PRIVACY
UPEND (upend.gg) is a browser fighting game. This page says what data the game touches and why. Last updated 2026-08-17.
WHAT WE STORE
Your account: gamertag, email address, a salted password hash (never the password), timestamps. Your play: loadout, cosmetics, Cycles, ratings, match results and input recordings of ranked matches (used to verify results: they contain button presses, nothing personal). Verification and password-reset tokens are stored hashed and expire.
WHAT WE DON'T
No trackers, no analytics scripts, no ads, no third-party cookies, no sale of data. Nothing here measures what you do, only what breaks. The only cookie-like storage is a device key in your browser's localStorage that keeps you signed in.
CRASH REPORTS
When the game hits an error it sends us the error message, a stack trace, which build you were running and your browser's user-agent string. That report carries no account id, no gamertag and no session key: we get the fault, not the person. It is how a break on a browser we never tested reaches us at all. Reports are deleted after 30 days.
SECURITY DATA
Login, registration and reset attempts are rate-limited per IP address; those counters expire within days. Cloudflare, which serves the game, processes IP addresses to run its network.
WHERE IT LIVES
Servers run on Cloudflare (edge) and Neon (PostgreSQL, EU, Frankfurt). Verification and reset emails are sent through Cloudflare's email service as well. Each processes data on our behalf.
Your email exists so you can get back into your account: verification and password-reset mails only. No newsletters, no marketing.
DISCORD (OPTIONAL)
If you sign in with Discord or link a Discord account — always your choice — we store your Discord user id and display tag, plus encrypted OAuth tokens whose only jobs are publishing your rank numbers to Discord's Linked Roles and placing you in a color role on the official server. We request the minimum scopes (identify, role_connections.write) and never read your servers, friends or messages. Unlinking (Hub → ACCOUNT) deletes all of it immediately and removes the server color role. We share nothing else with Discord.
YOUR RIGHTS
You can change your email and password in-game (press ESC in the Hub, then ACCOUNT), and delete your account there too. Deletion removes your email, credentials and equipment and anonymises your name in past match records. For anything else (access, export, complaint), contact the operator below.
OPERATOR & CONTACT
Privacy requests (access, export, complaint): info@upend.gg. Anything else: support@upend.gg.
Operator identity to be published before public launch.