Privacy Policy
Last updated: 29 October 2026
This policy explains what personal information Battle Code Arena collects, why, who else handles it, and the choices you have. It covers the Battle Code Arena apps for iPhone, iPad and Android, and the browser version at play.battlecodearena.com.
Battle Code Arena is made by Inuvera Ltd, a company registered in England and Wales. Inuvera Ltd is the data controller for the information described here. You can contact us about anything in this policy at support@inuvera.com.
The short version
- We collect your email address, so you can sign in. We also store the vehicles and programs you make, and whether you have a subscription.
- We don't show you ads. We don't use analytics or tracking tools, and we don't sell or share your information for advertising.
- Payments are handled by Apple or Google. We never see your card or bank details.
- You can delete your account, and what goes with it, from inside the app at any time.
What we collect
Your account
- Your email address. You sign in with a code we send to it. We use it to sign you in, and to contact you about your account or subscription if we ever need to. We don't send marketing email.
- An account identifier that our systems create, to keep your information together.
What you make and do in the game
- Your garage: the vehicles you build, their names, equipment and programs. These are stored with your account, so they're the same on every device you sign in on.
- League entries: when you publish a vehicle to the league, we store the version you published and its name, rating, record and results.
- Battles and replays: the battles your published vehicles fight in the league, and their replays.
Your subscription
If you subscribe, the App Store or Google Play tells us its status. We store:
- which store it was bought in, and which plan;
- whether it's active, and when it renews or ends;
- the store's reference for the purchase.
We don't receive your name, payment details or billing address.
Technical information
When the apps or the browser version talk to our servers, our hosting providers record technical details in their logs. These include your IP address, the time, and the request made. They're used to keep the service running and secure, and are kept only for a short time.
On your device
The apps and the browser keep some information on your device, such as your settings, your sound preference, and a copy of your garage so you can play offline. This stays on your device. Signing out or uninstalling removes it. In a browser, clearing the site's data removes it.
What other players can see
When you publish a vehicle to the league, other players can see:
- its name;
- its rating, record and results;
- battles it fought against their vehicles, as replays.
They can't see your email address. Choose vehicle names you're happy to have seen by others. Your programs are not shown to other players.
Why we use it (our legal bases)
Under UK and EU data protection law (the GDPR), we rely on:
- Contract: to provide the game you've signed up for. That means your account, your garage on every device, the league, and the subscription you've bought.
- Legitimate interests: to keep the service secure and working, prevent abuse (for example, offensive vehicle names), and fix problems.
- Legal obligation: where the law requires us to keep or disclose information.
Who else handles it
We use a small number of service providers to run Battle Code Arena. They handle information only on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Our database and sign-in: your account, garage, league and subscription status | United States |
| Amazon Web Services | Hosts the browser version and the servers that fight league battles | United States |
| Resend | Sends the sign-in emails | United States |
| Apple and Google | Handle your subscription and payment, under their own privacy policies | Worldwide |
Some of these providers store information in the United States. When information leaves the UK or EU, we rely on the safeguards the law provides. These are the UK and EU adequacy arrangements for the United States (the Data Privacy Framework), or standard contractual clauses.
We don't sell your personal information. We disclose it only if the law requires us to, or to protect the rights and safety of our players or others.
How long we keep it
- Your account, garage and subscription details: until you delete your account.
- League replays: a replay of a league battle is removed after 90 days unless a player has saved it.
- Server logs: a short time, typically no more than 30 days.
When you delete your account, we delete:
- your email address;
- your garage;
- your subscription details;
- your side of your league battles (your vehicles and their programs).
The results of league battles you fought stay in your opponents' records, with nothing linking them to you. Deleted information may stay in our providers' backups for a short time until it's overwritten.
Deleting your account
You can delete your account from inside the app: open SYS, then ACCOUNT, then DELETE ACCOUNT. It's the same in the browser version.
Deleting your account doesn't cancel a subscription. That's managed by Apple or Google. Cancel it in your App Store or Google Play subscription settings, or the store will go on charging you.
If you can't sign in, email support@inuvera.com from the address you used, and we'll delete the account for you.
Your rights
You have the right to:
- ask for a copy of your personal information;
- have it corrected;
- have it deleted;
- object to how we use it, or ask us to restrict it;
- receive it in a portable form.
To use any of these, email support@inuvera.com. We'll reply within one month.
If you're unhappy with how we've handled your information, you can complain to the UK Information Commissioner's Office (ico.org.uk). If you live in the EU, you can complain to your local data protection authority. We'd appreciate the chance to put things right first.
Children
Battle Code Arena isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.
Security
Information travels between the apps and our servers encrypted (HTTPS). Access to your information on our servers is limited to your own account. No system is perfectly secure, but we take reasonable steps to protect what we hold.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app before it takes effect.
Contact
Inuvera Ltd support@inuvera.com