Privacy
Last updated 2026-05-15
Towerhold is a small indie browser game. We do not sell data, we do not run ad networks, and we do not have a marketing pipeline. This page describes what we do and don't collect, in plain language.
What we collect
- Display name — the name you choose to play under. Visible to opponents during a match. Stored on the server while a match is active.
- Session ID — a random identifier that lets us reconnect you to a match if your tab refreshes. Stored in your browser's
sessionStorage(cleared when you close the tab). - Match telemetry — what units and towers were built, match length, win/loss. Aggregated data we use to balance the game. Not tied to anything personal.
- Server logs — your IP address and request metadata, kept by our hosting provider for abuse prevention. Standard for any website.
What we don't collect
- No email addresses. No passwords. No accounts at all (yet).
- No payment information. The game is free.
- No tracking cookies. No third-party advertising.
- No cross-site identifiers, no fingerprinting.
Third parties we rely on
- Cloudflare — sits in front of our servers for DDoS protection and faster delivery. They see your IP and basic request info.
- Google Fonts — we load one font (IBM Plex Sans) from Google's CDN. Your browser tells Google your IP when it fetches the font.
- Umami — privacy-friendly web analytics so we know how many people visit and where they come from (e.g. Reddit, Discord). No cookies, no personal identifiers, no cross-site tracking. IPs are hashed, not stored. More on Umami's data practices.
- Sentry — collects JavaScript error reports from visitors who hit a bug, so we can fix it. Captures the error, stack trace, browser, and OS. When (and only when) an error fires, Sentry also records a short replay of the page leading up to it — DOM and interactions, not webcam or microphone. IP addresses are not stored. No personal identifiers, no cross-site tracking. More on Sentry's data practices.
Retention
Match telemetry is kept while we're actively balancing and developing the game. We have no plans to share it externally. Server logs follow our hosting provider's defaults.
Your control
Closing your browser tab ends your session. There's no account to delete because there's no account. If you want match telemetry tied to a specific play session removed, reach out via the contact below — although since we don't tie telemetry to a personal identifier, there's typically nothing to look up.
Contact
Questions or concerns: find us on our Discord.