Privacy Policy

Last updated June 2026

What we collect

Account details: your chosen username, your email address (used only to confirm your account and for account matters) and a securely hashed password. We never store your password in readable form and we never ask for your real name.
Game records: wins and losses, saved decks, and a history of finished battles (date, mode, factions, deck names, players and result). Recent battles are shown publicly in the Battle Report and on player profiles.
Profile: the avatar you pick from the gallery or upload, your achievements and your foes list.
Chat: messages you post in the general lobby chat (only the latest 100 are kept) and in-battle chat (kept with that battle).
Presence: a random browser ID, your call-sign and whether you are in the lobby, in a battle or watching, so other pilots can see who is online. This is dropped from the online list after about a minute of inactivity.
Local settings stored in your browser: sign-in token, music and sound volume, screen shake and similar preferences.
Technical data: like any website, our hosting provider may briefly log your IP address and browser type for security and reliability. The game itself does not store IP addresses in player records.

Account, game and chat data is stored in our database on our hosting provider's servers. Uploaded avatars are kept in our cloud file storage and are only served through the game.
Passwords are hashed with bcrypt. Sign-in uses a token that expires after 30 days.

Other players can see your username, avatar, record, achievements, recent battles and the decks you used, and anything you write in chat.
Your foes list is private to you.
We do not sell your data and we do not use advertising or analytics trackers. Our hosting and storage providers process data only to run the game.

You can play vs the AI as a guest without creating an account.
You can change your avatar at any time and mark other players as foes to hide their chat.
You can delete your account yourself at any time: open your Profile and choose Delete account. This instantly erases your account, decks, avatar, achievements, chat messages and every battle you played.
To ask what we hold about you, or for help with deletion, contact us (see below).

Mech Slap is not directed at children under 13, and we do not knowingly collect data from them.

For privacy questions or data requests, contact the Mech Slap team at upTOP gaming: support@mech-slap.com.