Privacy Policy — STICKFIRE: Battle Ground

Last updated: 19 August 2026 · Effective date: 19 August 2026

This policy explains what KurdBits (“we”, “us”) stores when you play STICKFIRE: Battle Ground (the “Game”), why, and how to get rid of it. It covers the Android app and the browser version, which share one account.

The short version: we store an account, your progress and your match record. There is no advertising in the Game, no analytics, no trackers and no third parties receiving your data. Nothing is sold. You can delete everything from inside the Game in two taps.

1. What we store

a) Your account

A randomly generated device token, created the first time you open the Game. This is what a guest account is: no name, no email, nothing you typed.
A callsign — generated for you, and changeable.
If you choose to register: an email address and a password. The password is stored only as a salted hash; we never see or store the password itself. Registering is optional and exists so your progress can follow you to another device.

b) Your progress

Coins, the weapons, fighters and shields you own, and what you have equipped.
Kills, deaths, wins, matches played, streaks and the rank derived from them.
Daily challenge progress and your clan membership.
A record of each finished match: the room, the arena, the mode, and your result.
A ledger line for every coin earned or spent, with the reason, so a balance can always be explained.

c) Purchases

If you buy coins, the purchase is handled entirely by Google Play. We receive an order identifier and the product bought, and we store those so the same purchase cannot be credited twice.
We never see or store card or payment details. Google's own privacy policy applies to the payment itself: policies.google.com/privacy.

d) Technical data

Your IP address is processed while you are connected, because a network connection cannot work without one. It is used to route the match and to stop abuse, and it is not stored alongside your profile as a record of where you have been.

2. What we do not store

No advertising. There are no ads in the Game and no advertising identifier is collected or used.
No analytics or trackers. No third-party SDK, no tracking pixel, no social network integration.
No contacts, photos, location, microphone or camera. The Game never asks for any of them.
No chat. The Game has no chat, so there are no messages to store.
Nothing is sold or shared with advertisers or data brokers, because none of it is collected in the first place.

3. Why we store it

To run the Game: save your progress, sync it between your devices, put you in matches, and keep leaderboards and clans working.
To keep it fair: what you own and what you score is decided on our server, not in your browser, which is what stops an edited client handing itself free items.
To credit purchases exactly once.
To answer you if you write to us.

We do not send marketing email, and there is nothing to unsubscribe from.

4. On your device

The Game keeps a session token, the device token and your settings in your browser's local storage. These are not tracking cookies — they are how the Game recognises your account on the next launch. Clearing your browser storage signs a guest account out permanently, because the device token was the only way back into it. Registering with an email is what makes an account recoverable.

5. How long we keep it

For as long as the account exists. A guest account that is never returned to is removed along with its progress after a long period of inactivity. When you delete your account (section 7) everything attached to it goes at the same time.

6. Where it is stored

On servers we rent in France (European Union). Data is not transferred outside the EU by us. Purchases are processed by Google, which operates globally under its own policy.

7. Your rights, and the two-tap version

You can delete your account and everything attached to it from inside the Game — Account → Delete account. It removes your profile, progress, purchases record, ledger, clan membership and match history, and it is immediate and permanent. You are handed a fresh guest account and can carry on playing.

If you are in the EU or UK, you also have the right to access, correct, export or restrict the processing of your personal data, and to complain to your local data protection authority. Write to support@kurdbits.com and we will answer within 30 days. Our lawful basis is performance of a contract (running the Game you asked to play) and our legitimate interest in preventing abuse.

8. Children

The Game is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account with an email address, write to us and we will remove it.

9. Changes

If this policy changes in a way that matters, the date at the top changes and the new version is published here before it takes effect.

10. Contact

KurdBits — support@kurdbits.com