Privacy Policy

Playing without an account. You can play locally, against the computer, and join online matches without signing in. For online play we store a random match identifier and a random browser token so the server can tell the two commanders apart. This token is not linked to your identity.

If you sign in with Google. We receive your email address, name and profile picture from Google, and store a profile (display name, initials, optional city and country) plus your game history (mode, colour, result, number of moves and captures, date).

Feedback. If you rate a match or send a comment, we store the rating, your message, the match outcome, its length and your interface language.

Analytics. Only if you accept cookies: aggregated usage events such as pages viewed, games started and finished, language changes and shares.

To provide the game and online matchmaking, and to keep your profile and history available — performance of a contract (Art. 6(1)(b) GDPR). To measure and improve the game through analytics — your consent (Art. 6(1)(a) GDPR), withdrawable at any time. To keep the service secure and prevent abuse — our legitimate interest (Art. 6(1)(f) GDPR).

We use processors that host and run the service on our behalf: our cloud database and authentication provider (hosting your account, profile, matches and feedback), our hosting/CDN provider, Google (sign-in and, with your consent, Google Analytics) and an AI speech provider used to generate the narrator audio. Narration audio is produced from a fixed script — it never contains your data. We do not sell your data and we do not use it for advertising.

Some providers process data outside the European Economic Area. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.

Account, profile and game history: until you delete your account or ask us to remove them. Online match records: automatically retired shortly after a match ends or is abandoned. Feedback: up to 24 months. Analytics: up to 14 months in aggregated form.

You may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. You may withdraw analytics consent at any time by declining cookies or clearing this site's storage in your browser. Reach us through the contact details in our Imprint — we answer within 30 days. You also have the right to complain to your national data protection authority.

LEGATUS is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

We may update this policy; the date above always reflects the current version. Material changes will be announced on the site.