PRIVACY POLICY — DRONE DEFENCE

IN SHORT
The game runs entirely in your browser. As shipped there is no connection to the outside world — the extension does not even hold the technical permission for one.
There is exactly one voluntary exception: the global leaderboard. It transmits nothing until you explicitly agree, and even then only what is listed below.
WHAT HAPPENS WITHOUT YOUR INVOLVEMENT: NOTHING
• Permissions as shipped: storage (browser storage) — nothing else
• Network access: none. The permission for it is registered as optional and is only granted on request
• Account: none. There is no sign-up
• Ads, tracking pixels, analytics: none
• Sharing with third parties: none
Saved games, settings, your best run and which enemy types you have already met live in browser.storage.local — that is, in your browser on your device. None of it leaves. You delete all of it by removing the extension.
THE GLOBAL LEADERBOARD (VOLUNTARY)
It is protected twice over, and both steps start with you:
1. The tick box in the settings — Offer the global leaderboard. It is not ticked as shipped. While it is empty, the game does not ask after a run, does not load a list and sends nothing.
2. The browser's technical permission for the address of the service. Firefox asks for this separately; until then the extension has no way of reaching the network at all.
With both in place, the game asks after a lost run whether your score should go into the global list. You can still decline; you will not be asked again.
What is transmitted if you agree
Score Wave you reached Difficulty (1–3) Number of units stopped (used for the plausibility check) Call sign — an assigned designation such as "Vega-Plasma-17". It is generated by the game, not entered by you.
That is the complete list. There is no further field.
What is not transmitted
No information about your device, browser, screen, language or location. No playing time, no clock time, no device identifier.
One limitation, stated plainly: your call sign links your own entries to one another — that is intended, because it is the only way you recognise yourself in the list. It does not link them to you as a person: it is generated at random in your browser, contains nothing about you, and is never connected to an account, an address or a device identifier. If you would rather not have that, get yourself a new call sign or do not enter at all.
What is stored
The server holds per entry: call sign, score, wave, difficulty and the date to the day.
Deliberately not the time of day: a figure accurate to the second would be a means of recognition — two entries at 23:47:12 and 23:52:04 visibly belong together. The day on its own links nothing.
Your IP address
Every server on the internet sees the IP address of the device calling it; that is technically unavoidable. This server does not store it, does not write it to any file and uses it for nothing — not even for rate limiting. The volume limit counts only how many submissions arrive per minute in total, without distinguishing who sent them.
The service runs on Cloudflare, Inc. As the technical operator, Cloudflare processes connection data including IP addresses in order to deliver the service and defend against attacks. We have no influence over this; details are in Cloudflare's own privacy policy.
Legal basis
Article 6(1)(a) GDPR — your consent. It is voluntary; without it the game works in full and you are at no disadvantage. You can withdraw it at any time: in the menu under Global leaderboard → End connection, or by clearing the tick box in the settings. After that the extension cannot reach the server technically.
Deletion
When you submit an entry you receive a deletion code, which is stored exclusively in your browser. Delete my entry removes your entry immediately and permanently.
This code is the only link between you and your entry — without it not even the operator can say which entry belongs to whom. That is by design, and it is the reason there is no account. If you lose the code (by clearing your browser data, for instance), the entry can no longer be removed specifically; it disappears once it drops out of the top 250.
Entries are not kept indefinitely in any case: the best 250 are stored, the best 10 are shown. Older and weaker entries are deleted automatically.
The call sign — and why there is no name field
You do not type a name. On your first entry the game assigns you a call sign — something like "Vega-Plasma-17" — and keeps it in this browser so that you recognise yourself in the list.
This is a privacy decision, not a convenience: a free text field in a public list is an invitation to enter a real name, a phone number or an address. What cannot be typed cannot be entered. For the same reason insults are impossible: the call sign is built from fixed word lists (star names, Greek letters, terms from physics and spaceflight), 3,008,000 combinations, and every word pairing has been checked automatically.
The call sign is not an identity document. It is generated in your browser, not issued by the server, and the server cannot assign it to any person. If you want to be rid of it, one click gets you a new one — and the link to your previous entries is cut.
Anyone who removes the extension or clears their browser data loses the call sign; a new one is created with the next entry.
CHILDREN
The game is suitable for all ages and collects no data from which an age could be derived. The leaderboard remains voluntary for children too. Because there is no input field, a child cannot reveal anything about themselves here either — that was one of the reasons for assigning the name rather than having it typed in.
CHANGES
Material changes to this policy appear with a new version of the extension and are noted in the change log.
CONTACT
Through the page on which this extension is offered.