Legal
Privacy Policy
The "Plain English" Summary
What we collect: Only what we need to run your account, run the games, keep them fair, and fix bugs. That means things like your username, email, platform ID, game progress, purchases, and crash reports.
What we don’t do: We do not sell your data. We do not run third-party ads. We do not put analytics or advertising SDKs in our games or website, and we do not track you across other apps or sites.
Who sees it: The platform you play on (Steam, PlayStation, Xbox, Apple, or Google), the companies that host our servers and send our email, and other players for the things that are public by nature, like your username and leaderboard rank.
Your control: Email support@carbongames.com to get a copy of your data, fix it, or delete your account. Deletion requests are completed within 30 days.
Questions: legal@carbongames.com.
Carbon Games Privacy Policy
1. Who We Are
Carbon Games Inc. (“Carbon Games,” “we,” or “us”) is a game studio based in Washington, USA. We make games such as AirMech and Fat Princess and operate carbongames.com. This Privacy Policy covers our websites, our games on every platform we release them on (including PC via Steam, PlayStation, Xbox, iOS, and Android), and our support channels (together, the “Services”). Carbon Games is the data controller for the personal information described here.
2. Information We Collect
We collect the following categories of information, depending on how you use the Services:
- Account information: your username, email address (if you provide one), and account settings. We store passwords only in a hashed form, never in plain text.
- Platform identity: when you sign in through a platform, we receive that platform’s account identifier and display name (for example, your Steam ID). We do not receive your platform password.
- Gameplay data: your progress, inventory, match history, statistics, leaderboard rank, friends list, and any custom maps or other content you upload.
- Purchase information: what you bought, when, and the platform transaction reference, so we can grant and restore your items. Payment is handled by the platform you buy through. We never see or store your full card number or bank details.
- Communications: in-game chat and messages, emails you send to our support addresses, and anything else you send us.
- Technical and device data: your IP address, device and operating system type, hardware class (such as GPU and memory), game version, performance timings, connection quality, and crash reports. A crash report contains the stack trace, the names of loaded program modules, thread state, and small regions of memory around the point of failure, along with the game build, platform, operating system version, GPU and driver, and renderer in use. It may incidentally include your username or recent in-game activity if they were in memory at the time.
- Anti-cheat data: our games may check for unauthorized programs interacting with them and report a detection to us, along with your account and IP address, as described in the End User License Agreement.
- Website data: standard server logs (IP address, browser type, pages requested, and timestamps) and a session cookie when you sign in.
We do not collect precise location, contacts, photos, biometrics, health data, or advertising identifiers. We do not use third-party analytics or advertising networks in our games or on our website.
3. How We Use Information
We use the information above to:
- Run the Services: create and secure your account, save your progress, match you with other players, and deliver items you bought.
- Keep the games fair and safe: detect cheating, abuse, and fraud, and enforce our Terms of Service and Code of Conduct.
- Fix and improve the games: diagnose crashes, tune performance, and understand which features get used.
- Support you: answer your emails and resolve account and purchase problems.
- Communicate with you: send account and security messages, such as email verification and password resets. We only send news or promotional email if you opt in, and every such email includes an unsubscribe link.
- Meet our legal obligations: keep the records the law requires and respond to lawful requests.
Where the GDPR or UK GDPR applies, our legal bases are: performing our contract with you (running the Services and your account), our legitimate interests (security, anti-cheat, fixing bugs, and improving the games), your consent (promotional email, which you can withdraw at any time), and compliance with legal obligations.
4. Who We Share Information With
We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only with:
- Platform partners: Valve (Steam), Sony (PlayStation), Microsoft (Xbox), Apple, and Google, to sign you in, verify ownership, and process purchases. They handle your information under their own privacy policies.
- Service providers that run our infrastructure on our behalf, under contracts that limit them to our instructions: currently Akamai (Linode) for server hosting, Cloudflare for website delivery and security, SMTP2GO for sending email, and Sentry (Functional Software, Inc., United States) for crash reporting and diagnostics. Sentry receives crash reports and the device and build information described above so we can find and fix crashes; we do not tag crash reports with your account identity, and we do not use Sentry for advertising or analytics.
