Privacy policy
Applies to escarpgames.com, the Escarp Games playtest sign-up, the games you play in a browser or as an installed web app, the Pong app for Android (com.escarpgames.pong), and the game servers they connect to. Effective 3 November 2026.
We have no ads, no purchases in the playtest, and no analytics or tracking software. This page explains what we collect, why, how long we keep it, and how to have it removed.
If you join the testing program on escarpgames.com/joinus, we collect the email address you type, the optional note about your devices and who you would play with, and the date you signed up. We use your address only to send you a testing code and news about the playtest. We do not sell it, share it, or add you to any other list.
The sign-up is stored in a key-value database at Cloudflare, our hosting provider, which holds it on our behalf. We keep it until you ask us to delete it or the playtest ends, whichever comes first. To have your address removed, or to see what we hold, write to [email protected] from that address.
The playtest games and builds are open only to people we have given a code. When you enter a code, we set one cookie, escarp_access, in your browser. It holds a random token that proves you entered a valid code, is sent only to escarpgames.com, and expires after 90 days. We store the name we gave your code and a one-way hash of the code, not the code itself. We use no other cookies on this site.
Each game player has a random Unity player ID. On that ID we keep a small record in Unity Cloud Save that says whether the player is a playtester and which paid games they may host, and until when. Only we can change this record. The subscription page (escarpgames.com/subscribe/) shows it to the player who opens it from the game, after checking their sign-in token. The token is used once to look the record up and is not stored or logged. To have the record deleted, write to [email protected].
The browser games connect to our game servers (for example pong.escarpgames.com) over an encrypted connection and send the same kinds of data listed in the table below: screen size and orientation, device model, a random identifier stored on your device, and your touches while you play. Each device gets a random guest identity, so you do not need an account. Signing in with Google is optional; if you choose it, Google and Firebase give us a sign-in token and the account details Google shares for that purpose, which we use only to recognise you across devices.
The same retention, sharing and children's terms below apply to the browser games.
escarpgames.com is served by Cloudflare, which processes visitors' IP addresses and request details as a hosting provider in line with its own privacy policy. We do not use this information ourselves.
Pong has no accounts, no ads, no purchases and no analytics. It asks for one permission: network access, to reach the game server.
When you open a game or the app it connects to our game server (pong.escarpgames.com) over an encrypted connection and sends:
| Data | Why |
|---|---|
| Screen size in pixels, screen density, physical screen size, orientation and safe-area insets | To lay out the court and, when two screens are joined, to line them up |
| Device model and platform (for example, "Android") | To tell devices apart while you play |
| A random identifier created by the app when it first runs and stored only on your device | To put you back in your game if your connection drops. It is not your advertising ID and is not linked to you |
| Where you touch the screen while you move the paddle, and the path of a swipe when you join screens | To move your paddle and to detect the join gesture |
The app does not read your name, contacts, location, photos, microphone, camera or advertising ID, and it does not send the name you gave your phone.
Game state, including your touch positions, is held in the server's memory only while a game is running and is discarded when you leave. The server also writes short operational log lines (a client number, the device model, screen size and the first eight characters of the random identifier). The web server that receives your connection can also record your IP address in its error log. All of these logs are deleted automatically after 30 days, and we do not use them for anything except fixing problems.
Nobody. We do not sell or share this data, and the games and the app contain no third-party advertising, analytics or tracking software. The server runs on a virtual server we rent from a hosting provider, which processes the data on our behalf.
Our games and the playtest are not directed at children under 13 and we do not knowingly collect personal information from them.
You can ask us at any time to delete your sign-up email, and you can stop receiving playtest email by telling us.
Uninstalling the app, or clearing the site data in your browser, removes the random identifier from your device. Because we cannot tie log lines to a person, we cannot look up or delete data about you on request, but the logs expire on their own after 30 days. If you have a question or concern, write to us.
If this policy changes we will update this page and its date. Contact: [email protected].