Privacy Policy

This Privacy Policy explains how Locwars collects, uses, shares, stores, and protects information when you use the Locwars game workspace, authentication flow, leaderboards, public profiles, match runner, replay system, and related services.

Locwars is a programmable strategy game. The service stores information needed to authenticate players, run submitted bot code, preserve deterministic match artifacts, operate competitive leaderboards, prevent abuse, and debug the product.

We collect the following categories of information:

• Account information: GitHub account identifier, email address, GitHub profile name, GitHub avatar URL, chosen Locwars display name, chosen public avatar setting, account status, admin status, and legal acceptance records.
• Authentication and session information: session tokens, session creation and expiration times, IP address where available, user agent where available, and sign-in metadata.
• Gameplay and workspace information: bot drafts, bot revisions, draft titles, submitted source code, match jobs, match specs, challenge identifiers, seeds, run packages, deterministic outcomes, replay artifacts, trace artifacts, logs, diagnostics, and leaderboard entries.
• Technical and security information: request metadata, rate-limit signals, submission origin signals, error reports, build/runtime diagnostics, abuse-detection records, and infrastructure logs.
• Communications: messages you send to support, privacy, security, or moderation contacts.

Locwars uses GitHub OAuth for sign-in. When you authorize Locwars, GitHub may show you the information requested by the OAuth app. Locwars currently requests access needed to identify your GitHub account and email address. We use GitHub data to create or update your Locwars account, authenticate sessions, and prefill your first-login profile confirmation.

Your GitHub real name is not automatically treated as your permanent public Locwars identity after you complete onboarding. You choose the display name and avatar setting that may appear publicly in Locwars.

We use information to:

• authenticate accounts and maintain sessions;
• let you save drafts, run bot submissions, view results, and inspect replays;
• compile, execute, sandbox, debug, and secure bot code;
• calculate scores, rank leaderboard entries, and show public player profiles;
• detect, prevent, investigate, and respond to abuse, cheating, attacks, and errors;
• operate, monitor, maintain, improve, and develop Locwars;
• communicate about support, privacy, security, moderation, or product issues;
• comply with legal obligations and enforce our terms and policies.

Some Locwars information is public or may become public through gameplay features. This can include your chosen display name, chosen avatar, player profile, leaderboard rank, score, challenge performance, match outcomes, replay-derived summaries, milestones, and other competitive activity.

Your email address, GitHub provider identifier, session tokens, private support messages, and internal admin fields are not intended to be public. Bot source code is not displayed publicly by default, but it may be stored, processed, and reviewed by authorized operators for operation, debugging, security, abuse prevention, and support.

We may share information in these limited circumstances:

• Public game surfaces: public profile, leaderboard, replay, and milestone data may be shown to other players.
• Service providers: hosting, database, observability, authentication, storage, email, security, and infrastructure providers may process information for Locwars.
• Safety and legal reasons: we may disclose information to investigate abuse, protect Locwars or others, comply with law, respond to lawful requests, or enforce our terms.
• Business transfers: information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy or a successor policy.

We do not sell personal information for money.

Bot code and match artifacts can contain strategic choices, logs, error messages, and other information you include in submissions. Avoid placing secrets, credentials, personal data, private URLs, API keys, or confidential third-party code in bot drafts or logs.

We may retain bot source, compiled artifacts, traces, replays, and run packages to preserve deterministic match history, debug gameplay, investigate abuse, reproduce issues, and maintain leaderboard integrity.

We keep information for as long as needed to provide Locwars, preserve account and match history, support leaderboards and replays, comply with legal obligations, resolve disputes, enforce policies, and maintain security. Some records, such as leaderboard entries, replay references, and anonymized historical match data, may be kept after account deletion to preserve competitive and technical integrity.

We may delete, aggregate, or anonymize records when they are no longer needed or when we change retention practices.

You can update your public display name from account settings. You can also request account deletion from account settings. Deletion disables the account, revokes sessions, and replaces your public display name with an anonymous label.

Because Locwars is a competitive and deterministic game, deletion does not necessarily remove every historical match, replay, trace, job, or leaderboard record. Where records are retained, we aim to separate them from your direct public identity where practical while preserving integrity of existing game history.

We use administrative, technical, and operational safeguards designed to protect personal information and the bot-running environment. These safeguards may include access controls, sandboxing, rate limits, logging, monitoring, and separation between authentication data and public profile data.

No online service can guarantee perfect security. You should keep your GitHub account secure, avoid submitting secrets in bot code, and report suspected vulnerabilities to security@locwars.com.

Locwars is not directed to children under 13 and must not be used by anyone under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Locwars, contact privacy@locwars.com so we can review and take appropriate action.

Locwars may process and store information in countries other than where you live. Those countries may have different data-protection laws. By using Locwars, you understand that information may be processed where Locwars and its providers operate.

Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal information. To make a privacy request, contact privacy@locwars.com. We may need to verify your account before acting on a request.

Some requests may be limited where retention is necessary for security, legal compliance, dispute resolution, anti-abuse investigations, leaderboard integrity, or technical operation of the service.

We may update this Privacy Policy as Locwars changes. If an update materially changes how we handle information, we may require you to accept the new version before continuing to use the service.

Privacy questions and requests can be sent to privacy@locwars.com. Security reports can be sent to security@locwars.com.