Privacy Policy

Updated October 15, 2026. BangArena is a browser card game at bangarena.app. This page explains what data we store, why, and how to delete it.

In brief

• You can play without signing up. We don't ask guests for a name or an email.
• Signing in with Google is optional: it lets your results be saved for good and be available on all your devices.
• We never see or store your Google password.
• We don't show ads and we don't sell data.
• Google Analytics only turns on if you allow it. Declining changes nothing in the game.

Who is responsible for the data

The data controller is sole proprietor Ilya Pavlovich Shurenkov, Kyrgyz Republic, Bishkek, registration number 001-2024-169-5164, tax ID (INN) 21108198750110. Questions about data: ceo@mozart.kg or the form on the FAQ page.

What we store if you play as a guest

• Device ID. A random number the server gives your browser. Your browser keeps it on its side. In the game history it is stored as an irreversible hash instead.
• Game results. Role, character, win or loss, damage, healing, badges, ★ points, and rating. These are used to build your office, achievements, and ranking.
• Nickname at the table. The players at that table can see it. Nicknames do not appear in the game history or in the ranking.
• Table state. Turns, cards, and the players' seats along with their nicknames are stored on the server so that a game can survive a dropped connection or a server restart. Once the game ends, this data is deleted after 7 days, and an abandoned table is deleted 30 days after the last turn.
• IP address. Needed to limit overly frequent requests and protect the game from attacks. It appears only in the server's technical logs, which are kept for a limited time and then overwritten.

What is added if you sign in with Google

• Google account ID — a permanent identifier we use to recognize you the next time you sign in.
• Email address. Only you can see it, in your office. We don't send newsletters.
• Profile device list — hashes of the device IDs you've signed in from. It lets us combine your history from all devices into one profile.
• Sign-in session — a random key in your browser's cookie. Only its hash is stored in the database. The session lasts 365 days from your last visit.

Google doesn't give us your password, contacts, or other account data. We don't save your Google profile name or photo.

Cookies and browser storage

• krug_sid — your sign-in session. It only appears after you sign in with Google and lasts 365 days.
• krug_st_… — the key to your seat at the table, kept for 24 hours so you can get back to the table after a dropped connection.
• Your browser storage (localStorage) holds your device ID, nickname, language and game settings.
• The "Sign in with Google" button loads a Google script (accounts.google.com) — only in your account area and only while you're not signed in. The script stores its own service cookie, g_state. When you sign in, Google's Privacy Policy applies.
• krug_consent_v1 in your browser storage — your answer to the analytics question.
• krug_aid in your browser's storage — a random ID used for anonymized stats on how people move between screens. It only appears after you click "Allow" and is deleted if you decline. It isn't linked to your device ID or your account.
• _ga and _ga_… — Google Analytics cookies, only after "Allow," kept for 13 months. There are no advertising cookies.

Analytics

To understand where players come from and where they get stuck, we use Google Analytics 4. It only runs if you click "Allow." Before that, and after you decline, the site doesn't load a single analytics script.

• What we count: which screens get opened (home, lobby, table, results), the start and end of a match (number of seats, mode, number of bots, outcome, your role after the match, duration), copying an invite, language changes, device and browser type, and the country and city that Google determines from your IP. Google does not store the IP address itself.
• What is never sent: your nickname, email, account and device IDs, room codes, in-game text. The room code is stripped from the page address before sending.
• Advertising is off: Google advertising signals, ad personalization, and data sharing for advertising are all disabled.
• Retention: Google keeps events for 14 months; the _ga cookie lasts 13 months.
• Changed your mind: the "Cookie settings" link at the bottom of the home page brings the choice back up. After you decline, analytics turns off immediately.

Google processes this data under its privacy policy.

Why we need this data

• to run the game and bring you back to the table after a dropped connection;
• to show your stats, points, rating and achievements;
• to gather your profile from all your devices if you sign in with Google;
• to protect the game from abuse and overload;
• to calculate overall statistics (how many games have been played, how balanced the roles are) — only in anonymized form.

Who else receives data

• Hosting. The game server is rented from the provider is*hosting. The provider stores our files but doesn't use them.
• Google — when you click "Sign in with Google": Google learns that you're signing in to bangarena.app.
• Google Analytics — only if you allowed analytics: anonymized statistics on visits and matches (see the "Analytics" section).
• AI model providers — only if AI players are seated at the table. The model receives a description of the game situation: cards, moves, revealed roles. It doesn't include your nickname, email or device ID.

We don't share or sell anything to advertisers or data brokers.

How long we keep it

• Your profile — until you delete it.
• Game results — for as long as the game runs. A game stays in the overall statistics even if one of its players deletes their profile, but it no longer points to them.
• Sign-in session — 365 days from your last visit.
• Table state with nicknames — 7 days after the game ends; an unfinished table — 30 days after the last turn.
• Database backups — up to 8 weeks, then they're replaced by newer ones.

How to view and delete your data

• View it — in "My account": all your history, points and rating are there.
• Sign out — the "Sign out" button in your account. The browser will forget your device ID and you'll play as a new guest from then on.
• Delete your profile — the "Delete profile" link at the bottom of your account. We'll erase your email, Google account ID, points and rating, and unlink your games from you. Your data disappears from backups within 8 weeks.
• Guest history is deleted the same way: sign in with Google — your history moves to your profile — and delete the profile. Or write to us and we'll help.
• For any question about your data, write to ceo@mozart.kg.

Age

BangArena is a game for players aged 12 and up. Playing as a guest requires no personal data. Signing in with Google is available to anyone Google allows to have their own account.

Changes

If anything changes — for example, a new sign-in method or a different analytics service appears — we'll update this page and the date at the top, and we'll announce important changes in the news.