Privacy (simple & minimal)

Last updated: 2026-10-19 · Written for private testing of aquaignis.io

AquaIgnis is a board game. We are not interested in tracking you around the web, building advertising profiles, or selling data. This page says what we actually store.

If you play as a guest (no account)

You can play without registering.
When a game ends (or a room is abandoned), we may save a game record: date, H2H or AI mode, AI strength (Learning / Challenge), score, room code, and move list. That is so the site owner can improve balance and rules — not to identify you.
We do not put your name or email on guest games.

Ratings

If you play while signed in, we may keep simple Elo ratings for vs Challenge AI, for games against Tidewright (an AI account, labelled as AI), and for human vs human (both signed in). Learning games are not rated. Games against Tidewright are not counted as human vs human. Leaderboards show display names and scores only — not emails. Tidewright’s own account is left off the public lists. When you challenge him, the server emails his notification address your display name, the room code, which side he plays, and a one-time key that lets him join that room.

Looking for a game

If you are signed in, you may optionally flag yourself as looking for a human match for a short time (about 20 minutes). That shows your display name (and room code if you host) on the lobby — not your email, and not a permanent “online” tracker. The flag clears when you start a match, sign out, or the timer ends.

If you create an account

We only ask for what login needs:

Email — so you can sign in (and so we can reset a password later if we add that).
Password — stored as a one-way hash (we cannot read your password).
Display name — a public nickname (not your legal name).

While you are signed in, finished games can be linked to your account (user id only) so you can see Your home: personal win/loss stats and a list of your games to replay. Guest games stay anonymous.

We do not ask for phone number, real name, address, or payment details (donations/subs are not enabled yet).

IP addresses

Web servers always see an IP address for a moment to talk to your browser. We use a short-lived, hashed form of IP only to slow down bots and abuse (rate limits on sign-up, login, and room creation). We do not keep a marketing history of where you play from, and guest game logs do not include IP.

What we do not do

No third-party ad trackers or analytics pixels on purpose.
No selling of player lists.
No “fingerprinting” for ads.

Bots

The public internet is full of automated scanners. We use rate limits, a simple sign-up check, and a honeypot field bots often fill. Humans should barely notice.

Cookies

If you log in, we set one HttpOnly session cookie so the server knows you are signed in. Theme preference (light/dark) may be stored in your browser’s localStorage only on your device.

Children

The game is suitable for thoughtful play with family. If under-16s play, a parent/guardian should help with any account. We do not want more data from children than from anyone else.

Contact

For privacy questions or account deletion requests, see the Contact page (email the site operator). We will delete account rows on request when possible.

Lobby · Contact