Privacy Policy

What we collect

When you create an account we collect:

• Name and email address — used to identify your account and send game-related notifications, if any.
• OAuth profile data — if you sign in with Google or Facebook we receive your name, email, and profile picture from that provider. We do not receive your password.
• Profile picture — if you sign in with a social provider, we download and store a copy of that provider's profile picture on our own servers (provider avatar URLs are not permanent, so we keep our own copy). If you don't have one set, or don't use a social login, we look up a picture from Gravatar using a one-way hash of your email address — no image or actual email address is sent to Gravatar. You can also upload your own photo at any time, or remove your photo entirely, from your profile settings.
• IP address — recorded at sign-in for basic security purposes. Not shared publicly.
• Location — if you choose to share your location from the dashboard, we store your device's GPS coordinates (latitude and longitude). We also reverse-geocode these to derive a city and country name for display purposes. Location sharing is entirely optional.

How we use it

Your data is used solely to operate Whamageddon:

• Displaying your warrior status (surviving or eliminated) on the Battlefield map and your public warrior profile.
• Allowing friends to find and follow you via your Friend Code.
• Showing aggregate statistics (total warriors, still standing, fallen).
• Placing an anonymised marker on the map cluster — your precise coordinates are never shown publicly, only the city-level cluster you belong to. Cluster positions are deliberately imprecise to protect individual privacy.

What is shown publicly

• Your name, profile picture, and whamd status appear on your public warrior profile URL, which you can share or keep private at your discretion.
• Your year-by-year game history (survived, fallen, or unknown for each year you've participated) is shown on your public warrior profile, along with your current survival streak.
• Your approximate location is reflected on the Battlefield map as part of a city-level cluster. Map positions are deliberately imprecise — they do not reveal your exact coordinates or street-level location.
• Your email address, IP address, Friend Code, and precise coordinates are never shown publicly.

Friends visibility on public profiles

By default, your allies are only visible to you on your own Allies page — they are not shown on your public warrior profile, and you do not appear on anyone else's.

In your profile settings you can opt in to "I consent to my profile being included on my friends' public profile." If you enable this, your name, avatar, and current status may appear in the Allies section of any friend's public warrior profile who has added you. This is off by default and can be switched off at any time — the change takes effect immediately.

Third-party sign-in

We use Google and Facebook OAuth for authentication. Signing in through these providers is subject to their respective privacy policies. We only request the minimum scopes needed to create your account (name and email). We also use Gravatar to look up a profile picture by email hash when you haven't set one yourself — see Gravatar's own privacy policy for details on how they handle that hash.

Data retention

Your data is kept for as long as your account is active. You can delete your account at any time from the dashboard. This permanently and irreversibly removes your profile, location, whamd history, and all associated data.

Cookies

We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking cookies.

Contact

Questions about your data? Reach us via the community channels linked on the homepage.