PRIVACY
Last updated: 12 November 2026
WHAT OUTFLANKED KNOWS ABOUT YOU
- THE NAMES YOU TYPE: your player name, and the names you give a kingdom, a team, a war, a level or a bot. Other players see them, sometimes people you don't know, so use a nickname, not your real name.
- YOUR SCORES AND PROGRESS: scoreboards, your REALM island, your War Games turns.
- A RANDOM KEY THIS BROWSER MADE, so the game knows it is the same phone or computer. It is not your name and says nothing about who you are.
- AN EMAIL ADDRESS, ONLY IF A GROWN-UP MAKES AN ACCOUNT. We keep it scrambled, and use it to send sign-in links. Playing never needs one.
- YOUR INTERNET ADDRESS (a number for your connection), to make the game work and to stop spam. Our game server's log never writes it, or your name.
- REPORTS you send, or that are about you: kept for 12 months, so a real person can read them and keep people safe.
- NO phone number, age, address, school, location or photos of you. NO ads. NO tracking. NO chat.
- Want something deleted? Ask a grown-up to email us: [email protected]
WHO WE ARE
OUTFLANKED is a free game you play in your browser at outflanked.app. It is run by mewebe.com, in the United Kingdom. We decide how the information below is used (we are its "controller"). Contact us at [email protected].
WHAT WE COLLECT, WHY, AND WHO SEES IT
| What | Why | Who sees it |
|---|---|---|
| The name you type, or a made-up name the game suggests | To show who is who in a room, on scoreboards, in REALM and in War Games | Other players in the same room, world or war. In WORLD and public rooms only a made-up name is shown. In REALM, War Games, public challenges and shared levels: people you don't know |
| Other names you type: a kingdom or team name in REALM, a war's title, a level's name, a challenge title, a bot's name | To label the things you made | Other players who see those things. The game refuses some rude words |
| Scores, matches and progress (room scoreboards, REALM islands, armies and gold, War Games turns, Bot Arena ratings, challenge scores) | To run the game and keep your progress | Other players where the game shows it (for example a scoreboard or a season table) |
| Code you write for units or bots | To run your units and bots | Only you. Other players' copies are stripped of it |
| Maps you upload as a picture (War Games) | To be the battlefield of that war | The players in that war. We redraw the picture as plain pixels, which removes any hidden data in the file (such as camera or location details) |
| Room codes, game settings, and random codes that hold your seat | To run rooms and get you back into your seat after a reload or an update | People who have the code. Our server keeps only a scrambled copy (a "hash") of seat codes |
| A random key your browser makes the first time it opens the game | To recognise the same phone or computer: to keep your REALM island and your seats, to let a room's owner keep someone out, and to limit spam | Nobody else. Our server mostly keeps a scrambled version made with a secret only it knows |
| Accounts (optional): your email address, scrambled (we keep a one-way scramble and a hint like a***@g***.com, not the address itself), up to 5 player profiles with nicknames, gold and match stats, and sign-in sessions | So a family can keep gold, stats and progress across devices. Sign-in is by a link we email; there is no password | Nobody else. Accounts are meant to be made by a grown-up; children's profiles sit inside that account and have no email of their own |
| War Games turn emails (optional, signed-in players only): the email address you give for "your turn" notices, stored encrypted | To tell you it's your turn (at most 4 emails a day) | Nobody else. Turn off the notices or delete the war to remove it |
| Browser push notices (optional): the push address your browser gives us | To show "your turn" notices on your device | Your browser's push service (Google, Apple, Mozilla or Microsoft) carries the notice, encrypted |
| Gold purchases: the order, the pack, the amount and which account and profile it is for | To add the gold you paid for, and to keep the records the law asks for | Stripe, which takes the payment on its own page. We never see or store card details |
| Game statistics: which modes are played, how long, how fast the game runs, which buttons are pressed (no names, codes, internet addresses or device details beyond "phone", "tablet" or "computer") | To find what is fun, what is confusing and what is slow | Only us |
| Reports: the time, the room code, the reason button pressed, the name the reported person was shown under, and scrambled ids of the two browsers. No typed words, no internet address | To keep children safe and act on reports (the law asks us to) | The mewebe.com team. The police, CEOP or the National Crime Agency when we must |
| What we decided after a report: a browser kept out of every room, a made-up name given to a browser, an internet address kept out for at most a day (stored scrambled) | To act on reports and to tell the person why | The mewebe.com team |
| Your internet address | To connect you, and to limit how many requests one address can make (this stops spam and attacks) | Our game server while you are connected (it never writes your address to its log); our web server's log; Cloudflare |
| Emails you send us | To answer you and to keep people safe | The mewebe.com team |
We do not ask for or collect: a phone number, age or birthday, home address, school, location, contacts, photos of you, camera or microphone (the TV's QR code is scanned by your phone's own camera app), or card details. There are no ads, no analytics services and no trackers. The game has no chat and no private messages.
