Privacy Policy

Last updated: 31 July 2026

This policy describes how GEO-DEF (“the game”, “we”) handles information when you play in a web browser.

What we collect

• Gameplay data — match codes, city selections, and in-match actions are processed on our game server for PvP. Solo games run locally in your browser.
• Account data (optional) — if the server is configured with Supabase, you may sign in anonymously or link an email/Google account. We store XP, owned boosts, and equipped loadouts tied to your user id.
• Local storage — boost loadouts, cookie consent, and session tokens may be stored in your browser.
• Logs — the server may log errors, match creation, and aggregate usage for operations and abuse prevention.
• Usage counters — we count anonymous events (for example “a solo game ended at wave 12 in Ljubljana on normal difficulty”, or “a share button was pressed”) to understand which parts of the game people enjoy or quit. These are counters only: no cookies, no identifiers, no profiles, and nothing that links an event to you or to any other event. Your IP address is used transiently for rate limiting and is not stored with the counts. Uncaught script errors are counted too — the count only, never the message or the page address.

Analytics opt-out

We honor Do Not Track and Global Privacy Control. If either is enabled in your browser, nothing is queued and no usage counters are ever sent. Turning it off is the only way to opt back in; there is nothing for us to delete, because nothing is tied to you.

Ads

No ads run on this site today, and no advertising or ad-network code is loaded — so no advertising cookies are set. We plan to show Google AdSense ads between matches once an AdSense account is active. When that happens this page will be updated first, and Google may use cookies and similar technologies subject to Google’s Privacy Policy. You can manage ad personalization in your Google account settings.

Why we process data

• Run multiplayer matches and prevent abuse
• Persist optional progression (XP, boosts)
• Improve stability and security
• Measure, in aggregate, which parts of the game work — and fix the parts that don’t
• Monetize the free game with ads (when enabled)

Legal basis (EEA/UK)

Gameplay processing is necessary to provide the service. Optional accounts rely on your consent when you create or link an account. Ad cookies (when live) will require consent where required by law — we show a notice before storing non-essential data.

Retention

Match state is in-memory and discarded when a match ends or the server restarts. Usage counters are aggregate totals written to the server log; the individual requests that produced them are not stored. Account progression persists in Supabase until you delete your account or we remove the project.

Your rights

Depending on your location, you may request access, correction, or deletion of account data. For Supabase-backed accounts, use the in-game profile sign-out flow or contact the site operator.

Children

The game is not directed at children under 13. We do not knowingly collect personal data from children.

Contact

Questions about this policy: contact the operator of the site where you play (e.g. the domain shown in your browser address bar).