Privacy
What StickFrag knows about you, why, and for how long.
Last updated 2 October 2026
The short version
- No account, no email, no real name. You pick a nickname, and that is all we ask.
- No advertising trackers, no analytics cookies, no profiling, and we never sell data.
- Your browser keeps a random code so you keep your level. Our server stores only a scrambled (hashed) version of it, next to your XP. Unused profiles are deleted after 12 months.
- Our server needs your network (IP) address to send you the game. It does not write the address to its logs or databases.
Who is responsible
The controller for the data on this site and in the game is the operator named in the imprint. Questions and requests go to [email protected].
What we process, and why
| Data | Why | How long |
|---|---|---|
| Your network (IP) address | To connect you to a match and send you the game. To limit how many players and joins one network can start, so one person cannot flood the server. | In the server's memory while you are connected, and for a few minutes after a join. Never written to logs or databases. |
| Hashed network address (a salted, one-way code made from your IP address) | Stored with player reports and anti-cheat records, so we can see repeated abuse from one network without storing the address itself. | With a report: 90 days. An anti-cheat flag on a network ends after 24 hours. |
| Nickname | Shown to the other players in your match. Kept as the "last nickname" of your progress profile, and in reports about you, so moderators know who a report is about. | As long as the profile or report it belongs to (see below), and in server logs. |
| Progress profile: hashed browser code, XP, kills, deaths, matches played, last nickname, first and last play date | Your level and XP across visits. | Deleted 12 months after your last match. |
| Match statistics and anti-cheat points linked to the hashed browser code | To find cheaters. A player whose numbers strongly suggest cheating can be matched apart from other players for a while. A person looks at reports before any ban. | Points halve every 14 days without new signs of cheating. Reports: 90 days. |
| Player reports you send: the reason, the players involved (hashed codes and nickname of the reported player) and match statistics | To review reports and act on them, as the EU Digital Services Act requires. | 90 days, longer only while a report supports an active ban. |
| Feedback you send: the text, its type, your nickname and level, the page, your browser type and the hashed browser code | To read your idea or bug report. Good ideas may appear on the public ideas board. Do not put personal details in the text. | As long as we need it to act on it. Ask us and we delete a message. |
| Play history: hashed browser code, nickname, map, match type, and when you joined and left a match | To count players and play time, and to plan how many servers the game needs. | 90 days. |
| Server logs: events such as joins, matches, reports and errors, with nicknames and in-match numbers. While you play, your browser also sends its frame rate, ping, graphics card name, window size and any game script errors | To keep the game running, fix bugs and look into abuse. | 14 days; frame rate and graphics reports 2 days. Logs never contain IP addresses. |
Legal basis: our legitimate interest in running a fair, safe and working game (GDPR article 6(1)(f)), and for reports our duties under the Digital Services Act (article 6(1)(c)). We make no automated decisions with legal or similarly significant effects on you.
What your browser stores
We set no cookies. The game keeps these values in your browser's local storage, only so it can do what you asked for. None is used for advertising or tracking.
| Name | What it is |
|---|---|
name | The nickname you typed, so you do not type it again. |
profileToken | The random code that keeps your level. Our server stores only its hash. |
profileXp | Your XP, so the menu shows your level before you join. |
headband, skin | The colours you picked. |
map | The map you picked. |
settings | Mouse sensitivity, field of view and volume. |
To delete them, clear this site's data in your browser settings. That also resets your level; the old profile on our server can then no longer be linked to you, and it is deleted after 12 months.
Who else handles data for us
- Cloudflare, Inc. (USA) delivers this site and protects the game server from attacks. All traffic passes through Cloudflare, which processes your IP address for us. Cloudflare may set a strictly necessary security cookie when it checks for bots. Transfers to the USA rely on the EU–US Data Privacy Framework and the EU standard contractual clauses.
- HostUp (hostup.se, Sweden) runs the server that hosts the game and its databases. The server is in Sweden, so this data stays in the EU.
Both act on our instructions under a data processing agreement. We share data with nobody else, except when the law requires it.
Children
Many of our players are young. We ask for no age, real name, email or photo. Please do not use your real name as your nickname. Offensive nicknames are blocked or renamed. A parent or guardian can ask us to delete a child's data at the address above.
Ads
Today the game shows no paid ads. If sponsors' art appears in the yard later, every player in a match sees the same art. There will be no ad targeting, no profiles and no ad trackers.
Your rights
You can ask us to show, correct or delete your data, to limit how we use it, or to hand it to you, and you can object to how we use it. Email us. We have no account, email address or real name for you, so tell us your nickname and roughly when you played; if we need your browser code to find your profile, we explain how to copy it. We answer within one month.
You can also complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY, imy.se), or to the authority in your country.
Changes
When the game starts to use data in a new way, we update this page first and change the date at the top.