PrimeWarfare

Standing orders / Privacy Policy

Privacy Policy

What we know about you, and what we do with it. As little as we need to run the game. Last updated 12 October 2026.

Form PW-0 / PrivacyInprovo Software, the Netherlands

The privacy policy

1. Who is responsible

PrimeWarfare (this website, the game and its apps) is run by Inprovo Software in the Netherlands, the controller of your personal data under the General Data Protection Regulation (GDPR). Contact details are at the end of this page.

2. The apps

The PrimeWarfare apps for Android and iOS play skirmishes against AI commanders on your device with no sign-in, and they have no advertising and no analytics. Your settings and saved games stay on the device and are deleted when you remove the app. The app loads its fonts from Google Fonts, which sees your IP address like for any web request.

For online play the app talks to this website. On first launch it creates a guest commander for you: an account with a generated name, without an email address or password. The app keeps a random install id and a sign-in token for it on the device. You can add an email address and a password to keep the commander and use it on this website (it keeps its name, rating and history), or log in to an existing account instead. Online play in the app stores the same as on the website (section 3).

3. What we store when you enlist

  • Account: your commander name (public), your email address and your password (stored only as a secure hash), whether your email is confirmed, your emblem, rank and rating, and your game and notification preferences. A guest commander from the app has no email address or password until you add them.
  • The app: a sign-in token per device (with the device name and platform you use, and when it was last used), and for guest commanders the install id and the IP address they were created from, stored only as one-way keyed hashes. We use the hashes to limit how many guest commanders one device or network can create and to keep matchmaking fair, never to identify you.
  • Games: online matches you play (map, seats, teams, results, scores) and the skirmishes against AI commanders you play on the website (setup, result, length and match statistics). Your commander name, rank and results can be seen by other players on profiles, the leaderboard and in lobbies.
  • Friends and invitations: the friend requests and match invitations you send and receive.
  • Technical data: a session cookie that keeps you logged in, your IP address and browser user agent with that session, when you were last active, and short-lived counters per IP address or account against abuse (login attempts, request limits).
  • Where you came from: if you arrive through a link with campaign tags (utm_source, utm_medium, utm_campaign in the address, for example from a post or a newsletter), your session remembers those tags and we store them with your account when you enlist on the website. We only count how many commanders each link brings; it is never shared and no tracking cookie or third party is involved.

We use this to give you an account, run matches and lobbies, keep ratings and records, send the emails you need or ask for, and keep the game safe and working. The legal basis is the performance of our agreement with you (the Terms of Service) and our legitimate interest in security and fixing errors.

4. Cookies

We only use the cookies the site needs to work: a session cookie, a security token against cross-site request forgery and, if you tick "remember me", a cookie that keeps you logged in. The campaign tags of the link you arrived with (section 3) are kept with that session on our server; there is no separate cookie for them. No advertising or tracking cookies, no analytics. Your graphics, sound and touch settings in the game are kept in your browser's local storage.

5. Who helps us

  • Postmark (ActiveCampaign) delivers our emails: account confirmation, password resets, security notices and the match notifications you switched on. It processes your email address and the message.
  • Flare (Spatie, Belgium) receives error reports from the website and from the game played on this website: the error, the page address, your browser and, for errors on the server, the request. It helps us find and fix bugs.
  • Google Fonts serves the typefaces of the site and the game; Google sees your IP address with that request.
  • Our hosting provider runs the servers, the database and the real-time relay (Laravel Reverb) that carries the commands of online matches between the players.

They only process data on our behalf. Where a provider is outside the European Economic Area, the transfer is covered by the EU standard contractual clauses or an adequacy decision. We do not sell your data and do not share it for advertising.

6. How long we keep it

Your account data and game history stay as long as your account exists. Sessions expire after a period of inactivity, password reset links after an hour, abuse counters within minutes to a day. The app's sign-in tokens are deleted when you log out, change or reset your password or delete the account, and after a year without use. Abandoned guest commanders are deleted automatically: a week after they lost their sign-in on every device, after 30 days without activity if they never finished a match or a skirmish, and after 180 days without activity in any case. Error reports are kept by Flare for a limited period and then deleted. When you delete your account, your account, preferences, sign-in tokens, friends, invitations and skirmish records are removed at once; the results of finished online matches stay for your opponents, with your seat shown as "Deleted commander" and no longer linked to you. Copies in server logs and backups disappear when those expire.

7. Your rights and deleting your account

You can see and change your details under Settings, and delete your account there yourself at any time (Settings, Delete account), or in the app (Profile, Delete account); we confirm it by email when the account has an address. How to delete your account has the details. You also have the right to access, correct, delete, restrict or port your data and to object to processing: email us and we answer within a month. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Children

PrimeWarfare is not aimed at children under 13 and we do not knowingly let them create an account. If you believe a child under 13 has an account, contact us and we will delete it.

9. Changes

We may update this policy when the game changes; the date at the top shows the latest version. Important changes are announced on the site.

10. Contact

Inprovo Software
Dorpsstraat 11
4284 EE Rijswijk (NB)
the Netherlands

Email: command@primewarfare.com
Chamber of Commerce (KvK): 62352636