Skip to content
TinyGenerals Help

Privacy Policy

Effective date: 2026-02-01

This Privacy Policy explains how TinyGenerals (“TinyGenerals”, “we”, “us”) collects, uses, and shares information when you use our websites, help pages, and game services (together, the “Services”).

If you do not agree with this Policy, please do not use the Services.

What information we collect

Section titled “What information we collect”

We collect information:

  • From you (when you create an account, play, chat, create maps, or contact us)
  • From third parties (when you sign in using an OAuth provider like Discord/Google/Steam)
  • Automatically (technical data such as IP address and device/browser data, and analytics data on our websites)

Information you provide

Section titled “Information you provide”

Depending on how you use TinyGenerals, we may collect:

  • Account information: email address, username, and a password (stored as a cryptographic hash).
  • Profile information (optional): bio text, avatar selection, avatar URL, and timezone.
  • Game and community content:
    • chat messages you send (including global chat and match/room chat),
    • maps you create, publish, or upload,
    • feedback you submit through our feedback forms.
  • Invitations: when you invite someone by email, we process the invitee email address to send the invitation.

Information from OAuth providers (Discord/Google/Steam)

Section titled “Information from OAuth providers (Discord/Google/Steam)”

If you sign in with an OAuth provider, we receive information from that provider, which may include:

  • Provider account identifier (the user ID on that platform)
  • Username / display name
  • Avatar URL
  • Email address (for some providers and configurations)

We use this data to create or link your TinyGenerals account and to display your profile/avatar in the game.

Information collected automatically

Section titled “Information collected automatically”

When you access the Services, we (and our service providers) may automatically collect:

  • Log and device data: IP address, browser type, operating system, and other standard server logs.
  • Cookies and similar technologies:
    • Session cookie (session_token) used to keep you logged in (HttpOnly; sent with requests to our API).
    • Local storage / session storage in your browser for things like login state, guest tokens (if enabled), and UI settings (e.g., theme).
  • Analytics data on our websites: page views, referrers, and interaction events (see “Cookies & analytics” below).

How we use your information

Section titled “How we use your information”

We use information we collect to:

  • Provide and operate the Services (accounts, gameplay, matchmaking/rooms, maps, chat, replays/history, and support features).
  • Authenticate users and secure accounts (sessions, OAuth linking, fraud/abuse prevention).
  • Send service emails (for example: welcome emails, turn notifications, invitations, and feedback survey emails).
  • Improve and debug the Services (troubleshooting, performance monitoring, and understanding feature usage).
  • Enforce rules and protect the Services (detect spam/abuse, investigate incidents, and comply with our Terms/rules).
  • Comply with legal obligations.

How we share your information

Section titled “How we share your information”

We do not sell your personal information.

We may share information in the following ways:

  • Service providers: vendors that help us run the Services (for example: hosting/database providers, email delivery providers, analytics providers).
  • OAuth providers: when you choose to sign in with Discord/Google/Steam, those providers process your data under their own privacy policies.
  • Other users (public or in-game sharing):
    • your username and in-game actions are visible to other players in the matches/rooms you participate in,
    • chat messages are visible to others in the relevant chat channel,
    • maps you publish may be visible to other players.
  • Legal and safety: if required by law or to protect the rights, safety, and security of TinyGenerals, our users, or others.

Cookies & analytics

Section titled “Cookies & analytics”

Session and functional storage

Section titled “Session and functional storage”

We use cookies and browser storage to make the Services work (for example, keeping you logged in).

Website analytics

Section titled “Website analytics”

Our websites (including the help pages) may use analytics tools, such as:

  • Google Analytics (via Google Tag Manager)
  • Ahrefs Analytics

These tools may collect information such as IP address (or a derived/approximate location), device/browser information, and usage data (pages viewed and interactions). You can limit this data by using browser settings and extensions that block cookies/scripts.

Emails

Section titled “Emails”

We send automated emails related to using TinyGenerals (for example, turn notifications, invitations, and occasional feedback survey emails). We use an email delivery provider (SendGrid) to send these emails.

If you receive an email from us, you can typically stop future non-essential messages by using any unsubscribe/opt-out mechanism included in the email (if present) or by contacting us.

Section titled “Third-party links (Ko-fi, Discord, etc.)”

Our Services may link to third-party sites (for example: Ko-fi and Discord). If you follow those links, your activity is governed by the third party’s privacy policy, not ours.

Security

Section titled “Security”

We use reasonable administrative, technical, and organizational measures designed to protect your information.

Data retention

Section titled “Data retention”

We keep information for as long as needed to provide the Services and for legitimate business purposes, such as:

  • keeping accounts active,
  • maintaining game history and integrity,
  • preventing abuse,
  • meeting legal obligations.

When information is no longer needed, we take steps to delete or de-identify it.

Your rights (GDPR/EEA/UK)

Section titled “Your rights (GDPR/EEA/UK)”

If the GDPR applies to you, you may have rights such as:

  • access to your personal data,
  • correction,
  • deletion,
  • restriction or objection to certain processing,
  • data portability,
  • withdrawing consent where processing is based on consent,
  • lodging a complaint with your local data protection authority.

To make a request, contact us (see “Contact” below). We may ask for information to verify your identity.

Children

Section titled “Children”

TinyGenerals is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us so we can take appropriate action.

Contact

Section titled “Contact”

For privacy questions or requests, you can:

Changes to this Policy

Section titled “Changes to this Policy”

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Effective date” above.