1. Information we handle
Account information includes your email address, username, display name, optional biography, password verifier, email-verification state, security settings, session records, and optional profile portrait. Gameplay information includes match configuration, outcome, score, duration, match record, and identifiers used to prevent duplicate submissions.
2. Why we use it
We use this information to create and secure accounts, authenticate requests, recover access, display profiles and leaderboards, operate matches, prevent abuse and duplicate records, diagnose failures, and improve reliability. AI-generated after-action text receives only the limited match summary submitted for that feature and must not affect gameplay.
3. Storage and visibility
Account and match records are stored in managed database services; profile portraits are stored in managed object storage. Your display name, username, portrait, and eligible campaign record may be public. Your email, password verifier, authenticator secret, recovery codes, and session tokens are not leaderboard data.
4. Cookies and local data
Secure, HTTP-only cookies maintain authenticated sessions. Device-local storage may remember presentation preferences, locally recorded sound effects, and a versioned command journal used to resume the current single-player operation. The local operation is verified before it is loaded. Brightwater does not need advertising cookies to run the game.
5. Retention and choices
We retain data while needed to provide the service, maintain integrity, resolve disputes, and meet legal or security obligations. You can edit profile information and security settings from your service record, and permanently delete your account there. Deletion removes your profile, active sessions, recovery credentials, match records, leaderboard entry, matchmaking tickets, and portrait. Limited security records expire on their normal short retention schedule.
6. Safety and changes
We apply technical and organizational safeguards, but no online service can guarantee absolute security. Material changes to this notice will be posted here with an updated effective date. For privacy or account questions, use the help center.