Privacy policy
Last updated 10 October 2026
crusades.io is a free browser strategy game, run from Australia. This page says what information the game collects when you use it, why, who else is involved, and what you can ask us to do about it. If anything here is unclear, write to privacy@crusades.io.
The short version
- You can play without an account. We then know the house name you typed and, like any website, your IP address.
- If you make an account, we keep how you signed in, your record in the game and what you own in it.
- We never see or store your card details. Payments are handled by Stripe.
- The site shows advertising from Google, which uses cookies. You can turn off personalised ads.
- We do not sell your information.
What we collect
When you play
- Your house name. The name you type before playing. Other players in your game see it.
- Your IP address and connection times. The game server records these in its log when you connect and disconnect.
- What you do in a game. Your orders (where you attack, what you build) are sent to the server and passed to the other players in that game so that everyone's game stays in step. They are kept while the game runs so that a player who loses their connection can rejoin.
- Fault reports. If the game fails to start, loses its connection or stops responding, your browser tells the server what happened (for example "page stalled for 5 seconds"), with your house name, so that we can find and fix faults.
If you make an account
Accounts are optional. You can sign in with Discord, Google or Steam, or with a link sent to your email address.
- Your email address, if you sign in by emailed link, Discord or Google. Used to sign you in. There is no password.
- What the service you sign in with tells us. Discord and Google give us your name there, your email address and your picture; Steam gives us your Steam id and, at most, the name on your public profile. We do not see your password with any of them, and we do not post or act on your behalf.
- Your account name, if you choose one. It is public: it is what a clan’s roll shows. The name your sign-in service gives us (for Google, your real name; for an emailed link, part of your address) is not shown to other players.
- Clans. If you found or join a clan, the clan (its name, tag, description and the place its founder pins on the world map) is public, and so is its roll: the account names of its members and the house names they last played under. The pin is wherever the founder clicks; we do not work out anybody’s location. Your clan’s tag is shown before your name in games.
- Your record. Games played and won, realms conquered, the most land you have held and time played, so that your standing follows you from one device to another.
- Your reserved house name, the coat of arms you designed, the items you own and which you have chosen to wear. Other players see your name, your arms and what you wear.
- Your balance and purchase history: what you bought, when, and for how much.
If you buy something
Payments are taken by Stripe, which may act as the seller of record. Your card or wallet details go to Stripe and never reach us. We receive confirmation that a payment succeeded or was refunded, the amount, and which pack it was for, so that we can credit your account. Stripe's own policy is at stripe.com/privacy.
What your browser stores
- Your seat in a game, so that a refresh or a dropped connection puts you back in the same game. This is cleared when you close the tab.
- Your sign-in, if you have an account, so that you stay signed in.
- Advertising cookies set by Google, described below.
- Analytics cookies set by Google Analytics, described below.
Advertising
The landing page, the lobby and the end-of-game screen may show advertisements served by Google AdSense, and banners stay in the bottom left corner of the screen, including while a game is being played. Buying anything from the store removes the advertisements.
- Google and its partners use cookies and similar identifiers to show ads, including ads based on your earlier visits to this and other websites.
- You can turn off personalised advertising from Google at adssettings.google.com, and from many other ad companies at aboutads.info/choices.
- How Google uses information from sites that use its services is explained at policies.google.com/technologies/partner-sites.
- If you are in the European Economic Area, the United Kingdom or Switzerland, you are asked for your choices about advertising cookies when you first visit, and you can change them at any time from the link that message provides.
Analytics
We use Google Analytics to count visits and understand how the game is used: how many people play, roughly where in the world they are, what kind of device they use, which page sent them, and which maps are played. We do not send it your house name, your email address or anything you type.
- Google Analytics sets cookies (their names begin with
_ga) that tell one browser from another, and receives your IP address, which it uses to estimate a region and does not keep. - If you are in the European Economic Area, the United Kingdom or Switzerland, these cookies are set only if you agree to them in the message shown when you first visit. Without your agreement, visits are counted without cookies.
- You can stop Google Analytics on every site with Google's browser add-on at tools.google.com/dlpage/gaoptout.
Why we use it
| What | Why |
|---|---|
| House name, orders in a game | To run the game and show you to the other players in it. |
| IP address, connection times, fault reports | To keep the service running, find faults, and stop abuse. |
| Email address | To sign you in, and to answer you if you write to us. We do not send marketing email. |
| Name, arms, items, balance, purchases | To give you what you bought and show it in your games; to handle refunds; to keep the records the law requires of a business. |
| Advertising cookies (Google) | To pay for the game by showing advertisements. |
| Analytics cookies (Google) | To see how many people play and how, so that we can improve the game. |
Where the law asks for a legal basis: running the game and your account is necessary to provide the service you asked for; logs and fault reports serve our legitimate interest in a working, secure service; advertising and analytics cookies rely on your consent where consent is required; purchase records are kept to meet legal obligations.
Who else is involved
We use a small number of companies to run the game. Each receives only what it needs to do its job.
| Company | What it does for us |
|---|---|
| Netlify | Hosts the website. Its servers see your IP address when your browser loads the site. |
| Our game server host | The game server runs on a dedicated machine we rent. Connections to it, and its logs, are held there. |
| Supabase | Holds account data: email addresses, names, items, balances and purchase records. |
| Stripe | Takes payments and handles sales tax. |
| Serves advertisements. |
These companies may process information in countries other than your own, including the United States. We do not sell your information, and we do not share it with anyone else unless the law requires us to.
How long we keep it
- Games in progress are held in the server's memory and discarded when the game ends.
- Server logs (IP addresses, connection times, fault reports) are deleted after 90 days.
- Account data is kept until you ask us to delete your account.
- Purchase records are kept for as long as tax and accounting law requires, even after an account is deleted.
Your choices and rights
You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete your account and what goes with it. Write to privacy@crusades.io from the email address on the account and we will act on it within 30 days.
Depending on where you live you may have further rights, for example under the Australian Privacy Act, the GDPR in Europe and the United Kingdom, or the CCPA in California: to object to or restrict some uses, to take your data elsewhere, to withdraw consent, and to complain to your privacy regulator. In Australia that is the Office of the Australian Information Commissioner (oaic.gov.au). We would like the chance to put things right first, so please write to us.
Children
crusades.io is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to us and we will delete it.
Security
Connections to the site and to the game server are encrypted. Account data is held by Supabase with access limited to each account's owner. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.
Changes to this policy
If we change what we collect or how we use it, we will update this page and the date at the top. For a significant change, we will say so on the site's front page.
Contact
crusades.io, Australia · privacy@crusades.io
See also the terms of service.