WHEN YOU SEND AN INVITE
INVITE A FRIEND uses your own phone or computer to send a link with the app you choose (for example WhatsApp or Messages). We don't see who you send it to. Apps may load our page to draw a preview; the preview shows no names. Anyone with a room owner's invite link can walk in that day, so only send it to people you know in real life. Someone who only has the room code has to knock and wait for the owner to let them in.
WHAT YOUR BROWSER STORES
The game keeps things in your browser's own storage so it works and remembers your choices: your name, settings and controls, the random key described above, your REALM key, seat codes, the last room you were in, your War Games seats, levels, maps and bot code you made, saved replays (your gallery), hats and looks, and which tips you have seen. They stay on your device until you clear this site's data.
Cookies: only if you sign in to an account, the site sets one cookie that keeps you signed in (for up to 180 days, or until you sign out). It is needed for the account to work and is not used for anything else. There are no advertising or tracking cookies.
HOW LONG WE KEEP THINGS
| What | How long |
|---|---|
| A room's scoreboard, settings and code | Deleted 30 days after the room was last used (7 days if it never finished a match). Checked every day |
| WORLD's scoreboard | Wiped every 90 days |
| An account and its profiles | Until you delete the account (in the game, or by emailing us). Deleting it removes the account at once and turns its REALM kingdoms into ruins |
| A REALM island | While the world runs. An island that was never built beyond its first building is removed after 30 days unused. Each world is reset from time to time, which clears its islands |
| A war in War Games, its map and its turns | Until the war's creator deletes it, or you ask us to |
| Shared replays | Only the newest 256 are kept; older ones are deleted. Player names in them are swapped for made-up names before they are stored |
| Challenges and shared levels | The newest 2,000 of each are kept |
| Bot Arena entries | Until you withdraw the bot |
| Gold purchase records | As long as tax and consumer law requires (normally 6 years). Unpaid orders are deleted after 3 days |
| Game statistics (no names) | 12 months |
| Reports in the game | 12 months. Longer only while a case is open or if the police ask us to keep them |
| What we decided after a report | 12 months after the decision ends |
| Copies in our server's backups | Deleted after 30 days |
| Our game server's log | Room codes, seat numbers and order numbers only, never names or internet addresses. Kept a few weeks |
| Our web server's log (internet address, time, page asked for, browser type) | About 5 weeks. Visits to the game's front page (where room links arrive) are not written to it at all |
| Emails, reports and complaints | 12 months after the case is closed. Longer only while a case is open or if the police ask us to keep them |
| Your internet address in our game server's memory | Only while you are connected |
WHO ELSE HANDLES DATA FOR US
- Hetzner Online GmbH (Germany) runs our server in its data centres in the European Union.
- Cloudflare, Inc. (USA) delivers and protects the site, so it sees internet addresses and requests. It also sends our emails (sign-in links and War Games turn notices), so it handles those email addresses. Information may go to the USA under the UK Extension to the EU-US Data Privacy Framework.
- Stripe takes payments for gold on its own checkout page. It handles your payment details under its own privacy policy; we receive only whether the payment worked.
- OpenRouter (USA) runs the AI that can make new levels. It receives only the difficulty, the number of players and a random number, never anything about you.
- Your browser's push service delivers "your turn" notices if you switch them on.
- Our email inbox at mewebe.com holds the emails you send us.
We don't sell anything about you and we don't share it with anyone else, except that we will give information to the police, CEOP or the National Crime Agency when we must, or to protect a child.
OUR LEGAL REASONS
We use the information above because it is needed to run the game and the account you asked for (a "contract"), to keep its scoreboards and to keep it secure (our "legitimate interests"; we have weighed them against children's interests, which is why we keep so little, for a short time). We keep purchase records and handle reports because the law requires us to. Turn emails and push notices are only sent if you switch them on (your "consent"), and you can switch them off at any time.
CHILDREN
OUTFLANKED is made for families, and children play it. We follow the UK's Children's Code: we collect as little as we can, private rooms are not listed anywhere, there are no ads and no chat. Accounts and purchases are for grown-ups. A parent or carer can make any request below for their child.
YOUR RIGHTS
You can ask to see what we hold about you, to correct it, to delete it, or to stop us using it. Email [email protected]. Tell us how to find it: your account's email address, or the room code (or WORLD), kingdom name or war, and your name exactly as it showed in the game. We won't ask for ID documents. We answer within one month. If you are not happy with our answer, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
OUTSIDE THE UK
The game can be played from anywhere. If you live in the European Union or elsewhere, you have the same rights described above: email us and we will help. Parents in the USA: children don't need to give us any contact details to play. The only thing a child gives us is the names they type, kept as described above, and you can ask us to delete them.
CHANGES
If we change what we collect, we update this page and the date at the top before the change goes live.