CLAIMFRONT · Player information

Privacy policy

Updated October 6, 2026

This page explains the data used to run CLAIMFRONT, its online rooms and player accounts.

Contact

For this service and privacy requests, contact support@claimfront.io.

Operator

Ondrej Kolecky
Opavska 818, 70800 Ostrava

Player accounts

We store your public username, internal account identifier, account creation time, saved preferences, match statistics and results. If you choose password sign-in, we store a salted password hash and a hashed recovery code, not the password or recovery code in plain text. Sessions use random credentials that are hashed on the server.

Google sign-in requests only the OpenID identity scope. We store the Google subject identifier privately to connect your Google identity to your player account. We do not publish your Google email or real name, or request access to Gmail, contacts or files. Google processes the sign-in under its own privacy policy.

Online games and public information

Your chosen commander name, game actions, territory and match state are shared with other players in your room. Public rankings show commander names and game statistics, not passwords or Google identity identifiers. Private room invitations should be shared only with people you want to join.

Hosting, security and external services

Cloudflare hosts and delivers the website and online services. Requests necessarily include network information such as IP address, requested URL and browser information; Cloudflare may process this for delivery, security and operational analytics. Account abuse protection uses an IP-derived hash in time-limited rate-limit records. See Cloudflare's privacy policy.

The game loads fonts from Google Fonts, which sends a request to Google. Informational pages host their fonts locally and do not request Google Fonts. External community links are optional and covered by the destination's privacy policy.

Why we use this data

Account and online-game data are used to provide the service you request. Security processing supports our legitimate interest in preventing abuse and keeping games available. Optional advertising or analytics that require consent will use a separate consent choice; account login is not consent to personalized advertising.

Cookies and retention

Account sessions expire after 30 days. Temporary Google login state expires after 10 minutes. Room storage is scheduled to expire after 24 hours; saved account statistics and results remain separate from a room. Preferences in your browser remain until you reset them or clear browser storage. Account data are retained while the account is maintained and can be reviewed through a support request. Infrastructure providers may retain their own operational records under their policies. See Cookies & storage.

Advertising

No advertising SDK is currently activated on this site. Before introducing Google AdSense, we will configure the applicable consent mechanism and update this notice. Google and other participating advertising vendors may use cookies to serve ads based on prior visits to this or other websites; Google's advertising cookies can enable personalized ads from Google and its partners. You can manage Google's advertising preferences at My Ad Center and read how Google uses advertising data. Any additional ad vendors will be disclosed through the consent interface before activation.

Your choices and rights

You can play without a registered account, sign out, reset local settings and clear browser storage. Contact support for requests concerning access, correction, deletion, restriction, portability or objection to processing, as applicable. You may also complain to your local data protection authority; in the Czech Republic this is ÚOOÚ. If consent-based features are introduced, you will be able to withdraw that consent.

International processing and children

Cloudflare and Google operate internationally; their privacy notices describe applicable transfer safeguards. Do not submit sensitive personal information in a commander name or support message. Children should involve a parent or guardian where their local rules require it; we do not knowingly request sensitive personal information from children.

Changes

We will update this page when the service or its data processing changes. The current site has no purchase checkout or payment card collection.