Privacy notice

Accounts & sign-in

Online play uses an account ID and a signing key stored in protected storage on your device. We store your username, progression, inventory, purchase records and match records to provide the game and preserve your progress. Other players can see your public name and match activity. Do not put private information in your username.

You can link Google, Apple, Game Center or Play Games to your account, to sign in to it on another phone. Linking keeps the same account. Accounts are not merged, and nothing is matched by email address. For a linked Google, Apple, Game Center or Play Games identity we keep a one-way digest of the identifier that provider gives us for you; we do not keep the identifier itself, your name or your picture. If you link Google, we also keep the email address of that Google account, encrypted: it shows you in the game which Google account is linked, and lets us reach you about your account or a purchase when you ask for help. It is never used to sign you in or to find an account, we send no marketing to it, and it is deleted when you remove Google from your account or delete the account. Apple, Game Center and Play Games give us no email address. The game has no passwords and sends no automatic email. Signing in on another phone signs the previous one out.

This notice describes the current account services. Online play and sign-in may be limited during testing.

Player reports

Reports are available for a completed match in which you participated. A report contains the match, reporter, reported player and reason: cheating, an abusive name or disruptive play. Reports are private and support investigation; a report does not automatically prove misconduct or trigger a ban.

When you email support, your email address, message and any attachments become part of the correspondence used to address your request. Send only relevant information. Do not include passwords, verification codes, device keys or payment card details.

How long data is kept

Account, progression, inventory and purchase records

Kept until account deletion, to provide your account and game entitlements.

Linked sign-in methods

Kept while linked to the account. Removing a method or deleting the account deletes them. If you used Sign in with Apple, the token that lets us withdraw the game’s authorization at Apple is kept sealed until then.

Match history and player reports

Expire from the game service 90 days after match completion. Account deletion also removes personal reports involving that account. Removal of expired records from underlying storage is asynchronous.

Access sessions and signed challenges

Valid for 15 minutes and 60 seconds respectively. Physical removal of expired records is asynchronous.

Database recovery backups

Encrypted backups can hold earlier data until they are removed. A restore must apply current deletions and revocations before reopening account access.

Security and disaster-recovery records

Minimal account and key revocation records and deletion receipts have no automatic expiry. They prevent revoked credentials or deleted accounts from returning after a restore; they are not anonymous records.

Shared match acknowledgements

Limited records may remain to prevent results being awarded twice and to preserve other participants’ completed match history.

Support correspondence and investigation notes

Emails and private support cases are handled separately from game accounts and have no automatic expiry. The game’s deletion flow does not erase them. Contact us about correspondence or case records you want reviewed or removed.

Account deletion

Choose DELETE ACCOUNT in the game’s account panel while signed in. An account with a linked sign-in method asks you to confirm one of them first. Deletion permanently removes account access, progression, inventory, purchases and linked sign-in methods. Cleanup waits for any running match and its results. Closing the game does not stop it.

A receipt saved on your device lets you check completion after restarting. Starting again does not restore deleted data. The backup and security exceptions above remain separate from the active account.

If you cannot open the game, see how to ask for deletion without it. We need to establish that the account is yours before acting on a request.

Providers & this website

Vultr hosts the account services and stored game data. Google and Apple take part only when you use their sign-in, Game Center or Play Games. Cloudflare delivers game assets and holds encrypted backups. This public website is hosted through OpenAI Sites on Cloudflare.

We have not added advertising, analytics scripts, account sign-in or support forms to these pages. Hosting providers receive the network information needed to deliver the pages, such as your IP address and requested URL. Cloudflare adds security checks that can run JavaScript and use a security cookie to distinguish browsers from automated traffic. See Cloudflare’s explanation of these checks. The game’s retention periods above do not describe the hosting providers’ own operational records.

Support links open your email application. Sending a message uses your email provider and the support mailbox provider.

Privacy questions

For questions about your data, access, correction or deletion, email hello@ishtms.com. Include only enough information to explain the request. Do not send passwords or device keys.

See support for sign-in, deletion and player-report guidance. The game also includes an offline DATA & SUPPORT notice in the account panel.