Privacy

01 — Kept on your device

The game keeps its data in local storage, the browser's for this site or the app's own on Android, under keys that start with sftd.:

sftd.settings.v1

Your settings: language, theme, quality, sound, health bars, camera shake, figure colors and match speed.

sftd.progress.v1

Your progress: level and XP, maps won with their stars and records, the HQ, the Blot notebook, story panels and tips already shown, the last hero and spells picked, rewards and the Daily siege's best.

sftd.player.v1

For the leaderboards: a random player id, made the first time you send a score, and the name you typed. It says nothing about you.

• The game sets no cookies.
• The transfer code is made on your device from your progress and goes nowhere unless you copy it yourself.
• Stickfront keeps its own stickwar keys on stickwars.dev. To hand out the rewards the two games share, this game opens a hidden page of stickwars.dev that reads which Stickfront story missions you finished and tells only this page; the list stays in your browser, and Stickfront's save is never changed.
• The game lived at stickwars.dev/tower-defense/ until version 0.3.0. Opening that old address carries your saves here: they travel in the part of the address after #, which browsers never send to a server, and are kept only where this site has none of its own yet.

02 — Sent to the leaderboards

• Only when you press Send score after an Endless run or a Daily siege: your random player id, the name you chose, the board (the Endless map or the day), the score, the wave reached, how long the run took, the game's version, and when it was sent.
• Each board keeps only your best. Sending a score under a new name renames your entries on every board.
• Everyone sees the names, scores and waves on a board, and when they were set. The player id is never shown or sent back out.
• A name the word filter refuses is shown as a stand-in such as Player1234; the score still counts.
• Daily boards are deleted a week after their day. Endless boards stay.
• To limit how often scores can be sent, the server keeps a hash of your IP address mixed with the day for about a minute. The address itself is never stored.
• Nothing else is sent: no progress, no settings, nothing about your device.

03 — The Android app

The app is the same game, and keeps the same keys in the app's own storage. It asks for no permissions on screen: besides internet access it only declares the network-state, wake and restart permissions Android's background download library uses to fetch game updates. At start it asks the game server whether newer game code is out; the request carries the app's version and the update library's usual device fields (such as a random install id and the Android version). The server reads the version to answer and keeps nothing from it.

04 — Services the game uses

• Cloudflare hosts the site, the leaderboards and their storage, and sees the usual request data (such as your IP address and browser) to serve and protect the site.
• Cloudflare Web Analytics counts visits to the site's pages without cookies and without identifying you: which page, the country, the browser and how fast it loaded. It never sees what you do in the game.
• No ads, no purchases, no account. The game sells or shares nothing about you.

Cloudflare's own policy: cloudflare.com/privacypolicy

05 — Deleting your data

• Your scores: Settings, Privacy, Delete my scores. Every score of this device's player id is removed from every leaderboard at once. Each device (a browser, the app) has its own player id, so press it on each one you sent scores from.
• Everything on your device: Settings, Privacy, Delete all progress removes every key of this game, and only this game's. Clearing the site's data in the browser, or uninstalling the app, does the same. Delete your scores first: once the player id is gone, the game can no longer tell which entries were yours.

Cleared the game's data before deleting your scores, or have a question about your data? Write to contact@stickwars.dev with the name you used and roughly when you sent the scores; they are deleted within 30 days.

Last updated 13 October 2026.