Privacy Policy

Last updated: 26 September 2026

This policy explains what Cordonfall collects when you play at cordonfall.com, why, who else is involved, and the choices you have. Cordonfall (“we”) is responsible for this data; you can reach us at info@nxyz.art.

1. When you play as a guest

• In your browser. Your saves, settings (such as the skin and sound you chose) and a random browser id the game makes for itself are kept in your browser’s local storage, on your device.
• The heartbeat. While you play, the game tells our server what it is doing: when you start, every ten minutes while you play, at a run’s start and end, and when you leave the tab. It sends the random browser id, your call-sign, the screen you are on, the mode, map, night, kills, your HQ’s health, the skin, the minutes played, the game’s version and whether it runs as an installed app. Our server adds your country, as our host’s network reports it, and a device class such as “iPhone · Safari”, worked out from your browser’s user agent, which we don’t keep. We use this to see how the game is played and to fix it. Nothing is sent before you press PLAY, and automated browsers and crawlers are not recorded.
• On itch.io and Game Jolt. Our pages there show the game from cordonfall.com inside theirs, so this policy covers it there too; each site’s own privacy policy covers the site itself. Your browser keeps the game’s saves there apart from those at cordonfall.com, and tells our analytics which site the visit came from.

2. When you have an account

• Your account: your email address (to sign in; we don’t send you marketing), your call-sign, your password (stored only as a salted PBKDF2 hash that can’t be turned back into it), when you joined and last signed in, and your career totals such as your best night, kills and scrap.
• Each sign-in and sign-up: its time, country and device class.
• Shared Siege: the tickets you take, the recorded commands of the runs you send (so our server can replay and verify them), their results, any defence you publish (shown with your call-sign), the Levy you earn and spend, your cosmetics, and your commando’s progress.
• While you are signed in, the heartbeat above also carries your account.

3. Leaderboards

When you submit a score we store the name you give (your call-sign), your result (nights survived, kills and scrap), the mode, the date, and the map you played: its name and centre point. The name and the map’s name are shown publicly on the leaderboards. If you play on a map of your own street or home, remember its name will appear next to your score.

4. Maps and place searches

To build a map, the game fetches OpenStreetMap data for the area you choose from public Overpass servers, through our server or directly from your browser. Searching for a place sends your search text to OpenStreetMap’s Nominatim service. The pin-drop map shows tiles from OpenStreetMap’s tile servers and loads the Leaflet map library from unpkg. These services see your IP address and what was requested, under their own privacy policies. We keep the map data for an area in a shared cache for up to 90 days; it contains no personal data.

5. Analytics

We use Rybbit, a privacy-friendly analytics service, to count visits: the pages viewed, where visitors came from, and their country, device and browser. Rybbit uses no cookies and no persistent identifiers, and its cloud keeps data in the European Union (Germany).

6. Security and abuse prevention

To stop floods and password guessing, our server counts requests in short time windows by IP address, and by account for some actions. These counters contain your IP address and are deleted within 24 hours. Our hosting provider’s own logs also record IP addresses for a limited time.

7. Cookies and local storage

We don’t use advertising or tracking cookies, so there is no cookie banner. The game keeps its saves, settings and your sign-in session in your browser’s local storage, which stays on your device; clearing this site’s data removes them and signs you out. One page meant only for the developer, the password-locked codebase page, sets a strictly necessary session cookie when unlocked.

8. Who processes data for us

Vercel

hosts the website and runs our server functions (United States).

Neon

hosts our database (United States).

Rybbit

visit analytics (European Union).

OpenStreetMap services, Overpass servers, unpkg

map data, place search, map tiles and the map library, when you use those features.

IndieDB, itch.io

the landing page shows IndieDB’s button and itch.io’s widget, loaded from their servers, which see your IP address and browser under their own privacy policies.

We don’t sell or rent your data, and we don’t share it with advertisers. Your data may be processed in the United States and elsewhere; where the law requires, we rely on our providers’ safeguards for such transfers, such as standard contractual clauses.

9. Why we use it

We use this data to provide the game and your account (to perform our terms with you), and to keep the game secure, fair and working and to understand how it is played (our legitimate interests). Where the law asks for your consent, we rely on it.

10. How long we keep it

• Your browser’s storage: until you clear it.
• Your account and its game records: while the account exists. When you ask us to delete it, we delete them, except anything the law requires us to keep.
• Heartbeat and run records: while they are useful for running and improving the game. You can ask us to delete those tied to your account or browser.
• Leaderboard entries: while the leaderboard exists.
• Rate-limit counters: up to 24 hours. The map cache: up to 90 days.

11. Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, or object to how we use it. Write to info@nxyz.art from your account’s email address. If you play as a guest, clearing this site’s data removes what is on your device; to have the server’s records of your browser deleted, email us too. You also have the right to complain to your local data protection authority.

12. Children

Cordonfall isn’t meant for children under 13, and we don’t knowingly collect their personal data. If you believe a child has made an account, email us and we will delete it.

13. Changes to this policy

If what we collect or how we use it changes, we will update this page. The date at the top shows when it last changed.

14. Contact

Questions or requests about your data: info@nxyz.art.