Cogwild Privacy Policy
Last updated: 23 October 2026 · Cogwild is made by BlueDucky Games · Contact: theblueduckymc@gmail.com
Short version
- You can play without an account. Then your progress stays on your device only.
- Without an account we store a random code for your device and your coins, level, unlocks and pass progress on our server, so the Shop works the same for everyone. It is forgotten after 6 months without playing.
- With an account we store your email address (only to send you login codes; other players never see it and we never send anything else), your username, a scrambled (hashed) password, your game progress (including coins and unlocked items), trophies and ranked points, your friends list, the club you're in, your chat messages to friends and club-mates (deleted after a week), and your own profile picture if you add one. If you sign up with Google we get your Google email address only (not your name, photo or contacts). We never ask for your real name, phone number, location or photos.
- Voice chat is off until you turn it on. Your voice goes live to the players you talk with (through our relay server, so they never see your internet address) and is never recorded or stored.
- There are no ads from us and we never sell or share your data.
- You can delete your account and everything in it at any time in the game (Profile → Delete account).
What we store and why
| Data | Why | Where / how long |
|---|---|---|
| Username, avatar choice | So you can log in and other players can see who they play with | Our server, until you delete your account |
| Password | To log you in. Stored only as a one-way scrypt hash, so nobody (including us) can read it | Our server, until you delete your account |
| Game progress (level, coins, unlocks, settings, achievements, your mech designs) | Cloud save, so you can play on another device | Our server (accounts only) and your device |
| Trophies, wins, matches played | Trophy Road, leaderboard and your profile | Our server, until you delete your account |
| Friends, friend requests | The friends list and parties | Our server, until you or your friend remove it |
| Club membership | Clubs (members see each other's username, avatar, trophies and online status) | Our server, until you leave the club or delete your account |
| Private messages (friends, club-mates) | So you can read them later, also when you were offline | Our server: at most the last 60 per pair of players, each deleted after 7 days (and when you delete your account) |
| Club chat | So the club can read what was said | Our server: the last 40 lines, each deleted after 7 days |
| Party and match chat | So the party or match can read what was said | Our server's memory only, gone when the party or match ends |
| Your own profile picture, club pictures | Shown (as a circle) to other players next to your name; club pictures in the club | Our server, until you remove it, pick an avatar instead, or delete your account / the club closes. Players with "Quick chat only" don't see others' own pictures and can't upload one |
| Chat setting, blocked players | "Quick chat only" and who you blocked work on every device | Our server, until you change them or delete your account |
| Reports | When you report a player we keep who reported whom, why, and that player's last few typed messages you could see, so we can check it | Our server, the last 2000 reports |
| Voice chat | Talking with your party and match. Not recorded, not stored | Passes live through our relay server, never saved |
| Login tokens | Keep you logged in on up to 5 devices | Our server and your device; changing your password logs out other devices |
| IP address | Delivering the game, stopping spam sign-ups (max 5 new accounts per hour per network) and password guessing | Sign-up and wrong-password limits: in memory for up to 1 hour. Web server log: up to 14 days, then deleted |
Playing online
In online matches other players see your username (or pilot name if you play as a guest), avatar, trophies, your mech and what your mech does in the match. Friends can watch your online matches (you see a note when they do). In matches, chat is limited to a fixed list of quick messages (like "GG!"). With your friends, party and club you can type your own messages, unless you (or a parent) turn on Quick chat only in Settings › Chat: then you only send and see the fixed messages and voice chat is off. Friends and players in your club can message you privately. A chat filter on our server replaces bad words with **** and hides links, email addresses and phone numbers. Tap any name in the chat to block (nothing from them reaches you, also no voice) or report a player. Friend requests and party invites only come from players who know your exact username, and you choose whether to accept them.
Voice chat (optional, needs an account): the game asks first, and only uses your microphone while voice chat is on. The microphone is only used while you're in a party (or a match, if you chose to hear your match) and not muted. You choose whether you hear only your party or also the players in your match, and you can mute (M or 🎤) or deafen (N or 🎧) any time. Voice goes through our relay server so other players never learn your internet address, and it is never recorded.
On your device
The game saves your progress and settings in your browser's or app's local storage. Guests' progress never leaves the device unless they copy a save or blueprint code themselves. Clips (F8) are saved straight to your device and are never uploaded.
Who we share data with
Nobody. Our server runs on Oracle Cloud (United States), which only stores it for us. If you play on a game portal (for example CrazyGames, Poki or itch.io) or install the app from a store (for example Google Play), that service may collect data under its own privacy policy and may show its own ads.
Deleting your data
- In the game: Profile → 🗑 Delete account, then type your password. Your account, trophies, coins and unlocks, friends, club membership and cloud save are removed right away. Server backups are kept for at most 14 days and then disappear.
- On the web: open cogwild.duckdns.org, log in and use Profile → Delete account (works from any computer or phone).
- By email: forgot your password? Email us from the address in this policy with your username and we will delete the account.
- Guests: clear the game's site data, or use Settings → Reset all progress.
Children
Cogwild is made for everyone, including kids. We designed it to collect as little as possible: no real names, no photos and no location. Typed chat is only with friends, party and club, and Quick chat only (Settings › Chat, saved on the account) limits a child to fixed messages and turns voice chat off. Players can be blocked and reported at any time. Usernames must not contain your real name; we may rename or remove usernames that do or that are rude. If you are under 13 (or the age your country requires), please ask a parent before making an account. Parents can ask us to delete their child's account at the email above.
Security
The game talks to our server over encrypted HTTPS / WSS connections. Passwords are stored as scrypt hashes. Nothing is perfectly secure, so please use a password you don't use anywhere else.
Your rights
Depending on where you live (for example the EU/UK under GDPR, or California) you can ask to see, correct, export or delete your data. Email us and we'll answer within 30 days.
Changes
If we change this policy we'll update the date above and mention it in the game's "What's new".