Privacy policy

Data we collect

• Account: username, email, Argon2id-hashed password (never plain-text)
• Server: IP:port + hostname you provide at redeem time
• Payments: PSP transaction ids (not card data — we never see it)
• Analytics: aggregated daily counts of master-server client queries + unique IPs (no per-user profiling)

Data we do NOT collect

• Payment card numbers — handled entirely by PayPal / Stripe
• Third-party OAuth tokens — we don't use Google / Facebook / Discord sign-in
• Tracking cookies from ad networks — we don't run ads

Cookies

warzone.auth — your login session cookie. HttpOnly, SameSite=Lax, 30-day sliding expiry. Cleared on sign-out.
warzone-locale — your language preference. 1-year expiry. Not personally identifying.

Data retention

Account data is kept until you request deletion. Payment records are kept for 7 years for tax purposes. Analytics rollups are kept indefinitely (no per-user identifiers stored).

Contact

Data requests: privacy@warzonecs.com

Last updated: 2026-07-23.