- Other players: your username, leaderboard rank, public statistics, in-game chat, and content you upload are visible to other players by design.
- Legal and safety: when required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect players, the public, or our rights and property.
- Business transfers: if Carbon Games is acquired, merges, or transfers substantially all of its assets, your information may be transferred to the successor, who must honor this Privacy Policy.
5. Public Content and Chat
Usernames, leaderboards, in-game chat, and uploaded content are visible to other players. Please do not put personal information in them, and choose a username that does not identify you. We may monitor and moderate chat and uploaded content to enforce our rules, and we may keep chat logs for a limited period for that purpose.
6. How Long We Keep Information
- Account and gameplay data: for as long as your account exists. If you ask us to delete your account, we delete it within 30 days.
- Server logs and technical data: up to 12 months, unless they are needed for an ongoing security or abuse investigation.
- Crash reports: up to 12 months in our own archive. Crash events forwarded to Sentry are kept there for 90 days, and the crash attachments themselves for 30 days.
- Purchase records: for as long as tax, accounting, and platform rules require, typically up to 7 years.
- Enforcement records: information about bans and cheating detections is kept for as long as needed to keep the ban effective and prevent evasion.
- Support email: up to 3 years after the conversation ends, so we can help if the issue comes back.
7. Your Choices and Rights
Wherever you live, you can ask us to:
- Access: get a copy of the personal information we hold about you.
- Correct: fix information that is wrong or incomplete.
- Delete: delete your account and personal information. This is permanent: you lose your progress, items, and purchases, and we cannot restore them afterward.
- Port: receive your information in a common machine-readable format.
- Object or restrict: object to processing based on our legitimate interests, or ask us to restrict it, where the law provides that right.
- Withdraw consent: unsubscribe from promotional email at any time using the link in the email.
To delete your account or exercise any other right, email support@carbongames.com from the email address on your account. If you sign in through a platform and have no email on file, write from any address and we will verify ownership with you. We respond within 30 days, and we will never treat you differently for exercising your rights.
If you live in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority. If you live in California or another US state with a privacy law, the rights above include your rights to know, delete, correct, and opt out of the sale or sharing of personal information; we do not sell or share personal information as those laws define it.
8. Children
Our Services are not directed at children. You must be at least 13 years old (16 if you live in the European Union or the United Kingdom) to create an account or play, and players under 18 need a parent or guardian’s permission. We do not knowingly collect personal information from anyone below the minimum age. If you believe a child has given us personal information, contact legal@carbongames.com and we will delete it.
9. International Transfers
We are based in the United States, and our servers and service providers are located there and in other countries. If you use the Services from outside the US, your information will be transferred to and processed in the US. For information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK Addendum.
10. Security
We protect your information with measures including encryption in transit (HTTPS/TLS), hashed passwords, access controls, and network firewalls. No system is perfectly secure, so we cannot guarantee absolute security, but if a breach affects your personal information we will notify you and the relevant authorities as the law requires.
11. Cookies
carbongames.com uses only strictly necessary cookies: a session cookie that keeps you signed in, and security cookies set by Cloudflare to protect the site. We do not use advertising or analytics cookies. You can block cookies in your browser, but signing in to the site will not work without them.
12. Third-Party Links and Services
Our Services link to third-party sites and communities, such as Steam, Discord, and social networks. Those services have their own privacy policies, and we are not responsible for how they handle your information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the new version here with a new "Last Updated" date, and if the changes are material we will also notify you on our website, in the game, or by email.
14. Contact Us
Privacy questions and requests: legal@carbongames.com. Account help and deletion requests: support@carbongames.com. Carbon Games Inc., Washington, USA.
Change History
- September 11, 2026: Added Sentry as our crash-reporting processor, described what a crash report contains, and stated crash-report retention.
- September 10, 2026: Full rewrite of the policy.