Legal
Privacy
Last updated 12 November 2026.
This is short because there is very little to describe. We do not sell data, we do not run advertising, and there are no third-party trackers or analytics scripts on this website.
The controller is Ironvail Holdings LLC, New York, USA, trading as IronVail Studios.
What we collect
If you make an account
- Your email address and a hashed password. We use the address to sign you in, to send a confirmation link, and to send a reset link if you ask for one. We do not send marketing email.
- Your game progress. Whatever the game needs to put you back where you were — levels, items, buildings, and so on.
The lawful basis is performance of a contract: without these, an account that follows you between devices cannot work.
If you send a report
The text you write, plus your browser's user-agent string, the version of the game, and your account ID if you are signed in. If you supply an email address in the form so we can reply, that is stored with the report. Reports can only be read by us; they are not visible to anyone else.
If you join a waitlist
Your email address, which product's waitlist you joined, and when. Nothing is stored until you click the link in the confirmation email; an address that is never confirmed is never added. We use it only to tell you about that product, and every email has a one-click unsubscribe that takes you off it. The lawful basis is your consent, which you can withdraw at any time.
Whether or not you have an account
The games record a row when a play session starts — a timestamp, the game version, the browser's user-agent, and your account ID if you have one — so we can tell roughly how many people are playing and whether they come back. There is no profile built from it and it is not linked to anything outside our own database.
What we deliberately do not collect
No advertising identifiers, no cross-site tracking, no analytics service, no cookie banner because we set no tracking cookies, and no payment information — there is nothing to buy, so there is nothing to charge.
What is kept on your device
Your sign-in is stored in your browser's local storage so you stay signed in between visits, and it is shared between our games because they are all served from this one address. Some games also keep a local copy of your save so they work offline. Clearing your browser's site data signs you out and removes the local copy; if you have an account, your progress is still on the account.
Who else sees it
Three processors:
- Supabase — the database and the account service that stores your email, your password hash and your saves.
- Vercel — serves this website and the games, and processes request logs including IP addresses as a normal part of that.
- Resend — sends the waitlist confirmation and product emails, and holds the waitlists.
Nobody else. We do not share, sell or rent your data, and we do not use it to train anything.
How long we keep it
Waitlist addresses are kept until you unsubscribe or ask us to delete them. Account data is kept until you ask us to delete it. Reports are kept while they are useful and cleared out periodically. Session rows are kept as aggregate counts rather than a permanent history.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it and your account with it. Email hello@ironvail.co from the address the account uses, or use the support form. There is no process to go through and no form to fill in; you will get a plain answer.
If you are in the UK or EU, you also have the right to complain to your data protection authority.
Children
Our games are not directed at children under 13 and we do not knowingly collect their data. If you believe a child under 13 has created an account, tell us and we will delete it.
International transfers
Our processors store data in the United States. If you are outside the US, using our games means your data is transferred there.
Changes
If this notice changes, the date at the top changes. A change that materially affects you will be noted in our news page.