Darkmass.io Privacy Policy

Last updated: 22 June 2026

Darkmass.io ("we", "us", "our") provides a free, browser-based multiplayer game. This policy explains the limited data we handle when you play, and your rights. You can contact us at contact@darkmass.io. For UK and EU data-protection law, the operator of Darkmass.io is the data controller and can be reached at that address.

Overview. There are no accounts. We do not ask for your name, email, or any sign-up, we do not run our own analytics or tracking, we set no first-party cookies, and we keep no database of players. Some preferences are saved locally in your own browser. Game data on our side exists only in memory while you play and is deleted when you disconnect.

1. What we process, and why

• The display name and colour you choose. These are sent to our server when you join and shown on the in-game leaderboard and kill feed. If a name is filtered, other players see an automatically generated alias instead. This is held in memory for your session only. Our lawful basis is our legitimate interest in operating the game you have chosen to play. Please do not enter real personal details as a name.
• Gameplay inputs, such as movement and ability presses, are processed only to run the game and are not stored.
• Your IP address is seen automatically by our server and its proxy when you connect. We use it to deliver the game and for security, abuse prevention, and rate limiting. It may appear briefly in server access logs, which are short-lived and rotated. We keep no long-term searchable record and no database. Our lawful basis is our legitimate interest in security and abuse prevention.
• Your preferences, saved on your own device. To remember your choices between visits, we store the following in your browser's local storage: your last-used display name and colour, your sound settings (muted state and volume), your chosen server region, and two flags recording whether you have used the gravity well or dash (used only to stop showing the beginner hint once you know the controls). This stays on your device, is not stored in cookies, and is not transmitted to us, other than your name and colour which are sent when you join a game as described above. You can clear it at any time through your browser. This is functional and does not require consent.

2. Cookies and local storage

We set no first-party cookies. We use a small number of functional local-storage values on your device to remember your preferences (your name, colour, sound settings, region, and the beginner-hint flags). Third parties may set cookies, as described in section 3. Cloudflare sets strictly necessary security cookies (named "__cf_bm", and "cf_clearance" if you are challenged) on darkmass.io and www.darkmass.io. Google AdSense sets advertising cookies only if ads are enabled and only after you give consent.

3. Third parties we rely on

• Cloudflare provides security, denial-of-service protection, and proxying for darkmass.io and www.darkmass.io. Our regional subdomains, eu.darkmass.io and us.darkmass.io, are served directly and are not routed through Cloudflare. Cloudflare processes your IP address and connection metadata as our processor. See Cloudflare's privacy policy for details.
• Hetzner is our hosting provider, with data centres in the EU and US, acting as our processor.
• Google AdSense, when advertising is enabled, serves ads and may set advertising and measurement cookies and process data, including your IP address and ad interactions, as described in Google's policies. In the UK, EEA, and Switzerland you will first see a consent message, run on Google's IAB Transparency and Consent Framework platform, where you can accept, refuse, or choose non-personalised ads, and you can change your choice at any time through that message. Ads, where shown, appear only on the menu and end-of-game screens, never over live gameplay.

4. Retention

Game state, including your name, colour, and position, exists only in server memory during your session and is deleted when you disconnect. Access logs that contain IP addresses are short-lived and rotated. We operate no player database. Preferences saved in your browser remain on your device until you clear them.

5. International transfers

If you connect to our US region, or through Cloudflare or Google, your data may be processed outside the UK and EEA under appropriate safeguards, such as Standard Contractual Clauses and the UK International Data Transfer Addendum, operated by those providers.

6. Your rights

Under UK and EU data-protection law you have rights of access, rectification, erasure, restriction, objection, and portability. Because we hold essentially no persistent personal data linked to you, most requests are met simply by disconnecting, which erases your session data, and by clearing your browser storage. For anything else, or to object to our IP-based security processing, email contact@darkmass.io. You may also complain to the UK Information Commissioner's Office at ico.org.uk. For data held by Cloudflare or Google, please contact them directly.

7. Children

Darkmass.io is not directed at children under 13, and any ads shown are not personalised to children. If you are below the age of data consent in your country, please do not enter a name that identifies you.

8. Changes

We may update this policy. The date above shows the current version.

9. Contact

contact@darkmass.io