We count page loads, room joins, matches, kills, time spent playing or spectating, and server performance and rejected requests. Statistics are daily totals retained in the live analytics store for 90 days. Page loads are not unique people.
The aggregate counters do not store IP addresses, player names, invite codes, cookies, fingerprinting identifiers or browsing history. Separate private account/access records are described below. We do not sell player data or load third-party advertising trackers. Your settings are saved locally on your device.
Online matches pass through our server. Other players receive your callsign and gameplay state, but the game does not send them your connection IP. The hosting infrastructure necessarily processes IP addresses to deliver traffic and apply security protections. Existing infrastructure security logs have separate administrator-controlled retention.
The domain copyofduty.com (formerly 1v1mebruv.com) uses Cloudflare for DNS, HTTPS delivery and traffic protection, with the game server hosted by Hetzner in Germany. Cloudflare and the hosting infrastructure process connection and request information, including IP addresses. This is separate from our aggregate game statistics. See Cloudflare's privacy policy. Google advertising is not currently enabled.
Sponsor placements on loading and waiting screens are images and links we host ourselves. They load no third-party scripts, cookies or trackers, and we do not share player data with sponsors.
Private aggregate reports are available only to the server administrator. Aggregate backup copies can remain longer under the server backup retention policy. Rooms and tournament brackets are held in memory and disappear after expiry or a server restart.
Email/password registration uses Supabase Auth. We do not keep a separate game password database. Our account database is hosted by Supabase in US East; the game simulation currently runs in Germany. Your stable account ID and chosen username are stored in the account database. Online opponents see your username, not your email or account credentials. Google sign-in, email confirmation and email password recovery are not enabled. Email addresses are not proof of inbox ownership; keep your password safe.
A first-party, HttpOnly session cookie keeps you signed in for up to seven days. Provider tokens stay in game-server memory and are not placed in browser local storage. Signing out revokes that local session; a game-server restart also requires signing in again. Guest practice does not require an account. Account access is optional and the Account screen states whether it is enabled.
Completed online matches between two signed-in players contribute to your saved games, wins, losses, draws, kills and deaths. Practice, guest matches, abandoned matches and disconnect forfeits do not. Account totals remain until account deletion; detailed results are retained for up to 90 days. Private friend requests, accepted friendships and blocks remain until removed or the account is deleted. Exact usernames can be used for friend requests; emails are never searchable by players.
For access security and service troubleshooting, we also record the connection IP address and an approximate operating-system/browser category when you sign up, sign in or join online play (including guest play). This is not a hardware fingerprint and can be inaccurate. These records are private to service administrators, never sent to opponents, and retained for up to 30 days (or less under the storage cap). Cleanup runs while the service is operating; downtime can delay deletion. Hosting security logs and backups have separate retention.
For access, export or deletion requests, contact the address below. We must verify control of the account, not merely trust an unconfirmed email address. Deleting an account removes its profile, score, friend relationships and linked access records. Non-identifying match receipt hashes can remain to prevent duplicate scoring. Separate backups may retain older copies until their retention period expires. Supabase also processes authentication/security information under its privacy policy.
Questions or privacy requests: [email protected]. Advertising and sponsorship: [email protected].