Privacy policy
- Summary
- Playing without an account
- With an account
- Online play and live scores
- Match recordings and diagnostics
- The Club (payments)
- Cookies
- Where data lives
- Retention and deletion
- Your rights
- Age
- Changes
Summary
EpicRally is a tennis game that runs in your browser. You can play the AI, train in the Academy and play a friend by code without any account. If you sign in, we keep the minimum an account needs: your e-mail address (or the identity your sign-in provider gives us), a display name, your birth year, an optional country, and one session cookie. We show no advertising, use no third-party analytics or trackers, and never sell or share personal data for marketing. To find and fix problems, the game records matches (inputs, not video) and a small set of usage and error facts — see Match recordings and diagnostics.
Playing without an account
- What stays on your computer. Your display name, settings and Academy progress live in your browser's local storage. Clearing site data removes them; we never see them.
- What the servers see. Like any website, our hosting providers and our lobby server see your IP address to deliver the pages, to connect you to an opponent and to enforce connection limits. Connection logs are kept for a short time for operations and abuse prevention only.
- Diagnostics. The optional
?netlogand?shotlogtools save a file on your computer only. What the game itself sends about a match or a visit is described under Match recordings and diagnostics; for a guest none of it is linked to a person.
With an account
An account is optional. It exists so that your identity, and later your preferences, Academy progress, match history and Club membership, can follow you across devices.
| Data | Why | Source |
|---|---|---|
| E-mail address | To sign you in (a six-digit code or a link by e-mail — no passwords) and to contact you about your account | You |
| Sign-in provider identity (Google, Facebook) | If you choose to sign in with a provider, we receive your provider user id, your name and your e-mail address from that provider, and store the id and e-mail to recognise you | The provider, with your consent on its consent screen |
| Display name | Shown to opponents and spectators; unique across players | You |
| Birth year | Age check — accounts are for players 13 and over | You |
| Country (optional) | Rankings and regional tournaments later | You |
| Session | One cookie that keeps you signed in for 30 days of use | Set by the lobby |
| Sign-in codes and links | Stored hashed, for ten minutes, to complete a sign-in | Generated |
| Match results and live scores | See Online play | Play |
We do not store passwords (there are none), and we do not read your contacts, friends list or posts from any provider.
Online play and live scores
- Peer to peer. Online matches run directly between the two players' browsers (WebRTC). Game inputs go from your browser to your opponent's. When a direct path is impossible, the traffic is relayed by Cloudflare's TURN service, which cannot read it.
- Live scores are public. While a match is listed — during play and for up to one hour after it ends — the lobby shows the room code, the two display names and the live score in the game's "Live now" list, and anyone can watch the match. Choose your display name accordingly.
- Match history. Results of online matches (players, score, when) will be kept for signed-in players once rankings and history ship; guests' results are not attributed to anyone.
Match recordings and diagnostics
The game is deterministic: a match can be replayed exactly from the players' inputs. We use that to look at a reported problem and to see where the game is too hard or breaks — there is no video and no screen capture.
- Match recordings. A match against the AI or an online match is recorded as the two players' inputs, periodic checkpoints of the game state, the display names shown in the match, the room code (online), the AI level and the game version. Signed in: every match is kept and linked to your account. As a guest: one match in ten, plus any match in which an error occurred or you reported a problem; a guest recording carries only a random id for that visit and is linked to no one.
- Who can watch a recording. You, for your own matches; both players, for an online match; and the people who run the game, when they look into a report or a fault. Nobody else — a recording is never public unless a sharing feature lets you choose to publish it.
- Report a problem. Pressing it (pause menu, results) sends the current recording and your optional note, and shows you a short reference to quote.
- Usage facts. Which screens were opened, matches and drills started and how they ended, settings changed, and for online matches the connection quality (latency, corrections) — with a random id for the visit (never stored on your device), the game version, the device class (desktop, tablet or phone), the graphics card model, the browser language, the window size and the site that linked here. Your IP address is not stored with these facts.
- Performance and errors. Frame-time counts while you play, and when something goes wrong the error message, the code location, the last screens opened and — if a match was running — its recording.
The Club (payments)
When the Club membership opens, payments will be handled by Stripe. Card numbers never reach us: Stripe collects them on its own pages and tells us only whether a membership is active and until when. Stripe's own privacy policy applies to the payment itself.
Cookies
One cookie, epicrally_session, set only when you sign in, so that you stay signed in. It is not used for tracking or advertising. No analytics or third-party cookies are set. Clearing it, or signing out, ends the session.
Where data lives
- Cloudflare (Pages hosting, CDN, TURN relay, e-mail sending, encrypted backup storage, the match recordings' storage) — the site and the sign-in e-mails.
- Contabo (a server in the European Union) — the lobby and the account database.
- Google / Meta — only if you sign in with them, only for the sign-in.
- Stripe — only if you join the Club.
Your data may be processed in the United States by these providers under their standard contractual safeguards.
Retention and deletion
- Account data is kept while your account exists.
- Delete your account from the game (Account → Delete account) or by writing to us — see how to delete your account. Deletion takes effect after a 14-day grace period during which signing in again cancels it; encrypted backups holding the old data expire within a further 14 days.
- Sign-in codes expire after ten minutes; sessions after 30 days without use; live-score listings one hour after a match ends.
- Usage facts, performance counts and errors are deleted after 90 days.
- Match recordings are kept while the game is in its early phase, so that faults found later can still be replayed; when we set an expiry we will publish it here. Deleting your account deletes your recordings with it; a guest recording was never linked to you.
Your rights
Wherever you live, you can ask us what we hold about you, have it corrected or deleted, or object to a use of it — write to [email protected] from the address on your account. Residents of the EU/EEA and the UK also have the rights of the GDPR, including the right to lodge a complaint with a supervisory authority. We answer within 30 days.
Age
The game can be played by anyone. Accounts are for players 13 and over: we ask for the birth year when an account is created and do not create accounts for younger players. If you believe a child under 13 has an account, tell us and we will remove it.
Changes
Updated 16 October 2026: match recordings, usage facts and error reports (the recordings section). We will keep updating this policy as features ship and note the date here; material changes are announced in the game.