Privacy policy

When you visit the showcase

The pages, artwork and fonts on downfallinstinct.com are served as static files. The mutation guide searches in your browser. The showcase sets no application cookies, creates no player profile and sends no analytics events.

The game and the showcase carry no advertising or advertising trackers. We do not sell personal information or email addresses, send newsletters or marketing emails, or track opens and clicks in email. There are no in-game purchases or payment details to collect.

Your account and browser

On play.downfallinstinct.com, Google Identity Services provides the sign-in button and verifies your Google account. The game checks the sign-in credential and stores Google’s account identifier, a separate internal player ID and the player name you choose. It does not store your Google password, email address, real name or profile photo.

The game issues its own signed, HttpOnly session cookie (downfall_session). It expires after 30 days and can be renewed when you use the game. Signing out removes the session from this browser. Signing out everywhere invalidates every copy of it, on all your devices.

Your browser may keep seat links, display preferences and cached game files so you can return to a match or use the installed web app. You can clear those items in your browser’s site-data settings. They are separate from the account stored by the game.

What playing records and who can see it

The game keeps your seats, invitations, match actions, results and the last few preset reactions under your player ID. These records let participants replay their finished games, let you see your personal statistics and help the developer improve the bots.

Other players can see your player name when they play or interact with you. The public ranked leaderboard shows player names, ratings, results and last-played dates. Your detailed personal statistics and your individual lobby are for your account.

Friendships and requests are kept so the two players can respond or remove the connection. The game saves your settings, your last sign-in and a recent activity time updated at most once an hour. The operator can see account activity and game counts, administer accounts and investigate problems. If an account is suspended, the reason and time of suspension are recorded.

Optional notifications

If you enable notifications on a device, the game stores that browser’s push endpoint and encryption keys. Your browser’s push service delivers events such as a turn or an invitation. This is optional and uses no email address. Turn off notifications in the game to remove that subscription, or use Sign out everywhere to remove the account’s registered devices.

Service providers and retention

Cloudflare handles traffic for the public domains. Microsoft Azure hosts the game and stores account and game records. Google handles sign-in, and your browser’s push provider handles notifications if you enable them. In delivering or protecting a request, a provider can process technical information such as an IP address, the time, the requested page and browser information. Providers may process information outside Québec.

Account and activity records stay until the account is deleted. Settings can be changed, friendships removed and notifications disabled earlier. The configured retention for the game host’s console logs is 30 days. Deleted blobs can remain recoverable in Azure storage for seven days. Finished match records are kept for replays, results and bot improvement.

Access, corrections and deletion

To delete your account, open Settings → Account on the game site and confirm with your player name. Your name is released, linked devices, friends, settings and account activity are removed, and seats in unfinished games become available to other players. Your public leaderboard entry disappears. Finished game records keep their internal player ID.

You can ask what information we hold about you, request a copy or correction, ask about deletion or withdrawing consent, or raise a privacy concern. Email the privacy contact below with your player name and the request. We may need to verify account ownership before disclosing or changing a record. Please do not send passwords or seat links.

If you email us, we receive your email address and the contents you send so we can answer and follow up on that request. Changes to this policy will be posted here with a new update date.

Privacy contact

The person responsible for privacy at Downfall Instinct handles questions, access requests, corrections and complaints at this address.