Privacy policy
What we store, why, for how long and what you can ask us to do with it. Last updated 31 August 2026.
1. Who is responsible
The controller of your personal data is [Company legal name, form of incorporation], registration number [Registration number], [Street, city, postal code], [Country].
For anything about your data, write to support@tankonomy.net — the same address as for everything else. There is one inbox, and it is read.
2. What we hold, why, and for how long
The table is the whole list. Every row is an actual field the game stores; there is no twelfth row kept out of sight.
| Data | What it is for | Legal basis | Kept for |
|---|---|---|---|
| Email address | To create the account, sign you in and reset a password | Contract | Until the account is deleted |
| Password | Stored only as a salted scrypt hash — we cannot read it | Contract | Until the account is deleted |
| Callsign and tag | Your name in battle, on the leaderboard and in your profile | Contract | Until the account is deleted |
| Game progress | Machines, currencies, tasks, the battle pass — the game itself | Contract | Until the account is deleted |
| Battle history and recordings | The summary screen, your profile and the replay link | Contract | 30 days of history, up to 500 battles per player |
| Ledger of in-game currency | So that every credit and token can be accounted for | Contract, legal obligation | Until the account is deleted; payment records longer |
| Sign-in journal: time, IP address, browser | To show you your own sign-ins and to spot a stolen account | Legitimate interest — security | 30 days |
| Session token | To keep you signed in without asking for the password every time | Contract | 30 days, then it expires |
| Payment records: amount, currency, status, processor reference | To credit tokens, to refund, and for accounting | Contract, legal obligation | As required by accounting law, typically 5–7 years |
| Saved card: brand, last four digits, holder name | So that a withdrawal goes to a card you have verified | Contract | Until you remove it or the account is deleted |
| Support correspondence | To answer you and to keep the thread | Contract, legitimate interest | Until resolved, then archived |
3. What we do not do
No advertising trackers. The site and the game load no analytics, no advertising pixels and no third-party scripts that follow you between sites.
No card numbers. Card details are entered on the page of our payment processor, InfraServEdge, and never reach our servers. We see the amount, the status, the card brand and its last four digits — enough to credit tokens and to send a withdrawal back to the same card, and nothing more.
No selling or sharing for marketing. Your data is not sold, rented or handed to anyone for their own purposes.
No profiling that decides anything about you. Matchmaking uses your machine rank and a hidden rating; it does not use anything about you as a person, and there is no automated decision-making with a legal effect.
4. What other people can see
Your callsign, tag, division, medals and pinned battles are visible in your profile, which opens from a link without signing in. Your settings decide what a stranger sees; a private profile is private to everyone except you.
A battle recording opens from its link for anyone who has it. A recording contains the battle — machines, turns, terrain — and no personal data.
Your email address is never shown to other players. A gift or a friend request is sent to a callsign, not to an address.
5. Who processes data for us
We use a small number of processors, each under a data processing agreement and each for one job:
- InfraServEdge — payments and card verification. They are the ones who handle the card; the acquirer's own privacy notice applies to that step.
- Hosting and email delivery — [Provider], for running the servers and sending account email such as password resets.
Data is processed in the EU/EEA. Where a processor is outside it, the transfer is covered by the European Commission's standard contractual clauses.
6. Your rights
Under the GDPR you can ask us to: give you a copy of your data, correct it, delete it, restrict or object to its processing, and export it in a machine-readable form. You can also withdraw consent where processing rests on consent, and complain to your national data protection authority.
Write to support@tankonomy.net from the address on the account. We answer within 30 days, usually much sooner, and we do not charge for it.
Deleting an account removes the account, its progress, its machines and its profile. Two things survive on purpose: payment records, which accounting law requires us to keep, and battle recordings that other players already hold links to — those keep the battle but no longer name you.
7. Children
The game is not directed at children under 12, and we do not knowingly collect their data. If you believe a child has given us data, write to support@tankonomy.net and we will delete it.
8. Security
Passwords are stored as a salted scrypt hash. Sessions expire after 30 days. Sign-ins — successful and failed — are journalled for 30 days so that a stolen account can be spotted by the sign-in rather than by what it did afterwards, and you can see that journal yourself.
Staff access to player data is limited by role and every action is logged. Dangerous actions ask for the password a second time.
If a breach ever puts your data at risk, we will tell you and the supervisory authority within the time the law allows — 72 hours.
9. Changes to this policy
When this policy changes materially, we announce it in the game news and update the date at the top. The previous version is available from support on request.
Ask for your data
One email to support@tankonomy.net gets you a copy of everything we hold, or deletes it.