Privacy policy
Last updated: 14 November 2026
In short. You can play Ironveil without an account, and then nothing about you is stored on our servers.
If you sign in with Google, we keep your email address, the player name you choose and your game records. We do not sell data, show ads or use tracking tools.
1. Who we are
Ironveil is a browser game available at ironveiltd.com ("Ironveil", "we", "us"). This policy explains what personal data we handle when you use the site and the game (together, the "Service").
Questions or requests about your data: support@ironveiltd.com.
2. What we collect
| Data | When and why |
|---|---|
| Google account identifier and email address | When you sign in with Google. Used only to recognise your account. Your email address is never shown to other players. We do not receive your Google password, contacts or any other Google data. |
| Player name and avatar colour | Chosen by you after signing in. Shown publicly on your profile and on leaderboards. |
| Game records | Games you play while signed in: mode, level, result, time, score, towers and cards used, rating and rank in one-on-one play, achievements and unlocked perks. Used to run the game, your profile and the leaderboards. Leaderboard entries are public. |
| Sign-in session | A cookie that keeps you signed in for up to 30 days, and a record of that session on our servers. |
| Technical data | Your IP address and basic request information (browser type, pages requested, time), kept in server logs for security, abuse prevention and fixing problems. |
If you play without signing in, your progress is saved only in your own browser's storage on your device. It is not sent to us.
We do not collect payment details, precise location, or data from your device beyond what a browser sends to any website.
3. Cookies and browser storage
- Sign-in cookie: set when you sign in, needed to keep you signed in. A short-lived cookie is also used while the Google sign-in is in progress.
- Browser storage: the game saves settings and, when you are signed out, your progress on your device.
We do not use advertising cookies, analytics cookies or third-party trackers.
4. Other services involved
- Google provides sign-in. Google's own privacy policy applies to your Google account.
- Hosting: the Service runs on servers rented from a cloud hosting provider, which processes data on our behalf.
- Content delivery: the game loads its 3D library from the jsDelivr network and fonts from Google Fonts. Your browser contacts those services directly, so they see your IP address.
We do not sell personal data, and we do not share it with anyone else except where the law requires it or to protect the Service and its players against fraud and abuse.
5. Why we are allowed to use this data
- To provide the Service you asked for: your account, your games, your profile and the leaderboards.
- Our legitimate interest in keeping the Service secure and fair, including detecting cheating and abuse.
- To comply with legal obligations.
6. How long we keep it
- Account and game records: for as long as your account exists.
- Sign-in sessions: up to 30 days after you last signed in, or until you sign out.
- Server logs: for a limited period, normally no longer than 90 days.
When an account is deleted we delete or anonymise the personal data linked to it within 30 days, except where we must keep something to meet a legal obligation.
7. Your choices and rights
You can change your player name and avatar colour at any time on your profile. You can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong;
- delete your account and the data linked to it;
- stop or limit a particular use of your data.
Send the request from the email address of your account to support@ironveiltd.com. We answer within 30 days. Depending on where you live you may also have the right to complain to your local data protection authority.
You can remove our access to your Google account at any time in your Google account settings; your Ironveil account stays until you ask us to delete it.
8. Children
The Service is not directed at children under 13, and children under 13 may not create an account. If you believe a child has given us personal data, contact us and we will delete it.
9. Security
Connections to the Service are encrypted, sign-in is handled by Google so we never see a password, and access to the servers is restricted. No system is perfectly secure; if a breach affecting your data occurs we will tell you as the law requires.
10. Where data is processed
Our servers may be located in a different country from yours. By using the Service you understand that your data may be processed outside your country, with the protections described in this policy.
11. Changes to this policy
We may update this policy as the Service changes. The date at the top shows the latest version. If a change is significant we will say so on the site before it takes effect.
See also the Terms of service.