Privacy Policy
Last updated
TankOver has no ads, no cookies and no accounts. The game and the apps have no analytics and no tracking. Only tankover.com counts its visits, without cookies (see Visitor statistics on tankover.com). This policy explains the little data the game and tankover.com do use. It covers the website, the game in the browser, the desktop app and the phone apps.
Who is responsible
Nick Bubelich, Vienna, Austria, is the controller under the GDPR. Email: support@tankover.com.
On your device
The game keeps your campaign progress, your settings and your online name, tag and age answer in your browser's or app's local storage. It also makes a random player key there the first time you play online. This data stays on your device; the game needs it to work, so it asks for no consent. Clearing the site data or removing the app deletes it.
Online play
When you play online, the game sends our server:
- your random player key, which tells your matches and name apart from other players';
- the name you picked, your tank's colour and shape, and the mode and room you join;
- your age answer, only as "under 13" or "13 or older", never your age or birth year;
- the app's platform and version.
The server keeps:
- a one-way hash of your player key, never the key itself, and when you first and last played;
- your name with its four-letter tag, and your last names: at most 10, none older than 180 days. For 30 days after a name change, leaderboards show your old name as "formerly".
- your match results: the name you played under, kills, deaths, round wins and your place.
The leaderboards in the game and on tankover.com show names, tags and wins to everyone. If you answer "under 13", you play online only under names the game makes up, such as "Lucky Rook 4", and never under a name you type. The server then deletes every name you typed, current and past, and keeps the "under 13" answer with the hash of your player key for good, so your key takes only made-up names from then on. It keeps your made-up name and shows it on the leaderboards like any other name. Results of matches you played before keep the name they were played under, until you ask us to remove it.
The server also sees your IP address. It uses it in memory to limit how often one address may connect, and never writes it to its database. Its logs keep only half of the address and a code that changes every day, so they cannot name you.
The website and server logs
tankover.com and game.tankover.com run on one server of ours, with a hosting provider that processes the data for us. Like every web server, it receives your IP address and browser details with each request. Server logs rotate by size and are deleted as new ones arrive. The server makes a backup of the game database every day and keeps it for 7 days.
Visitor statistics on tankover.com
tankover.com counts its visits with Umami Cloud (umami.is), a web analytics service that processes the data for us. Its script records the page you open, the page that sent you there, your browser, operating system, device type, screen size and language, and your approximate location, which Umami derives from your IP address. It sets no cookies and stores nothing on your device. Umami uses your IP address only in passing, to count visitors and find the location, and does not store it in the statistics. We see only totals, never who you are. The game on game.tankover.com and the apps send nothing to Umami.
The desktop app
The desktop app from Steam or the App Store makes no update check of its own: the store updates it. A copy from the old download on game.tankover.com (version 1.0.1 or older) still asks game.tankover.com for updates when it starts and every 4 hours, and gets no update. Its check sends a random installation number that the update tool makes. The app keeps its own small log file on your computer.
Why we use the data
- Online play needs your key, name and match data: GDPR Art. 6(1)(b), the game you asked to play.
- Leaderboards, name rules, rate limits, logs, backups and updates keep the game fair, safe and working: GDPR Art. 6(1)(f), our legitimate interest.
- Visitor statistics show which pages and links bring players to TankOver: GDPR Art. 6(1)(f), our legitimate interest.
We never sell your data, share it for advertising or use it to profile you.
Who else receives data
Our hosting provider and Umami Cloud process data only on our behalf. When you download TankOver from Steam, the App Store or Google Play, Valve, Apple or Google process your data under their own privacy policies.
How long we keep it
Your player key's hash, your current name and your match results stay while the online game runs, so the leaderboards stay complete. Ask us, and we delete them or remove your name from them.
Your rights
You can ask us for a copy of your data, and to correct it, delete it, limit its use or move it, and you can object to its use. Write to support@tankover.com with your name and tag. You may also complain to the Austrian data protection authority, the Datenschutzbehörde, Barichgasse 40-42, 1030 Wien.
Children
TankOver is for players of all ages. It is a game for a general audience, not one made for children in particular. Younger players can play the campaign, and online they play under a name the game makes up for them, never one they type (see Online play). The game asks only your year of birth, never a birth date, and keeps only whether you are under 13.
Changes
When we change how TankOver uses data, we update this policy first. The date at the top shows the last change.