PRIVACY POLICY

Last updated: October 31, 2026

This Privacy Policy explains what information ONYX2D, made by Sindruid (“we,” “us”), collects when you play ONYX2D — the free online arena shooter based on Project Onyx — on the web at onyx2d.io, on Steam, in the Android and iOS apps, or through game sites that embed it (together, the “Service”), and how we use it.

1. INFORMATION WE COLLECT

• Account data. An anonymous account ID, created when you first play. If you choose to sign in or link an account: your email address and a password hash; your Google account ID and email; your Steam ID and Steam display name; or your Discord user ID and display name.
• Profile & progress. Player name, crystal and card cosmetics, level and XP, credits, unlocks, missions, ranked rating, and similar game progress.
• Friends & parties. Your friends list, friend requests and party invites. Party, team and direct chat messages are relayed live to the players they are meant for and are not stored as a chat history.
• Purchases. If you buy credits, the store you buy through (Stripe on the web, Steam, Google Play or the App Store) processes the payment. We receive the order or receipt ID, what you bought and when, so we can deliver it and handle refunds. We never receive or store your card or bank details.
• Gameplay & diagnostics. Match events (for example joins, results and weapons used), session length, frame rate, platform, and error or crash reports, linked to your account ID.
• Bug reports & feedback. The text you send through the in-game report form, plus your player ID, game build, map, mode and browser user agent.
• Technical data. IP address, browser or device info, and request logs, processed by our hosting providers to connect you to matches and for security, rate limiting, bot checks and reliability.
• Push token. In the Android and iOS apps, if you allow notifications, a device push token so we can tell you about friend and party activity.
• Local device data. Sign-in tokens and settings (volume, keybinds, preferences) stored in your browser’s or app’s local storage.

Your player name, cosmetics, level, online status (to friends) and ranked standing are visible to other players. We do not sell your personal information or share it for advertising.

2. HOW WE USE INFORMATION

• Provide, operate and secure the Service (accounts, matchmaking, saves, friends, anti-cheat and anti-abuse).
• Deliver purchases and handle refunds and fraud.
• Send transactional email about your account (email verification, password reset, and notices such as closed-beta access being approved). We do not send marketing email.
• Send push notifications you have allowed.
• Understand how the game is played, improve balance and reliability, and fix bugs.
• Enforce our Terms of Service.

3. SERVICE PROVIDERS

We share data with these providers only as needed to run the Service:

• Cloudflare — website hosting, CDN, account and game-data storage, email delivery, and the Turnstile bot check.
• Oracle Cloud — servers that host matches.
• Stripe — payments on the web.
• Valve (Steam) — Steam sign-in, ownership checks and Steam purchases.
• Google — optional Google sign-in, Google Play purchases, push notifications (Firebase Cloud Messaging), and web fonts.
• Apple — App Store purchases and notification delivery on iOS.
• Discord — optional Discord account linking.

Each provider’s own privacy policy applies to its processing. We do not use third-party advertising or cross-site tracking; our gameplay analytics are our own. Game sites that embed ONYX2D have their own privacy policies.

4. RETENTION

• Account, profile and progress data are kept while your account is active.
• Anonymous accounts that are never linked and stay idle for 90 days are deleted automatically.
• Detailed gameplay analytics are kept for up to 90 days.
• Purchase records are kept as long as needed for tax, refund and fraud obligations.
• Technical logs are kept only as long as needed for security and operations.

5. CHILDREN

The Service is not directed at children under 13. If you believe we have collected personal information from a child under 13, contact us and we will delete it.

6. YOUR CHOICES & RIGHTS

• Play anonymously without linking email, Google, Steam or Discord.
• Turn off push notifications in your device settings.
• Clear your browser or app storage to remove local sign-in tokens and settings.
• Ask us for a copy of your data, or to correct it.
• Delete your account and its data: see Delete your account.

Depending on where you live (for example the EU, UK or California), you may have more rights over your data, such as objecting to some uses or complaining to your local data protection authority. Contact us to use any of them.

7. SECURITY

We use reasonable technical measures (including encrypted connections and hashed passwords) to protect data. No method of transmission or storage is 100% secure.

8. INTERNATIONAL PROCESSING

The Service runs on Cloudflare’s global network and on game servers in several regions. Your information may be processed in countries other than where you live, including the United States.

9. CHANGES

We may update this Policy by posting a revised version on this page and changing the date above. Continued use after changes means you accept the updated Policy.

10. CONTACT

Privacy questions or data requests: [email protected].

RETURN TO GAME