Data and account notice

This page describes the shipped software behavior. It is not a claim that a deployed operator has completed an independent legal/compliance assessment. The host should review the notice and their retention/contact practices before public launch.

Account identity and sign-in

The game uses Twitch sign-in to identify your numeric Twitch account and login. It does not request your email address or Twitch password. The Worker stores an opaque session identifier hash and an encrypted Twitch access token so it can validate the maintained session. Cookies are Secure, HttpOnly and SameSite=Lax. Tokens are checked at creation and at least hourly while maintained; revoked or expired tokens end access and require sign-in again. The implementation does not store refresh tokens.

Gameplay records

The authoritative local game stores your role, weapon, owned equipment/hulls, supply and material counts, relics, research, career/season progress, command receipts and operation results. The hosted database stores private profile snapshots, authenticated command transport, session records and the V15 report archive. The original V14 import is retained privately by the host for migration verification.

Public records include display names, roles, ships, mission outcomes and contribution scores. Numeric user IDs, private wallet-after values, secrets and private normal-operation seeds are omitted from public reports. Do not enter personal medical/contact details or secrets into command text or correction reasons.

Browser behavior

The browser saves a pending request ID locally under the original origin/account so it can recover a request after disconnect. It does not store the private Sync secret or your Twitch password. The local OBS version may contain a WebSocket password in a private config file on the host's machine; that file is not part of hosted website assets. The website has no added advertising analytics or third-party tracking scripts in this package.

Export, correction and retention

An authenticated profile export is available from the terminal/API. Contact the Bomb Squad 87 channel owner through the existing community contact route for a correction or removal request; the owner must verify account identity. No automatic deletion button is claimed by this implementation. Public historical records, private backups and existing legacy Chronicle records require the host's coordinated retention/removal procedure.

Local command receipts are retained for seven days, with a one-day acceptance limit for deliverable commands. D1 command identities and historical reports remain until the owner applies a reviewed retention policy. Expired session/state records are cleaned by maintenance. The host should review storage growth and the retention implications before publishing. Do not assume that logging out deletes your career or every historical record.

Services

The Channel & Community page displays the channel's existing public supporter names and support records from its supporter service. It does not submit game commands or transfer your game session to that service. Social and partner links open their respective services. The embedded Twitch player connects to Twitch only after you select “Load Twitch player”; Twitch then applies its own privacy and cookie practices. You can also open the Twitch channel directly.

The deployed game uses the host's Streamer.bot installation and Cloudflare account; Twitch provides authentication. Hosting/authentication services have their own terms and data handling. No secrets, real-money purchases or payment processing are embedded in the downloadable public assets.