Privacy Policy

Pachinko-RTS (pachinko-rts.com) is an independently operated online game. The operator is the data controller for the personal data described on this page. For anything privacy related, email pachinkerer@pachinko-rts.com. Other ways to reach us are on the support page.

You can spectate matches and use the tutorial without an account. If you create an account we store:

• Account details: email address, display name, a hashed password, and the dates you registered and last changed your password.
• Optional two-factor authentication: a TOTP secret and hashed recovery codes, only if you turn 2FA on.
• Game records: the matches you played, your results, in-game credits ledger and transaction history, bets and market trades, and any bots or betting bots you register (their names and access tokens).
• Emails we send you: verification links, password resets, and security notices. We do not send marketing email.
• Spectator chat: messages you post in a match's chat, together with the match, the time, your IP address and browser user agent, and whether our language or spam filter altered or blocked the message. Reports you file about other people's messages, and any timeouts or bans applied to your account, are stored with the moderator's decision.

Whether or not you have an account, our servers also process:

• Server logs: IP address, browser user agent, requested URL and time, kept for 14 days for security and debugging.
• Tutorial de-duplication: your IP address is held in server memory for the duration of a tutorial session so one visitor cannot start many at once. It is not written to disk.
• Connection quality telemetry: while you play or spectate, the game client reports transport statistics (packet delivery, stalls, latency, whether the device is mobile). This contains no IP address or account identifier and is used only to improve netcode.

• To run the game for you (performance of our contract with you): accounts, matchmaking, credits, bets, bots, and email verification.
• To keep the service secure and fair (our legitimate interests): server logs, rate limiting, abuse prevention, chat moderation (including investigating cheating, collusion and harassment in spectator chat), and the credits ledger audit.
• To improve the game (our legitimate interests): anonymous connection telemetry and aggregate match statistics.

We do not use your data for advertising, profiling, or automated decisions with legal effects, and we never sell it.

We only use cookies that are strictly necessary to run the site: a login session cookie and a cross-site request forgery token. There are no analytics, advertising, or third-party tracking cookies, so we do not show a cookie consent banner.

The game also keeps a few preferences in your browser's local storage (audio volume, play settings, whether you dismissed a notice). These never leave your device.

Your display name, match history and results, leaderboard position, profit and loss figures, and the names of your bots are visible to other players and visitors. Your email address is never shown publicly.

• Our hosting provider, which runs the servers the game lives on.
• Our email delivery provider, which relays verification and security emails to you.

Both act on our instructions as processors. We share data with nobody else unless required by law.

• Accounts: until you delete your account. Accounts that never verify their email are removed automatically after 7 days.
• After deletion: your email, display name, password and 2FA data are erased and your credits are returned to the house. Match and ledger records are kept in anonymised form because the credits ledger must stay internally consistent; they can no longer be linked to you.
• Server logs: 14 days.
• Spectator chat messages: 90 days, including messages the filters blocked. Chat moderation records (timeouts, bans, reports, moderator actions): 1 year.
• Backups: encrypted database backups are kept for up to 60 days, after which deleted data is gone from backups too.

Under the UK and EU GDPR you can:

• Access and correct your data. Your email, display name and password can be changed on the account page.
• Delete your account at any time from the account page. This takes effect immediately.
• Ask for a copy of your data, object to processing, or ask us to restrict it, by emailing us.
• Complain to your local data protection authority if you think we have handled your data unlawfully.

We respond to requests within one month.

Pachinko-RTS is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.

If this policy changes materially we will update the date at the top of this page and, for significant changes, notify account holders by email.