What this site knows about you

The game

Game progress is written to your own browser, in IndexedDB, and never leaves your device. There is no account, no telemetry, no analytics on the game, and no request to any server carrying your save.

Because saves live only in your browser, they can disappear. Clearing site data removes them, and browsers may evict storage under pressure. Export a backup from the pause menu if a run matters to you.

The dashboard

The private area behind sign-in is a personal tool, invite only. Its data is stored in a Postgres database where every row is bound to the account that created it and isolated by the database itself, not merely by application code.

Sessions use a cookie that is HTTP-only and same-site. Access tokens for any connected third-party service are encrypted before they are written to the database.

Contact

Questions go to cmaze@optiarms.com.