, your date of birth, your address or a phone number. We ask you to confirm that you are 18 or older, and we keep only the date you did.
3. What others can see
Other players see the name you chose (or a generated one such as PLAYER-1A2B3C, or a shortened wallet address), your results, your rating and your place on the leaderboards. Your email address is never shown to anyone. If you sign in with a wallet, remember that a wallet address is public on the blockchain by its nature, and so are staked entries, payouts and gift claims made with it.
4. On your device
The game stores a few things in your browser's local storage: your sign-in session (so that you stay signed in), your settings (volume, picture quality, controls), and the match you are in (so that you can rejoin after a dropped connection). We use no advertising cookies and no analytics trackers.
5. Deleting your account
Open your profile in the game and choose to delete the account. The profile and the email address are erased from our server at once, and the email is free to start again from nothing. These cannot be erased at once:
- The anti-cheat match log, which deletes itself after 60 days.
- What is on the blockchain. Entries, payouts and claims made with your wallet are public there for good, and nobody can remove them.
- Our records of staked matches and stock gifts, which are kept by wallet address for as long as accounting rules and disputes require. Unclaimed stock gifts stay tied to the wallet address that won them, so signing in with that wallet again gives access to them.
If you cannot sign in any more, write to us from the email address of the account and we will delete it for you.
6. Who else handles the data
- Resend (email delivery) receives your email address and the sign-in code in order to deliver the email.
- Our server hosting stores the data described above on our behalf.
- Wallet connection (Reown, formerly WalletConnect, and the wallet app you choose) is used only if you sign in with a wallet. They see what a wallet connection needs: your wallet address and your IP address.
- Robinhood Chain and its network nodes see the transactions you send yourself.
- Google Fonts delivers the fonts of the site, which means your browser asks Google's servers for them.
We do not sell data, and we do not share it for advertising. We hand data to authorities only when the law obliges us to.
Some of these companies are in the United States or have servers there. Where personal data leaves the European Economic Area, it does so under the safeguards the law provides for, such as the EU-US Data Privacy Framework or standard contractual clauses.
7. Legal basis
For players in the EU and the EEA: we handle your account, profile and sign-in data because it is needed to provide the game you asked for (performance of a contract). We handle IP-based limits, technical logs and the anti-cheat match log because of our legitimate interest in keeping the service safe from abuse and its matches fair. We keep records that involve money because the law obliges us to, and to be able to handle disputes.
Nothing here is decided about you by automated profiling with legal effects. Ratings and matchmaking are game mechanics.
8. Your rights
You can ask us for a copy of your data, have wrong data corrected, have your data deleted, ask us to restrict or stop a use you object to, and receive your data in a portable form. Deleting is built into the game (section 5). For everything else write to support@duskbrawl.com from the email address of your account, or tell us your wallet address and be ready to prove it is yours by signing a message. We answer within a month.
If you think we handle your data wrongly, you can complain to the data protection authority of the country where you live.
9. Age
Accounts are for people who are 18 or older. We do not knowingly keep data about anyone younger. If you believe a minor has made an account, tell us and we will remove it.
10. Security
There are no passwords to leak: email accounts sign in with a one-time code, wallet accounts with a signature. Sign-in codes are single use, expire after 10 minutes and stop working after a few wrong tries. Connections to the site are encrypted. No system is perfectly safe, so keep your mailbox and your wallet safe too: whoever controls them controls the account.
11. Changes
When the game changes what it keeps, this page changes with it, and the date at the top moves. Significant changes are announced in the game.