Last updated: 29 August 2026
This Privacy Policy explains how Beardlings LLC (“we”, “us”) collects and processes information in Riftorn Battle Flanks (the “Game”), the free browser version hosted at beardlings.com. The Game has no accounts and no passwords, and may be played in full without giving us any personal information. The one thing it asks for is your birth month and year, once, to check that you are old enough to play; that is described under Children below, and it is never stored or sent to us.
The only place we ask you for a personal detail is the mailing list, and only if you choose to join it. If you enter your email address and tick the consent box, we add you to our Riftorn mailing list to send occasional updates about the Game. We use double opt-in: after you sign up, our email provider sends you a confirmation link, and we add you to the list only after you click it. We rely on your consent as the basis for these emails, and you can withdraw it at any time by unsubscribing: every email includes a one-click unsubscribe link. Joining is optional, and refusing or withdrawing consent does not affect your access to the Game.
When you sign up, we also keep a small consent record on our own server: your email address, the date, the version of the wording you agreed to, where in the Game you signed up, and a one-way hash of your IP address, so we can show that you gave consent. We keep this record for as long as you are on the list and for as long as we may need it to demonstrate that consent was given. Our signup and analytics systems never store your raw IP address, only that one-way hash. Our web host also records IP addresses in its own server logs, described under Cookies and browser storage below.
The Game provides a Send Feedback box. The text you submit is sent to our own server and stored alongside the anonymous gameplay data so that we can read and act on it. We do not ask for your name or email address, and we ask you not to include personal details. The message is not linked to your identity and carries no country or other location information. Where a message does contain personal details, we use them only to answer and act on your feedback, and you may ask us to delete the message at any time.
If you send us an email, we receive your email address and the contents of your message. The feedback box also displays our address for this purpose. We use these only to read, answer and act on your message. We never add the address to the mailing list, and you may ask us to delete the correspondence at any time.
To understand how people play, we record anonymous gameplay events: for example, which cards are drawn and deployed, how clashes resolve, and how matches end. Each visit is tagged with a random session identifier that is generated fresh every time you load the Game and is not stored on your device. Alongside these events we record basic technical information: your browser’s user-agent string (browser and operating-system type and version) and, when the Game hits a technical error, an automatic error report containing the error message and technical details, never anything you typed. This data contains no name and no email, and it is never linked to your mailing-list address or to your identity. We keep it on our own server, and we rely on our legitimate interest in understanding and improving the Game as the basis for collecting it. We do not use any third-party advertising or tracking network, and we keep this data only for as long as it helps us improve the Game.
With that gameplay data we also record the country you appear to be playing from (for example “Canada”) in order to understand where our players are and which regions to support. This is the only location information we collect. We do not record a city, a region, or coordinates.
We derive the country from two settings your browser reports: your time-zone setting (for example “Europe/Berlin”) and your language setting (for example “pt-BR”). Our server converts these into a two-letter country code and stores only that code; the time-zone and language values themselves are discarded and never saved. We do not use your device’s location services or GPS, and the Game never requests location permission from your browser. We do not derive your location from your IP address, and we do not send data to any third-party location service. The result is an approximation and may be inaccurate, for example if you use a VPN or are travelling; where no country can be determined, none is stored. Like the rest of the gameplay data it is anonymous, is tied only to the random per-visit session identifier described above, and is collected on the basis of our legitimate interest in understanding and improving the Game.
Online multiplayer runs on Photon Cloud, a game-networking service operated by Exit Games GmbH. When you open the multiplayer lobby, your browser connects to Photon’s servers (we use their United States region), which list the open public rooms and relay the match data between the two players. Photon processes your IP address, connection details and the room name for the duration of the connection, and acts as our service provider for this purpose. We do not receive or store your IP address from multiplayer. The Game has no player-to-player chat or messaging: apart from the display name described below and the room code you type when joining a friend’s match, nothing you type is ever sent to your opponent or through Photon. Because we use Photon’s United States region, hosting a match sends your connection data outside the EU/EEA; Exit Games safeguards those transfers by concluding standard contractual clauses, and acts as our processor. Photon’s privacy and cookie policy is at photonengine.com. If you play only against the AI, no connection to Photon is made.
The Game invites you to choose a display name, which it uses in your battle log and on your own screens. Providing one is optional; if you decline, or clear it, the Game uses “General”. The name you choose is stored on your device (see browser storage below) and is never sent to us, never stored on our servers, and never included in the anonymous gameplay data described above.
In online multiplayer, and only in online multiplayer, your display name is sent to the other player through Photon so that each player can identify the other. It passes between the two players for the duration of the match and is not retained by us. You should not use your real name, your email address, or any other information you would not want a stranger to see: the player you are matched with will see this name. The name is limited to 16 characters, comprising letters, digits, spaces and simple name punctuation (hyphens, apostrophes and periods); any other character is discarded before the name is saved or sent. If you play only against the AI, your display name does not leave your device.
The Game sets no cookies, and no cookies are set when you visit or play.
Until 29 August 2026 our web host, GoDaddy, added a traffic-measurement script of its own to the pages it
served, which set three cookies (_tccl_visitor, _tccl_visit and
_scc_session). We have opted out of that programme and the script is no longer served. We never read
those cookies and they played no part in gameplay analytics. If you visited before that date, any that were set
remain in your browser until they expire or you clear them; they are covered by GoDaddy’s own
privacy and cookie policy.
