Privacy Policy

BrawlFast is operated by Vynse ("I", "me"). Contact: contact@vynse.dev

• Your fighter — nickname, stats, appearance, sprite and win/loss record. Needed to run matchmaking and the leaderboard.
• An ownership token — lets you own a fighter without an account. It is a random secret kept in your browser, sent over HTTPS with each request, and my server stores only its SHA-256 hash.
• Match records — who you fought and the outcome, plus a defense log showing what happened to your fighter while you were offline.

Your game state lives in your browser's local storage, signed with a device key so tampering is detectable. It is not a cookie, and it stays on your device. Clearing your browser data deletes a guest fighter permanently — that is the reason to make an account.

The iPhone app has no account and no sign-in. It uses the same servers as the web game, so the same fighter data applies:

• Your fighter — nickname, class, level, stats, equipment and win/loss record. Needed for matchmaking, the Arena and the leaderboards.
• An ownership token — a random secret created on your iPhone and kept in its secure storage. It is sent over HTTPS with each request and my server stores only its SHA-256 hash.
• Match and Gauntlet records — who you fought, the outcome, and your best Gauntlet round of the week.

Your progress (coins, gear, buildings, quests) is saved on your iPhone. Deleting the app deletes it, and without an account I cannot restore it.

Notifications — if you allow them, the app schedules one daily reminder on the device itself. There is no push server and I never receive a device token.

The app contains no analytics, no crash reporting and no advertising SDK, and it does not track you across other companies' apps or websites.

• Email and password hash — if you sign up with email.
• Google email, name and avatar — if you sign in with Google.
• X handle and avatar — if you sign in with X. X does not give me your email address.

An account exists so you can recover your fighter on another device, and so a purchase can be attached to someone.

This is the part worth reading, because it is the whole point of the product.

Nothing about you is published until you attach a product to your fighter or verify an X handle. Until then you are not on the public leaderboard, you have no public page, and search engines see nothing about you.

Once you opt in, these become public and indexable:

• Your fighter nickname, level, sprite and win/loss record
• Your product name, tagline and link
• Your X handle, if you gave one
• Your weekly and all-time standing, and any Hall of Fame placement
• A generated share image containing the above

Removing your product from your profile clears your public address and takes the page down. Hall of Fame entries record a finished season and are kept as history — email me if you need one removed.

Inside the games, other players see your fighter's nickname, class, level and record — on the in-game leaderboards and when they meet your fighter in a fight. That is part of playing against other people, and it is not published to search engines. The iPhone app has no product listing, so a fighter played only on iPhone never gets a public web page.

Links to your product carry rel="nofollow" unless you have won a season.

Payment is processed by Stripe. I do not store card numbers or billing details. I keep a record of what you bought, the amount, the email you gave Stripe, and a transaction reference — because I have to, for accounting.

In the iPhone app, BrawlFast Premium is an in-app purchase processed by Apple. I never see your Apple ID or payment details. RevenueCat receives the purchase receipt together with a random identifier created on your iPhone, so the purchase can be verified and restored after a reinstall.

On the web, I use PostHog EU to count things like fights played and level-ups, and Sentry to catch crashes. No advertising, no cross-site tracking, no fingerprinting, no session replay. Analytics uses local storage rather than tracking cookies. The iPhone app uses neither.

• Supabase — Database and authentication. Privacy policy
• Vercel — Hosting. Privacy policy
• Stripe — Payments. Privacy policy
• Apple — App Store distribution and in-app purchase payments (iPhone app). Privacy policy
• RevenueCat — In-app purchase records for the iPhone app. Privacy policy
• PostHog EU — Product analytics for the web game, hosted in the European Union. Privacy policy
• Sentry — Error monitoring for the web game. Privacy policy
• Google — Optional sign-in. Privacy policy
• X — Optional sign-in. Privacy policy

The database is shared with the BrawlFast mobile app, which I also operate.

• Fighters and game state: until you delete them.
• Match records: automatically deleted after 7 days.
• Defense log: the 50 most recent entries per fighter.
• Gauntlet results: one row per fighter and week, kept for the rankings.
• iPhone progress: on your device, until you delete the app.
• Purchase records: kept for accounting.
• Waitlist emails: until you ask to be removed.

Two things you can do yourself, right now:

• Unpublish — remove your product from your profile and the public page disappears.
• Delete — deleting a fighter removes it from the server.

On iPhone there is no account to delete: email me your fighter's name and I will remove it from the server.

For anything else — a copy of your data, a correction, full account deletion — email contact@vynse.dev and I will handle it within 30 days.

You can play the entire game without ever identifying yourself. Where you do give me something — an email, an X handle, a product listing — it is either because you asked for an account, because you bought something, or because you chose to be listed publicly. You can withdraw any of it.

BrawlFast is not intended for children under 13. If you think a child has given me personal data, email me and I will delete it.

I may update this policy. The date at the top reflects the latest revision, and significant changes will be announced in the game. See also the Terms of Service.

Questions? Email contact@vynse.dev.