Privacy policy
Last changed 29 September 2026
The short version.
- There is no account, no sign-in and nothing to register.
- Pikefall sets no cookies and gives you no identifier of any kind.
- Your campaign is saved in your own browser and is never uploaded.
- Anything this site sends is listed below, field by field.
Who is responsible
Liviusz Lovasz, whose postal address is in the legal notice. You can reach them about anything on this page at [email protected].
What stays in your browser
The game keeps its save in your browser’s local storage, on your device. It is not a cookie, it is never sent to any server, and nobody but you can read it. The landing page reads it too, to show your own progress on the campaign chart, and changes nothing in it.
| Stored as | What it holds |
|---|---|
pikefall.save.v1 |
Your campaign: stars and results per map, unlocked heroes and doctrines, your loadout, sound, music and graphics settings, which tips and story pages you have seen, honours, the coat of arms and tower colours you chose, the in-game crowns, endless records and your last run (so it can be shared from the map). |
pikefall.save.backup |
A copy of the above, taken only before the game does something that could lose it, so a damaged save can be recovered. |
pikefall.consent.v1 |
Your answer to a consent question, if you were ever asked one. See below; today nobody is. |
This storage is what makes the game save at all, which is the service you asked for by playing it, so it needs no consent. Clearing this site’s data in your browser deletes all of it, and your campaign with it; the game’s own options also have a “start over” control.
Hosting
The site is served by Cloudflare Pages, run by Cloudflare, Inc. Like any web host, Cloudflare has to process your IP address and the details of each request (the address asked for, your browser’s user agent, the time) to deliver the pages and protect them from abuse. Pikefall’s own code never reads, stores or logs your IP address. The legal basis is the legitimate interest in running a website at all (Art. 6(1)(f) GDPR); Cloudflare’s own handling is described in its privacy policy.
The site loads no fonts, images, scripts or styles from anybody else: every picture on it is drawn in your browser by the game’s own code.
Gameplay statistics
To find out how hard the maps really are, the game sends a short message when a battle ends, and another if your device turns the graphics quality down because it is running slowly. These are all the fields there are:
- When a battle ends: which map, the difficulty, the mode, whether it was won or lost, the stars earned, the wave reached and how many waves the map has.
- When quality drops: the quality level before and after, and the frame time that caused it.
Nothing else is sent: no cookie, no identifier, no session, nothing that could connect one message to another or to you. The receiving server, a Cloudflare Worker, does not read your IP address and stores at most those fields, as counters. Cloudflare keeps that server’s operational logs for a limited time so errors can be found; Pikefall writes nothing about you into them. The legal basis is the legitimate interest in balancing the game (Art. 6(1)(f) GDPR).
Sharing a result
When you share a result, the picture is drawn on your device and handed to your system’s share sheet, clipboard or downloads folder — Pikefall uploads nothing. The link that goes with it carries a short code describing the run and nothing else: the map, the difficulty, the stars, the wave reached, lives lost and the mode. It contains no name, no identifier and no time, and anybody holding the link can read it, which is why it holds nothing worth keeping private.
Visitor counts
This site uses Cloudflare Web Analytics to count page views and see which
links bring visitors in. According to Cloudflare it sets no cookie, stores
nothing in your browser and does not fingerprint you; it records the page
you opened, the page that linked you here, your browser type and your
country as derived from your connection. Its script is loaded from
static.cloudflareinsights.com. The legal basis is the
legitimate interest in knowing whether anybody finds the site
(Art. 6(1)(f) GDPR).
Links to other sites
The donation buttons lead to Ko-fi and PayPal, and the source links to GitHub. Nothing is loaded from any of them until you click, and once you do, their own privacy policies apply. Pikefall is never told whether or what you donated.
Bug reports, feature requests and discussion live in a public GitHub repository. Anything you post there is public, is hosted by GitHub under its own terms and privacy statement, and needs a GitHub account. The game sends nothing there by itself: a report is only ever what you type into GitHub's form.
Cookies and consent
Pikefall sets no cookies, and nothing on this site today needs your consent: the save file is necessary for the game to work, and the services above neither store anything in your browser nor identify you. So you will not see a cookie banner.
If a future version adds something that does need your permission — advertising, for instance — a notice will ask before it runs, with “Decline” exactly as easy as “Allow”, and the game will play the same whichever you choose. You will be able to change your answer here at any time.
Your rights
Under the GDPR you may ask what personal data about you is held, have it corrected or erased, restrict or object to its processing, and receive it in a portable form. Because Pikefall keeps no account and no identifier, the only personal data it could hold is what its host processes to serve a request, and the save in your browser is already entirely in your hands. Write to the address above with any request. You may also complain to a data protection supervisory authority, in particular in the country where you live.
Changes
If what the site stores or sends changes, this page changes with it, and the date at the top says when. The history of every version is public in the source repository.