← Back to Hobbyist Games

Privacy

Privacy Policy

Last updated 14 August 2026

The short version

Playing on your own sends us nothing. Playing ranked online stores your Steam ID, your username, your fighter and your fight record, so the ladder works. We never see your email, your password, or your payment details. You can have your account deleted whenever you like, by emailing info@submissionsaga.com.

What we collect

Only when you play online

Single player needs no account and sends us nothing. Everything below applies only if you play ranked online matches, which signs you in through Steam.

Your Steam ID, which we map to an internal id that means nothing outside our server
Your chosen username, and the time you last changed it
Your belt rank, ladder rating, division, and the two numbers the rating system uses to track how certain it is about you
The result of every ranked match: who you fought, whether you won, how it ended, and when
A separate turn-by-turn log of those same matches, recording what each player played on each turn, which is how we detect cheating
The fighter you bring to a match: archetype, stats, stamina, equipped moves, unlocked skills, appearance, cosmetics, active pet and any active buff
Your daily and weekly reward claim counts
When your account was created, and when you last played a match

What we collect

Friends and challenges

If you add friends in game, we store the friendship and the requests that led to it. A challenge you send sits on the server for the minute it stays open, and it carries the fighter you are bringing, because the other player's game needs that to build the match.

Who you are friends with
Friend requests you have sent or received, including ones that were declined
Challenges you have sent or received, until they are accepted or expire

A declined request is kept on purpose, and it is the only spam control there is. There is no player search, so the only people who can reach you are people you have already played or who know your exact username, and a decline that sticks caps each of them at one attempt. All of it is destroyed when you delete your account, declined requests included.

What we collect

What we never ask for

On Steam there is no account signup, so there is nothing to fill in and nothing for us to lose. Nothing in this list is collected to play, or held against your account.

No email address
No password
No real name
No payment information. Valve handles every purchase and we never see your card, billing address, or anything like it
No location data
No contacts
No device identifiers

This list describes the Steam version, which is the only version released. If we release on mobile, signing in with Apple or Google would mean we receive an email address, and we will update this page and its date before that happens rather than after.

Optional

If you want game updates

You can give us your email address to hear about the game. That is entirely your choice, it is never required, and it has nothing to do with playing.

It goes to a mailing list on this website, held in Google Firebase, which is a different system from the game server. Your address and your game account are not connected, and cannot be
We use it to tell you about the game and nothing else
Every email has an unsubscribe link, and leaving removes your address
We do not sell it or share it with anyone

This is the only email address we ever hold, and you have to hand it over on purpose. Signing in to play never gives us one.

What we collect

IP addresses

When your game asks our server to sign you in, we read your IP address and use it as a rate-limit key, so that one endpoint cannot be hammered by bots. The rate limiter holds it for the length of its window, which is one minute, and then it is gone. It is never written to our database and never attached to your account.

What we will not claim is that no trace of it exists anywhere. Cloudflare, which runs our server, and Google Firebase, which issues your sign-in token, both log IP addresses as part of doing those jobs, the way any host and any login service does. That is their logging under their own policies, and not something we collect, keep, or can read back out.

Visibility

What other players can see

Ranked play is public by design. Other players can see your username, your belt, your ladder rating and where you sit on the ladder, and the results of matches you have played.

Anyone you have played, and anyone who knows your exact username, can send you a friend request. There is no way to search for a player, so that is the whole of it.

Nothing that identifies you outside the game is shown to other players. Your Steam ID is not, and if we add other sign-in options later, those will not be either.

Third parties

Who else touches your data

Valve. When you sign in, we send Steam a ticket from your game to confirm you are who you say you are. Steam sends back your Steam ID
Google Firebase. This issues the token your game uses to prove it is signed in, and separately it holds this website's mailing list. Firebase only ever receives our internal id, never your Steam ID
Cloudflare. This hosts our game server and our database
Vercel. This hosts this website, including the form that takes your email address if you join the mailing list

We do not sell your data, and we do not share it with advertisers. There is no advertising or analytics tracking in the game.

Your rights

Deleting your account

To delete your online account, email info@submissionsaga.com and tell us your in-game username. We hold no email address for your account, so we will ask you to confirm the request from the Steam account it belongs to, and then we run the deletion by hand. It is not a request we review or refuse; the checking is only to be sure the account is yours.

This is what deletion actually does, precisely, because it is worth being exact about.

The link between you and your Steam account is destroyed, so nothing left in our database points back to your Steam identity
Your ladder record is destroyed: belt, rating, division, and last played time
Your reward claim counters are destroyed
Your friendships are destroyed, on both sides, along with every friend request and challenge either of you sent the other, declined ones included, and any fighter we were holding for a challenge still open
Your past matches stay, but your id in them is replaced with an anonymous placeholder, so they no longer point to you
Your username is retained and permanently retired

The username is kept on purpose. Handles appear on leaderboards and in other players' friends lists, and if a retired one could be claimed again, somebody could convincingly impersonate a player who left. Nobody can take your handle after you go, including you.

Your rights

One exception, for banned accounts

If an account was banned, deleting it does not remove the link to the Steam account it signed in with. Everything else on the list above still happens. That one link stays.

It is there so that a ban cannot be shed by deleting the account and signing straight back up. It is the only thing deletion does not erase, and it applies only to accounts that were banned.

Your rights

How long we keep things

While your account exists, we keep the data above. There is no automatic expiry, because a ladder rating and a match record are only meaningful as a continuous history.

Deleting your account is the way to end that. Once we have confirmed the account is yours, the erasure itself is immediate and cannot be undone.

Age

Players under 13

Submission Saga is intended for players aged 13 and over. We do not knowingly collect data from anyone under 13.

If you believe a child under 13 has created an online account, email info@submissionsaga.com and we will delete it.

Changes

If this policy changes

If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes will also be announced on the game's Steam page.

Contact

Who we are

Submission Saga is made by Nathan Markham, trading as Hobbyist Games, based in the United States. That is who is responsible for the data described on this page.

For any question or request about your data, email info@submissionsaga.com. Depending on where you live you may have additional rights over your data under local law, and you can use that address to exercise them.