Privacy Policy
This page explains what data Stormyard handles, why, and for how long. We keep it to what is needed to run the game and, if you buy something, to take payment and keep the records the law requires.
What we process
| Data | Why, and legal basis | Where, and how long |
|---|---|---|
| Name you type as a guest, your settings, key layout, chosen look | Remembering your choices (necessary to provide the game) | Your browser's local storage only. The name is shown to other players during a match |
| Gameplay data: position, actions, results | Running the match (necessary to provide the game) | Server memory for the duration of the match. For account holders, results are added to your statistics and progress |
| Account: username, optional email address, password (stored only as a salted hash), statistics, level and battle pass progress, items and coins you own | Providing the account you asked for (contract) | Until you delete your account. Sessions expire after 30 days unused |
| Email address | Password reset links only; we send no marketing | With your account. Reset emails are sent through our email provider |
| Purchases: what you bought, when, the amount, and the payment reference from Stripe | Delivering what you paid for, handling refunds, and bookkeeping (legal obligation) | Kept for 5 years after the financial year, as the Norwegian Bookkeeping Act requires. If you delete your account, these records stay but are no longer linked to it |
| Card and billing details | Taking payment | Processed by Stripe (Stripe Payments Europe, Ireland) under Stripe's privacy policy. We never receive your card number |
| Friends and parties: who you added as a friend and their answer; while you are in the menu, that you are online and which party you are in; invites you send | Letting you play with friends, which you ask for (contract). Only your accepted friends see your status and party | Friends: with your account, until you remove them or delete your account. Online status, parties and invites are kept in server memory only, for minutes |
| Player reports you send, and reports about you | Keeping play fair (legitimate interest) | Reviewed by a person; kept up to 12 months |
| Anonymous usage statistics: a random identifier made in your browser, the days you played, match length and result, frame rate, and error messages from the game | Seeing whether the game runs well and whether players come back (legitimate interest). The identifier is not linked to your name, account or IP address | On our server, deleted after 90 days. Clearing your browser's site data resets the identifier |
| If you play on CrazyGames: your CrazyGames user id and username | Signing you in with your CrazyGames account (contract) | With your account, until you delete it. CrazyGames' own privacy policy covers their site |
| IP address and connection data | Delivering the game, limiting login attempts and protecting against abuse (legitimate interest) | Rate limiting keeps addresses in memory for 15 minutes. Server logs are kept at most 30 days |
What we do not do
We do not sell data, use third-party analytics or advertising trackers, or set cookies. Fonts and all game files are served from our own server, so loading the game does not send your address to anyone else. We do not knowingly collect data from children under 13.
Your rights
Under the GDPR you can ask for a copy of your data, have it corrected or deleted, object to processing, and take your data with you. You can delete your account yourself in the game (Account, then Delete my account); for anything else write to . You can complain to or the authority where you live.
Where data is stored
The game servers run at . If data is ever processed outside the EEA, we use approved safeguards such as the EU standard contractual clauses.
Changes
We update this page when the processing changes; the date at the top shows the current version.