Privacy Policy

Last updated 14 November 2026

Short version: we collect as little as we can, only to run the game and keep it fast and fair. No ads, no trackers, no selling data. Questions about your data: contact@brawlingalley.io.

What we collect

When you play: the name you pick, the country your connection comes from, your device type, your connection speed (ping), which rooms you joined and when, match results, and what you did in each match (knockouts, hits, powerups picked up, when you left). Your IP address is used while you are connected, to connect you and to stop abuse, but we don't store it: we keep only a scrambled code made from it that can't be turned back into the address, so we can spot a banned player coming back.
Performance reports: while you play, your browser sends how smoothly the game runs: frame times, errors, your browser, operating system, graphics card, screen size and similar device details. These are tied to a random ID made by your browser, not to your name or IP address. You can turn them off in Settings (Send performance reports).
How you use the game: from the moment the page opens, which screens you see, which buttons you press, when you join and finish matches and how long the game is on your screen, plus where you came from (the site or invite link), your device type, browser, operating system, language and country. This is tied to the random ID your browser made and, if you are signed in, your account, plus a scrambled code made from your connection, operating system and screen size, so one person on two browsers counts once. It has no names, messages or IP address. We use it to see what works in the game and what doesn't, and to test changes by showing some players a different version (an A/B test).
If you sign in with Discord: only your Discord user ID, the name you choose in the game and how you dressed your bowler and ball (so they follow you to other devices). We don't get your email, password or friends list, and we don't keep Discord's access token.
Room chat: each line you send, with the name you had, your player ID (your account, or the random ID your browser made as a guest) and the room, so moderators can read it. No IP address is stored with a line. If you report a line, we keep it with the five lines before it, who said it and who reported it. If you mute someone, we store whom you muted and the name they had, so the mute follows you to every room. If a moderator mutes your chat, we store the mute, its reason and, for a guest, the scrambled address code of your last connection.

Why

To run matches, keep the game working, find and fix bugs and slowdowns, and stop cheating and abuse. The legal basis is our legitimate interest in running a working, fair game, and for an account, providing what you signed up for.

On your device

The game saves your settings, look and random ID in your browser's local storage. Signing in sets one cookie to keep you signed in. Our security protection may set a cookie to filter out bots. All of these are needed for the game to work; we use no advertising or tracking cookies. To keep a visit together across a reload, the game saves a random visit ID in this tab's session storage; it is gone when the tab closes. Our own analytics counts visits and how the game is used; no third-party analytics service receives them.

How long we keep it

Play sessions and the scrambled address code: 14 days.
Match results and what you did in each match: 90 days.
How you used the game (screens, buttons, visits): 90 days; after that only daily totals without any ID. The day your browser first came and how many visits it made: 13 months after your last visit.
Which days you played (with your device type and country, to count how many people play): 13 months.
Your level, XP, unlocks and lifetime totals (matches, wins, knockouts): kept with your progress. After you delete your account they stay without your name, so match results still add up.
Your daily and weekly quests and how far you got: 14 days.
Room chat: 24 hours. A reported line and the lines with it: 30 days. Your mutes: until you remove them (at most your 200 newest). A moderator's chat mute: as long as it lasts, its address code for a week at most. Deleting your account removes your chat lines, the reports by you and about you, and the mutes by you and on you, 30 days after you delete it.
If you are banned: the ban, its reason and, for a ban on a connection, its scrambled address code, for as long as the ban lasts (a permanent ban: for good). Notes our moderators write about a player stay until a moderator removes them, or 30 days after you delete your account.
Performance reports: 7 days. After that only daily totals per group (browser, device, build and the like), with no player in them: a year.
Your account: until you delete it. Deleting hides it at once, and signing in again within 30 days brings it back. After 30 days your name, chat, notes, devices and address codes are removed for good; your match results and totals stay without your name.
Backups: copies of the above may live on in backups for up to 35 days, then are deleted.

Who else handles it

We don't sell or share your data. These services process it for us:

Hosting, security and storage providers that run the game for us. You may be matched to a server outside the EU, close to you.
Discord: only if you choose to sign in with it.

Your rights

You can ask to see, correct or delete your data, or object to how we use it: email contact@brawlingalley.io. We delete your account whenever you ask. If you're unhappy with how we handle your data, you can complain to your local data protection authority.

Children

The game is not meant for children under 13. If you think one gave us data, tell us and we'll delete it.

Changes

If this policy changes, we update the date at the top. See also our Terms of Service.