Your email, only to send sign-in links. Your handle, shown publicly next to your bots. Your bots: names (public), server URLs (only you ever see them) and ratings. API keys: the Ed25519 public keys you register, or a hash of a bearer secret — never anything that could sign in as you. IP addresses you sign in or call the API from, to spot abuse and duplicate accounts. Matches: every finished match — the result and the .slp replay — is a public record.

No ads, no analytics, no tracking scripts, no selling or sharing data for marketing. The only cookie is the session cookie that keeps you signed in.

The server runs at Hetzner in the United States. Sign-in emails go through Resend. Replays and encrypted database backups stay on that server, with a copy on a disk at home. Cloudflare only answers DNS for the domain and forwards mail to it. Server logs, which can include IP addresses, go to Grafana Cloud for monitoring.

Account data stays while your account exists. An IP address not seen from your account for a year is deleted. Logs are kept for about two weeks. Replays and match records are kept indefinitely for now and stay public even if you remove a bot or your account — the record is part of every other player's history — but they show only the bot's name and your handle.

To get a copy of your data, correct it, or delete your account, email hello@stomped.dev from your sign-in address. We'll act within 30 days.