Privacy Policy
Last updated: 26 September 2026
Sancak is a browser strategy game. This page explains, in plain words, what we collect when you play, why, where it is kept and what you can do about it. We collect as little as the game needs.
Who we are
Sancak is an independent game project (sancak.lol). For any privacy question or request, write to privacy@sancak.lol.
Signing in with Google
You sign in with Google. Google sends the game a signed sign-in token that contains your Google account ID, email address, name and profile picture.
Our server checks that token (including that your email address is verified) and then keeps only a one-way, scrambled form of your Google account ID, so it can recognise you next time. We do not store your email address, your name or your profile picture, and we do not use them for anything else. Your name in the game is the nickname you choose yourself.
Sancak's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only ask Google for basic sign-in; we do not access your Gmail, Drive, contacts or any other Google data.
What we store
To run the game we store, linked to your in-game account:
- your profile: nickname, the people you chose, your village name, your hero and your language setting;
- your village and gameplay: buildings, resources, army, marches, battles, quests, rewards and similar game records;
- chat messages you send (General, People and Clan channels), reports you make and any moderation records (for example a mute);
- clan membership and your role in a clan;
- your National Points (NP) and ranking history, which appear on public leaderboards;
- a login session (see Cookies below).
Other players can see what the game shows them: your nickname, people, clan, leaderboard position, your home on the realm map and your chat messages in the channels you write to.
Security and technical logs
Like any website, the server sees your IP address and basic request details. We use them only to keep the game running and safe (for example, rate limits against abuse). Our own access log stores a scrambled form of the IP address, not the address itself, together with the requested page, status and timing; it never stores cookies or tokens. The web server keeps short technical logs that are rotated and deleted within about two weeks.
Where your data is kept
The game server and its database run at Hetzner Online GmbH in Germany (EU).
Traffic passes through Cloudflare, which protects the site and delivers its files quickly. Cloudflare processes connection data such as your IP address and may do so in other countries.
Google handles the sign-in step itself; Google's own privacy policy applies to your Google account.
How we use it — and what we never do
We use your data only to provide the game: to keep your village and progress, show you to other players, run chat, clans and leaderboards, prevent cheating and abuse, and fix problems.
- No ads.
- We never sell your data or share it for advertising.
- No profiling beyond the game itself.
Under EU/UK data protection law our reasons are: providing the game you asked for (contract), and keeping it secure and fair (legitimate interests).
How long we keep it
We keep your account data for as long as your account exists.
Chat keeps only the most recent 200 messages in each channel; older messages are deleted automatically.
When you delete your account, your profile, village and game records are deleted and your nickname and home become free. Two kinds of records stay in anonymous form because they are part of other players’ games: chat messages you sent (the text stays, with your name removed) and shared results such as races or world-boss hits (shown as “—”). A later sign-in with the same Google account starts a brand-new account.
Backup copies are replaced on a rolling basis (normally within 14 days) and are used only to restore the game after a failure.
Your choices and rights
- Download your data: Settings › Account › Download my data gives you a file with your profile, village, game records, clan, your own chat messages and notifications.
- Delete your account: Settings › Account › Delete account. For safety you must have signed in within the last 10 minutes and type your nickname to confirm.
- Log out on this device, or Log out everywhere: Settings › Account.
- For anything else — correcting data, questions, or objecting to how we use it — write to privacy@sancak.lol.
If you live in the EU or UK you may also complain to your local data protection authority.
Children
You must be at least 13 years old to play (or older, if the law where you live requires it for this kind of service). If you believe a younger child has created an account, contact us and we will delete it.
Changes
If we change this policy we will update this page and the date above. If a change is important, we will also tell players in the game.