Privacy policy

Version 1.0 · Effective 2026-10-05

This policy covers Battle Barge, a tabletop battle and campaign tracker.

Contact

Hammer & Pixels LLC, Connecticut, United States, operates Battle Barge. Postal address: 672 Queen Street #1032, Southington, CT 06489, USA. Contact hello@hammerandpixels.com or +1 203-204-3111 for privacy, support or complaints.

Information we collect

Browser storage supports guest play and preferences. Signed-in records and uploaded media may also be stored on our servers. Clearing local storage does not erase those server copies.

Why we use it

We use necessary account and service data to provide requested features under our contract. Our legitimate interests support proportionate security, abuse prevention, reliability, support and dispute handling. Optional analytics or marketing requires consent. We keep or disclose records where a specific applicable law requires it. You may leave optional profile fields blank and use available guest features without an account; account-only features need account details.

Sharing

Battle and campaign participants see records shared with their activity. Friends, invited players and event organisers receive the details needed for those features. Shared photos use access-controlled links. Anyone signed in can report a public mission or map; reports, with the reporter's account number, go to our team channel, and we may remove content that is illegal, infringing or abusive. Bug reports go to the same channel with your account number, and to our team inbox with your email so we can reply.

Providers handling hosting, databases, file storage, authentication, service email and optional analytics receive information needed for those functions. Subscriptions are sold through our shared Hammer & Pixels account service and its payment processor; this app never receives card details. Provider locations and transfer safeguards appear below. We may disclose necessary information for lawful requests, rights protection or a business transfer with appropriate safeguards. Shared sign-in does not make every app’s private content available across the service. We do not sell personal information, use it for targeted advertising or use profiling to make decisions with legal or similarly significant effects.

Analytics and device storage

Visit counting. Unless your browser sends Global Privacy Control or Do Not Track, we count visits without cookies or other storage on your device and without identifying you: our analytics provider receives page views, device and browser details and your IP address, and combines IP address and browser details with a value that changes every day to count unique daily visitors. That value cannot link your visits across days, and we do not connect it to your account.

Optional analytics. If you choose Allow analytics, our analytics provider also receives usage events, a random browser identifier stored on your device and, when signed in, your shared account identifier. This can connect usage across Hammer & Pixels apps where you separately opt in. We do not deliberately send names or email addresses. This data is not anonymous.

Declining does not affect access. Use Analytics choices to withdraw permission. Choices apply to this site and device, expire after 180 days and respect Global Privacy Control and Do Not Track. If you allow analytics, we also record how you use the app, such as pages, taps and scrolling, to find and fix problems; anything you type is hidden. We do not use automatic click tracking. Withdrawal stops future collection; request deletion separately for information already collected.

Sign-in cookies expire after one hour (access) or 30 days (refresh and login indication), unless renewed. The game-choice cookie lasts one year. Local preferences, cached work and guest access keys have no automatic expiry; clearing them can remove guest access without deleting server work. Temporary campaign-link hints use session storage. Privacy choices are stored locally; analytics permission expires after 180 days.

Retention and deletion

Private records and uploads stay while needed for your account, then are erased on a valid request. Shared battle history may remain where needed to protect other participants’ rights, with your identifiers and personal text removed where possible. Remaining identifiable content is still personal data.

Security and hosting logs, including sign-in history: 30 days. Support messages and attachments: 90 days after the request is resolved. Analytics events: 90 days. Backups: 30 days; deletion instructions are reapplied before restored data returns to ordinary use. Limited records may remain for a legal obligation or justified dispute. Deleting this app’s data differs from closing your shared Hammer & Pixels account. We coordinate valid requests with connected apps and providers, including the analytics provider where applicable.

International processing

We operate in the United States, and our providers process Battle Barge's data there: hosting and databases (US East), photo and backup storage, service email, optional analytics and our team chat channel for reports. Sign-in goes through our shared Hammer & Pixels account service, which has its own privacy policy. For transfers governed by EU or UK law, we rely on the provider's certification under the EU-U.S. Data Privacy Framework and its UK Extension, or on the European Commission's standard contractual clauses and the UK addendum in our data processing agreements. Contact us for information or a copy of the relevant safeguards. Using the service does not itself authorise transfers.

Your rights

Email hello@hammerandpixels.com to request access, correction, deletion, restriction or a portable copy, or exercise applicable opt-out rights. Identify the app and account or guest records; do not send passwords or recovery codes. We verify identity proportionately, protect other people’s information and accept authorised agents where required.

EU/EEA users may object to legitimate-interest processing, withdraw consent without affecting prior lawful processing and complain to their supervisory authority. We ordinarily respond within one month and explain permitted extensions within that period. Portability and erasure are subject to their legal conditions and exceptions.

Where US state laws apply, rights can include access, correction, deletion, portability, recipient information and opt-outs for sale, targeted advertising or qualifying profiling; California users may also limit qualifying sensitive-data uses. We do not discriminate for exercising rights. Covered US requests generally receive a response within 45 days, or sooner where required. We explain any permitted extension. Appeal a denial through the same email using your request reference; we explain applicable deadlines and regulator complaint options.

Age, security and changes

Accounts are for people aged 13 or older, subject to local rules on legal capacity. We do not ask your age. If you believe an account belongs to a child under 13, contact us: we put it on hold, review the report promptly and, if it does, close the account and delete its data across Hammer & Pixels apps. We use access controls, secure transport and proportionate security measures; no service can promise perfect security.

We date policy updates and notify you of material changes before materially different processing. New consent is obtained where required; continued use alone is not consent.