GoDaddy still keeps routine server logs, including IP addresses, of requests to the site. It keeps them for
security purposes, retains them on its own standard rotation, and processes them on our behalf.
The Game does store a few small values in your browser’s own storage for this site (technically an IndexedDB store, not cookies) so the Game remembers them between visits: your audio and game-speed settings, in-game preferences such as your chosen AI opponent and your last multiplayer room options, the display name you chose (and whether we already asked you for one), the result of the age check described below, and whether you have already signed up for or dismissed the newsletter offer. These values remain on your device and are used only to preserve your settings between visits. None of them is sent to us. The only personal value that leaves your device is your display name, and only to the other player in an online match, as described under Multiplayer above. Room options chosen by a host, such as the turn timers, are also sent to the other player as match settings; they contain no information about you. Clearing site data for beardlings.com in your browser removes all of them. Your browser additionally caches the Game’s files locally.
Our gameplay analytics are first-party and do not follow you across other websites. We do not engage in cross-site tracking, and a “Do Not Track” or Global Privacy Control signal from your browser does not change what we collect.
We do not collect your real name, postal address, phone number, payment information, or biometric data. We do not collect precise location: we never use your device’s location services or GPS, and we never record a city, region, or coordinates: the only location we hold is the approximate country described above. We do not collect the display name you choose: it stays on your device and, in an online match, passes only between you and your opponent. The Game has no accounts and no passwords, so we never ask for or store login credentials. We do not sell or share your personal information, we do not use it for advertising, and we do not track you across other websites. The personal data we hold is: the email address of anyone who joined the mailing list or emailed us directly, together with the consent record described above, which includes a one-way hash of your IP address; anything a player chooses to type into a feedback message; and the IP addresses our web host records in its server logs on our behalf.
We use MailerLite to manage the mailing list and send our emails. If you join the list, your email address is stored by MailerLite in data centres in the European Union. Where MailerLite transfers data internationally, it protects it with standard contractual clauses and the EU-US Data Privacy Framework. MailerLite’s privacy policy is at mailerlite.com. We do not share your email address with anyone else.
For online multiplayer we use Photon Cloud (Exit Games GmbH), described in the Multiplayer section above. Our website and game files are served by our web-hosting provider, GoDaddy, which keeps routine server logs (described under Cookies and browser storage). This policy does not cover other websites we link to, such as MailerLite’s or Photon’s; those sites have their own privacy policies.
This policy covers the Game. The rest of beardlings.com (the studio site and its own analytics) is covered by our site privacy policy at beardlings.com/privacy. That site uses Google Analytics. The Game’s page does not load Google Analytics.
Where this policy describes other personal data (feedback you submit, emails you send us, and the connection data required for multiplayer), we process it on the basis of our legitimate interest in operating the Game and responding to those who contact us. We retain the mailing-list consent record in order to demonstrate that consent was given, as the law requires.
We keep your email address on the mailing list until you unsubscribe or ask us to delete it. We keep the anonymous gameplay data only for as long as it helps us understand and improve the Game. We keep a feedback message for as long as we are working on what it raises and for a reasonable period afterwards to check that our fix worked, and we delete any message on request. Our web host’s server logs are retained on the host’s own rotation, which we do not control. Beardlings LLC is formed in Maryland, USA and operates from California, USA, and MailerLite stores mailing-list data in the European Union, so joining the list means your email is processed in both regions, protected by the safeguards described above.
You must be 13 or older to play Riftorn Battle Flanks. When you first open the Game we ask for your birth month and year: we use them only to determine your age group at that moment, and we never store or transmit them. If you are under 13, you cannot play and we collect nothing about you: no gameplay data and no email address. The Game does record the outcome of the age check in your browser’s own storage, so that it does not have to ask again; that value stays on your device and is never sent to us. Our web host’s server logs, described above, record requests from every visitor to the site. The mailing list is offered only to players who are 16 or older. We do not knowingly collect personal data from anyone under 13.
We protect your information with reasonable technical and organisational measures. Data sent between your browser and our servers is encrypted in transit using HTTPS. No method of transmission or storage is completely secure, but we take appropriate care to safeguard the data we hold.
You may ask us to delete your data at any time and free of charge. Email beardling@beardlings.com and we will remove your address from the mailing list and delete the personal data we hold about you: your email address, any correspondence, and any feedback message you sent. Because a feedback message is deliberately stored with no link to your identity, we can only find it if you tell us roughly when you sent it or quote what it said. Where the law requires us to retain the minimal consent record described above in order to demonstrate that consent was given, we retain only that record. The anonymous gameplay data contains nothing tied to you and is therefore outside the scope of a deletion request. You may also unsubscribe at any time using the link at the foot of every email.
If you are in the UK or EU, you also have the right to access, correct, or receive a copy of the personal data we hold about you, to object to its processing, and to ask us to restrict it. You have the right to complain to your data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, your national authority (listed at edpb.europa.eu). We would welcome the opportunity to address any concern before you approach the authority.
When we change this policy, we update the date at the top of this page.
Beardlings LLC
beardling@beardlings.com
1014 S. Westlake Blvd #14-356, Westlake Village, CA 91361