Legal
Privacy Policy
Effective August 6, 2026
This policy explains what Rusty Bolt Games collects, why we use it, and the choices available to players.
1. Who we are
Rusty Bolt Games, LLC operates this website and its games. References to “we,” “us,” and “our” mean Rusty Bolt Games, LLC.
2. Information we collect
Information you provide
- Account details such as email address, username, and identifiers received from an OAuth provider.
- Support messages, feedback, and information you choose to send us.
- Purchase-related details such as transaction identifiers, purchased products, price, and delivery status. Full payment-card details are handled by our payment provider and are not stored by us.
Game and device information
- Cloud saves, game progress, match results, squad composition, rankings, and other gameplay records.
- IP address, browser or device type, operating system, approximate location derived from IP, timestamps, crash data, and security logs.
- Analytics events describing how players find and use our websites and games.
Public game information
Your chosen username and some competitive information, such as match results, rankings, or squad statistics, may be visible to other players. Do not use a username that reveals private information.
Guest data
Games may store settings and progress locally in your browser before you create an account. Local data can be lost if you clear browser storage or change devices.
3. OAuth sign-in
If you sign in with Discord, Google, or X, that provider sends us the information authorized during sign-in, generally an account identifier, display name, avatar, and email address. We do not receive your provider password. The provider’s own privacy policy governs its processing.
4. How we use information
- Operate accounts, cloud saves, matchmaking, leaderboards, purchases, and support.
- Deliver virtual items and maintain accurate transaction and currency ledgers.
- Prevent cheating, fraud, abuse, unauthorized access, and payment disputes.
- Fix problems, measure performance, understand use, and improve our games.
- Comply with legal, accounting, tax, and consumer-protection obligations.
- Send service messages and, only where permitted, marketing communications.
5. Cookies and similar storage
We use browser storage and similar technologies for sign-in sessions, settings, guest progress, security, and analytics. When enabled, PostHog stores an analytics identifier in local storage and receives page views and selected gameplay events. We currently disable PostHog session recording, automatic interaction capture, and person profiles. Where consent is legally required, non-essential analytics must remain off until that consent is given.
6. Service providers
We disclose information only as needed to operate the Services, comply with law, or protect users. Providers may include Supabase for authentication and databases; Stripe or another payment provider for checkout and payment processing; Railway or another cloud host; PostHog for product analytics; and Discord, Google, or X when you choose those sign-in methods. We may also disclose information to professional advisers, authorities when legally required, or a successor in a merger or sale.
We do not currently sell personal information or share it for cross-context behavioral advertising. If that practice changes, we will update this policy and provide any required notice and opt-out.
7. Legal bases and international processing
Depending on where you live, we process account, cloud-save, matchmaking, and purchase information to perform our contract with you; transaction and compliance records to meet legal obligations; security and limited product-improvement data for our legitimate interests; and non-essential analytics or marketing data based on consent where consent is required. Our providers may process information in the United States and other countries with different data-protection laws. Where required, we use provider contractual safeguards or other legally recognized transfer mechanisms.
8. Retention
We keep information only as long as reasonably needed for the purposes described here. Account and cloud-save data is generally retained while an account is active. Financial and transaction records may be retained longer for tax, accounting, fraud-prevention, and legal obligations. Security logs are retained for a limited period appropriate to their purpose.
9. Your choices and privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal information; object to certain processing; withdraw consent; and appeal or complain to your local data-protection authority. Withdrawing consent does not affect processing that already occurred lawfully. We respond within the period required by applicable law, generally one month for requests covered by the GDPR.
You can disconnect an OAuth identity through your provider, but this does not automatically delete the Rusty Bolt account. To request account deletion or exercise a privacy right, email us from the address connected to the account. We may need to verify the request and may retain records that law, accounting, security, or fraud prevention requires us to keep.
10. Marketing choices
You can unsubscribe from marketing email using the link in the message or by contacting us. We may still send essential account, security, purchase, and support messages.
11. Third-party links
Our websites and games may link to services we do not operate. Their privacy practices are governed by their own policies, and you should review those policies before providing information.
12. Children
Our Services are not intended for children under 13, and we do not knowingly collect personal information from them. If we learn that we collected such information without required parental consent, we will delete it. Parents or guardians can contact us with concerns.
13. Security
We use administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security.
14. Changes
We may update this policy as our Services or providers change. We will update the effective date and provide additional notice when required.