Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains how Salman Aljohani ("we", "us", "our") collects, uses, shares and protects personal information when you use Past Strike, including the website at https://paststrike.com and the game (the "Service"). We designed the game itself to collect as little personal data as possible. Please also read our Terms of Service.

1. Who Is Responsible

The controller responsible for your personal data is Salman Aljohani, an individual based in the Kingdom of Saudi Arabia. You can contact us at contact@paststrike.com.

2. Summary

3. Information We Collect

3.1 Guest identifier. A random identifier generated by your browser and kept in its local storage. Our server stores only a one-way hash of it, which is used to keep your guest rank and statistics.

3.2 Account data (only if you create an account): your username; your password, stored only as a salted scrypt hash; recovery codes, stored only as hashes; your two-factor authentication secret, stored encrypted (if you enable it); the dates of account creation, last login and acceptance of the Terms; a failed-login counter; and records of active sessions (random session tokens stored as hashes).

3.3 Gameplay data: the in-game name you choose, your color, rank points, tier, best mass, kills, games played and last played date, as well as in-match data (positions, actions and scores) processed in real time.

3.4 Technical and security data: your IP address, connection times, and events such as joining a match, account creation and deletion, rate-limit hits and bans, recorded in server logs; and standard technical information automatically sent by your browser (such as browser type), which we do not keep beyond those logs.

3.5 Data stored on your device: language, sound setting, selected color, last used name and the guest identifier (in local storage), and, if you are logged in, a strictly necessary session cookie named "ec_s" (HttpOnly, SameSite=Strict, valid for up to 60 days).

3.6 Advertising data collected by Google: when ads are displayed, Google and its advertising partners may collect your IP address, device and browser information, cookie and advertising identifiers, approximate location derived from your IP address, and information about the ads you see and interact with, in order to deliver, personalize (where permitted), measure and protect ads against fraud. This collection is performed by Google under its own policies; we do not receive this data in identifiable form.

3.7 Voluntary support: if you choose to support us through Ko-fi, Ko-fi and its payment processor PayPal process your payment. We receive the information Ko-fi and PayPal make available to payment recipients (such as your name, email address, amount, currency, date and any message you choose to leave) and use it only to record the payment and meet legal and accounting obligations. We never receive your card or bank details.

3.8 Messages you send us: if you email us, we receive your email address and the content of your message.

4. How We Use It and Our Legal Bases

We do not use your data for automated decision-making that produces legal or similarly significant effects. Automated anti-abuse measures (such as rate limits) can be reviewed on request.

5. Cookies, Local Storage and Advertising

5.1 Strictly necessary storage. A session cookie for logged-in users and local storage for your guest identifier and preferences. These are required to provide the Service you request and do not require consent.

5.2 Advertising cookies. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. Cookies that may be used include Google cookies such as "__gads", "__gpi" and "__eoi" on our domain and cookies on Google's own domains (such as DoubleClick). In the EEA, the UK and Switzerland, personalized advertising and non-essential advertising cookies are used only with your consent, which you can give, refuse or withdraw through the privacy message and the "Privacy and cookie settings" option shown on the site.

5.3 Your choices. You can opt out of personalized advertising by visiting Google Ads Settings, and you can opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info or www.youronlinechoices.eu. Learn more about how Google uses information from sites or apps that use its services. You can also block or delete cookies in your browser; deleting local storage may remove your guest progress.

6. What Is Public

Your in-game name or username, verified badge, color, tier, scores and rankings are visible to other players and on public leaderboards.

7. Sharing

We do not sell your personal information for money. We share personal information only:

8. Where Data Is Stored and International Transfers

Our game servers are located in Germany. Google, Ko-fi and PayPal may process data in other countries, including the United States. When data is transferred outside your country, we and our providers rely on the safeguards required by applicable law, such as adequacy decisions or Standard Contractual Clauses.

9. How Long We Keep It

10. Security

We use industry-standard measures, including encryption in transit (HTTPS/TLS), salted scrypt password hashing, hashed recovery codes and session tokens, encrypted two-factor secrets, optional two-factor authentication, login rate limits and account lockouts, strict HttpOnly and SameSite cookies, a Content Security Policy, server isolation and access controls. No method of transmission or storage is 100% secure. If a breach affecting your data occurs, we will notify you and the competent authorities where required by law.

11. Your Rights

Depending on where you live, you may have the right to access your data, receive it in a portable format, correct it, delete it, restrict or object to its processing, and withdraw consent at any time where processing is based on consent (withdrawal does not affect earlier processing). You can exercise the main rights directly in the game: "Download my data" and "Delete account" in the account menu, and "Delete my guest data" for guests. Advertising consent can be changed through the site's privacy settings. For any other request, contact contact@paststrike.com. We will respond within the period required by law (normally within 30 days) and may need to verify that the request comes from the account holder. We will never ask for your password or recovery codes. You also have the right to lodge a complaint with your local data protection authority.

12. Regional Information

12.1 European Economic Area, United Kingdom and Switzerland: the rights described in Section 11 are provided under the GDPR, the UK GDPR and Swiss data protection law. Our legal bases are listed in Section 4. Advertising consent is collected through a Google-certified consent management platform that supports the IAB Transparency and Consent Framework.

12.2 United States — California (CCPA/CPRA) and other U.S. states: in the last 12 months we collected the following categories of personal information: identifiers (username, IP address, random device identifier, cookie and advertising identifiers); internet or other electronic network activity (gameplay, security logs and ad interactions); commercial information (records of voluntary support payments); approximate geolocation derived from IP address; and inferences limited to anti-cheat signals and, through Google, advertising interests. Sources: you, your device and Google. Purposes: those listed in Section 4. We do not sell personal information for money. However, allowing Google to use cookies and identifiers for personalized advertising may be considered "selling" or "sharing" for cross-context behavioral advertising under some U.S. state laws. You can opt out through the "Do not sell or share my personal information" option in the site's privacy settings (when shown in your state), by enabling Global Privacy Control in your browser, or by contacting us. We do not knowingly sell or share the personal information of consumers under 16. You have the right to know, access, correct and delete your personal information, and not to be discriminated against for exercising your rights. We do not use sensitive personal information for purposes that would require a right to limit its use. You or your authorized agent may submit requests to contact@paststrike.com.

12.3 Canada (PIPEDA): you may access and correct your personal information and withdraw consent as described above by contacting our privacy contact at contact@paststrike.com. You may also complain to the Office of the Privacy Commissioner of Canada.

12.4 Australia (Privacy Act 1988): we handle personal information in accordance with the Australian Privacy Principles. You may request access or correction, and may complain to us first and, if the matter is unresolved, to the Office of the Australian Information Commissioner (OAIC).

12.5 Brazil (LGPD): you have the rights set out in Article 18 of the LGPD, including confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing and revocation of consent. Contact us at contact@paststrike.com.

12.6 Saudi Arabia (PDPL) and the United Arab Emirates: we process personal data in accordance with the applicable Personal Data Protection Law, including your rights to be informed, to access and correct your personal data, to request its destruction and to withdraw consent. You may also complain to the competent authority (in Saudi Arabia, the Saudi Data and Artificial Intelligence Authority, SDAIA). Contact us at contact@paststrike.com.

13. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the age of digital consent in their country without parental consent). If you believe a child has provided us with personal information, contact contact@paststrike.com and we will delete it.

14. Changes to This Policy

We may update this Policy from time to time. We will post the updated version on this page with a new date and, for material changes, give notice within the Service before they take effect.

15. Contact

Salman Aljohani — contact@paststrike.com