Privacy
What we keep, and why.
No ads, no tracking, nothing sold. Without an account, we keep nothing about you but technical logs and error reports.
Without an account
Your device keeps it all
Battles against the AI and on one screen run on your device. Your settings, your decks and your saved battle stay in its storage, and we keep none of it. The trial battle on this website is counted anonymously: your browser tells our server that it began, how it ended and whether you then opened an account, keeping a small note on your device so nothing is sent twice, and the server records only daily totals, with no account, address or cookie.
With an account
What our server keeps
- Email and passwordTo sign you in, and to mail a reset link when you ask. The password is kept as a one-way hash nobody can read back.
- Player nameShown to the players you meet.
- DecksSo they follow you on every device.
- Friends and messagesTo deliver what you send them.
- Online battlesTo run them, bring them back if the server restarts, and let both players watch the replay.
- Battles against the AIWhile you are signed in: factions, difficulty, arena, turns, winner and time. To see how the game is played and balance it.
- Blocks and reportsTo protect players. A report holds the recent messages it is about.
- SessionsA sign in lasts 60 days after you last play. A reset link lasts one hour.
Never
What we do not do
No advertising, no tracking across apps or websites, no analytics company, and nothing sold or handed over for marketing.
Where
Who holds it
- RailwayOur server and its database, in the Netherlands. Like any host, it keeps technical logs for a short time.
- ResendSends the password reset email.
- SentryReceives a technical report when the game or the server fails.
Delete
Your account, gone at once
In the game, open your Profile, then Delete account. Your email, password, name, decks, friends, blocks and every message sent or received go at once. What stays: reports, as the record of what moderation did; online battles, in the other player's replays; and battles against the AI, counted with no name.
Your rights
Ask, and it is done
You can see, correct, export or delete what we keep about you, or object to its use. Write to us and we answer within a month. You can also complain to the CNIL, the French data protection authority. Accounts are for players aged 15 or more; a younger player can play without one.
Contact
Who we are
Krystal Wars is made by Guillaume Boiret, in Bordeaux, France. For help, a question about the game or about your data, write to crystalwars@boiret.com.
Last updated on 10 October 2026.