Privacy Policy

The short version

The website sets no cookies, runs no analytics, and contains no advertising or tracking code. We do not build a profile of you and we do not sell or share personal information for advertising.

Redeeming a code sends your Player ID and the promo code to our game servers so the reward can be granted. Your IP address is used briefly to stop the page being abused, and then discarded. That is very close to the whole of it.

Who is responsible

BattleRise is developed and operated by Triumph Games Ltd, based in the United Kingdom, which is the controller of the personal information described here. If you want to exercise any of the rights set out below, or you have a question about this policy, the contact route is at the end.

What the website collects

Only what a page needs in order to work. Specifically, and only when you submit the redemption form:

• Your Player ID and the promo code you entered. These are sent to our game servers to look up your account and grant the reward. Inside our own systems they are stored only as a one-way cryptographic hash, never in readable form, and that hash is deleted about a minute later. It exists so that tapping submit twice does not grant the reward twice.
• Your IP address, used to count how many redemption attempts have come from one address so the page cannot be flooded or used to guess other players' Player IDs. It is held as a counter that expires automatically — within 10 minutes for the general limit, within an hour for the limit on failed lookups — and is not stored anywhere else, not attached to your account, and not used to identify you.
• A record that the attempt happened, for diagnosing faults. These records identify the attempt by a short fingerprint rather than by your Player ID or the promo code, so a fault can be traced without either being readable in our logs.

Browsing the rest of the site collects nothing beyond the ordinary technical information any web server receives in order to send you a page, such as your IP address and browser type, which our hosting provider records in its own logs.

Cookies and tracking

We set no cookies of our own, and the site stores nothing in your browser. There is no analytics service, no advertising network, no social media pixel, and no cross-site tracking of any kind. This is why you are not asked to accept cookies: there is nothing to accept.

The web fonts the site uses are served from our own domain rather than from Google, so simply loading a page does not reveal your visit to a font provider.

The one exception is the human check described next, which is a third-party component and may store information in your browser in order to work.

The human check on the redemption page

The redemption page uses Cloudflare Turnstile to confirm a person rather than a script is submitting the form. This protects promo codes, which are usually limited in total, from being drained automatically.

Turnstile runs in your browser and reports to Cloudflare, which processes technical signals about the request — including your IP address and information about your browser — in order to reach a verdict. Cloudflare states that it does not use this to build advertising profiles. We receive only the verdict, never the signals behind it. Cloudflare's own privacy documentation covers what it does with them.

Information the game collects

The BattleRise game is separate software from this website, and it collects more than the website does. What follows matches the data disclosures published on the app's App Store and Google Play listings:

• Account information — your name, your user ID, and your email address if you choose to give us one. The first two are used to run the game and manage your account; an email address is optional and is used to contact you about the game.
• Device and advertising identifiers, used to make the game work on your device and, as described below, for advertising.
• Gameplay and interaction data — what you do in the game, and what you search for inside it — used to understand how the game is played and to improve it.
• Crash reports and diagnostic data, used to find and fix faults.
• Purchase history, used to personalise what the game offers you. Payment details themselves are handled by Apple or Google and shared with them for that purpose; we do not process card details ourselves.

The game also uses identifiers and usage data for third-party advertising, which can involve tracking across other apps and websites. On iOS this is governed by the tracking permission your device asks you for, and you can change your answer at any time in your system settings; on Android you can reset or limit your advertising ID the same way. Declining does not stop you playing.

You can ask us to delete the data held about your account — see your rights below, and the contact route at the end.

⚠ This section is written from the disclosures on the store listings rather than from a review of the game's code, so it describes the categories accurately but not the specifics: which analytics and advertising providers are involved, and how long each kind of data is kept, are not yet listed here. Both are being documented and will be added. If you want a definitive answer before then, ask us and we will give you one.

Why we are allowed to process it

Where data protection law requires a legal basis, ours are: performing the service you asked for, when you submit a code and we grant the reward; and our legitimate interest in keeping the service working and not defrauded, for the rate limiting, the human check, and the fault records. We do not rely on consent for anything on the website, because there is nothing here that needs it.

Who else handles it

We use a small number of service providers, each of which processes information only on our instructions and only for the purpose listed:

• Vercel — hosts the website and runs the redemption endpoint.
• Upstash — holds the short-lived counters and hashes described above.
• Cloudflare — provides the human check.
• Microsoft Azure — hosts the game servers the redemption is sent to.

We do not sell personal information, and we do not share it with anyone for their own marketing. We may disclose information where the law requires it, or to protect players and the game from abuse.

Where it goes

The redemption endpoint runs in Frankfurt and the game servers are in Western Europe, so most processing happens inside the UK and the European Economic Area. Some of the providers above are established elsewhere, principally the United States, and may process data there. Where that happens it is covered by the safeguards those providers offer for international transfers — for transfers out of the UK, the Information Commissioner's international data transfer agreement or the UK addendum to the European Commission's standard contractual clauses.

How long we keep it

• The hash of your Player ID and promo code: about one minute, then deleted automatically.
• The rate-limiting counters keyed on your IP address: 10 minutes, or one hour for the failed-lookup limit, then deleted automatically.
• Fault records: kept for a short period by our hosting provider for diagnosis, and they do not contain your Player ID or promo code in readable form.
• Anything held in the game itself is governed by the section on the game above, once it is complete.

Your rights

Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to ask us to transfer it elsewhere. You will never be treated differently for exercising any of them.

You can also complain to a regulator. In the United Kingdom that is the Information Commissioner's Office at ico.org.uk; elsewhere it is your own national data protection authority. We would rather you came to us first so we can put it right, but that is your choice and not a condition.

In practice there is very little for the website to give you: the information it handles is deleted within minutes and is not linked to your identity. A request about your account or your progress is a question about the game, and we will handle it as one.

Children

The Service is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it. Some regions set a higher age for the processing of personal data, and where they do, that higher age applies.

Changes to this policy

We will update this policy as the game and the law change — most immediately, to complete the section on the game. The “Last updated” date above always reflects the current version, and where a change is significant we will make a reasonable effort to tell you through the game or our official channels.

Contact us

Questions about this policy, and requests about your personal information, are handled in our Discord server. Open a ticket in the #tickets channel — that is a private conversation with our support team, not a public thread, which is what you want for anything involving your account or your personal information. It is also how to reach us if you want a definitive answer about what the game collects.