Privacy policy

In effect from 10 October 2026.

Territory Tactics has no accounts, no advertising, no analytics and nothing to buy, and it does not track you.
Your name, your rank and your settings are kept on your own device, not on a server of ours.
When you play with friends, a room server receives your name, your colour, a random ID and your moves, so that it can run the match. The room is deleted ten minutes after the last player leaves it.
The companies whose servers carry the site, the game and the rooms see what any web host sees, such as your IP address.

Who is responsible

Territory Tactics is made by Enes Gunumdogdu, established in Türkiye, under the name EG Studio. That is who is responsible for the personal data described on this page (the "controller", in the language of data protection law), and who "we" means below. You can write to us at support@territorytactics.com.

This policy covers the game played in a browser, the game's apps for iPhone, iPad and Mac, and this website.

What stays on your device

The game keeps a few things in your browser's storage (in the app: in the app's own storage) so that it knows you the next time you open it. None of it is sent to us, except where the next section says so.

Your profile: The name you typed (it starts as "Commander"), your colour, your experience points, how many matches you have played and won, the achievements you have earned and the day you earned each, and how often you have won on each map.
A player ID: A random string of letters and numbers, made the first time you enter a room. It lets a room give you your seat back when you reload the page or lose the connection. It is not made from anything about you or your device.
Your settings: Whether sound effects, music and the announcer are on and how loud they are, whether the round clock is on, the map and the ending you chose last, and whether you have been shown the rules.

These are not cookies. The game and this site set no cookies at all, and nothing kept on your device is used to follow you anywhere else. It stays there until you remove it: how to do that is further down.

What leaves your device

Opening the site or the game

As with every website, the servers that deliver these pages and the game's files receive your IP address, the date and time, the address of the page or file you asked for, and what your browser says about itself, such as its name and version, your operating system and your language. We rent these servers from Cloudflare, Inc. (United States). The host keeps this in its logs for a limited time, to deliver the files and to keep its service secure. We do not combine it with anything else and do not use it to work out who you are.

When you open an invitation to a room, the room's five-letter code is part of the address, so the host receives that too.

The game's maps, sounds and typefaces all come from the same server as the game itself. Neither the game nor this site loads anything from any other company: no fonts, no scripts, no advertising, no social media buttons.

Playing with friends

When you open or join a room, the game connects to our room server, which runs on the network of Cloudflare, Inc. (United States). To run a match, the room has to know who is at the table and what each player does. It receives:

your player ID;
the name and the colour from your profile;
if you are the host, the map, the ending and whether bots fill empty seats;
what you do in the match: the augment you pick or swap, where you place your troops, the orders you give, and the moment you have finished watching a round.

The other people in your room see your name, your colour, whether you are connected, and what your orders did once the round is played out. They never see your player ID or your IP address. The game has no chat: there is no way to send messages, pictures or files through it.

A room keeps the match and its list of seats (player ID, name and colour) only while it is in use. If you leave a room before its match has started, your seat is removed at once. Ten minutes after the last player has disconnected, the room and everything in it is deleted. We keep no history of rooms, matches or players.

As with the site, the company that runs the room server receives your IP address and the usual technical details of your connection. We have switched on its request log so that we can find faults: it records that a connection to a room was made, when, the room's address (which contains the room code) and technical details of the request, which can include your IP address and the rough location that goes with it. Entries in this log are deleted automatically after seven days at most.

The apps for iPhone, iPad and Mac

The apps are the same game. The game's files are inside the app, so opening it and playing alone contacts no server at all. Only playing with friends uses the network, exactly as described above.

The app adds no analytics, no advertising and no tracking of its own, and it asks for no permissions: not your location, contacts, photos, camera, microphone or notifications. Your profile and settings are kept in the app's own storage on your device.

When you invite a friend from the app, the invitation link is handed to your device's share sheet (on a Mac, it is copied to the clipboard). Where it goes from there is up to you.

Apple distributes the apps, and collects its own information when you use the App Store or TestFlight. Apple passes some of it on to us: for example crash reports and usage figures, if you have chosen to share them with app developers, and whatever you send as feedback through TestFlight. Apple's own privacy policy explains what Apple does.

Writing to us

If you send us an email, we receive your address and whatever you write. We use it to answer you, and keep it only for as long as that takes.

What we do not do

There are no accounts and no sign-in. The game never asks for your real name, your email address, your age or your phone number.
There is no advertising, and no advertising or tracking software, in the game or on this site.
There is no analytics software. Our hosts show us totals, such as how many requests their servers answered; these do not single anyone out.
There is nothing to buy, so we handle no payments.
We do not sell personal data, and do not pass it to advertisers or data brokers.

Why we use it, and on what basis

Everything described above is used for one purpose: to run the game you asked to play, and to keep it working and secure. Where the GDPR or a similar law applies, the legal basis is:

carrying out our agreement with you, the terms of use: delivering the game and running the rooms you play in (Article 6(1)(b) GDPR);
our legitimate interest in keeping the service secure and finding faults: the server and request logs (Article 6(1)(f) GDPR).

What is kept on your device is there because the game needs it to do what you ask of it: remember your profile, your settings and your seat. That is why there is no consent banner.

Who else is involved

The companies named above handle data for us, on our instructions and for no purpose of their own: Cloudflare, Inc. (United States), who deliver the site and the game, and Cloudflare, Inc. (United States), who run the room server. They operate servers around the world, so the technical data described above may be handled outside your own country, including in the countries named here. Where the law asks for safeguards for such transfers, we rely on the ones these companies provide, such as the European Commission's standard contractual clauses.

We give personal data to nobody else, unless a law or a court order obliges us to.

How long things are kept

On your device: Until you remove it.
A room and its match: Until ten minutes after the last player has disconnected.
The room server's request log: Seven days at most.
The web host's logs for the site and the game: A limited time set by the host.
Emails: As long as it takes to deal with what you wrote about.

Children

The game is not directed at children under 13, and we do not knowingly collect personal information from children. It never asks for an age, a real name or a way to contact anyone. A name typed into the game is shown to the other people in a room, so it is better not to use a full real name.

If you believe a child has sent us personal information, for example by email, write to us and we will delete it.

Your choices and your rights

Most of what the game knows about you is on your own device, and you can remove it yourself:

In a browser, clear the site data for the game's address. Browsers keep this under their privacy or site settings.
On an iPhone or iPad, delete the app. On a Mac, an app's data can stay behind after the app is deleted; write to us if you want help removing it.
To change the name others see, open Profile in the game.
A room needs nothing from you: it deletes itself.

Depending on where you live, the law may give you the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to have its use restricted or to object to it, to receive it in a form you can take elsewhere, and to complain to the data protection authority of your country. To use any of these rights, write to support@territorytactics.com.

We do not know who our players are, so in most cases there will be nothing for us to find: all we could ever hold is a room that is still open and a few days of request logs.

Security

The site, the game and the room server are reached over encrypted connections, and the room server refuses connections that come from any website other than the game. Beyond that, the best protection we can offer is how little we hold.

Changes to this policy

If the game changes in a way that touches anything on this page, we will change the page, and the date at its top, before the change reaches players.

Contact

Enes Gunumdogdu (EG Studio), Türkiye. Email: support@territorytactics.com.