Privacy policy

1. Controller

The game is operated by Jan Czudek, trading as DESIGAME, Czech Republic. Privacy questions can be sent to info@desigame.eu.

2. Guest session and device storage

The game issues an essential, random __Host-swc_session cookie. Only its cryptographic hash is stored on the server. Browser local storage under swarmcore:v1 remembers language, accessibility settings and local records. Server records hold the authoritative wallet, cosmetic ownership and mutation plan. Clearing local data does not delete an optional account, but an unregistered guest session may become unrecoverable.

3. Optional Swarm ID

If you create an account, we process the e-mail address and username you enter, salted one-way password verification data, a one-way hash of your recovery code, balances, inventory and account security events. The e-mail can be used as a sign-in identifier. E-mail verification and automated reset mail are not active in this release. Passwords and recovery codes are never stored in readable form. A callsign used in realtime play is visible to other players.

4. Realtime gameplay and statistics

To operate public and link-invited custom rooms, the service temporarily processes a random player identifier, room identifier and invite code, callsign, equipped cosmetic loadout, short-lived emote, control input, authoritative position, aim, swarm state, score, mutations, hits and connection timestamps. Standard rooms contain up to twelve live participants and may use clearly labelled AI fill; Endless rooms contain up to sixty real players and do not add bots. Custom invite links are unlisted, but anyone who receives a still-valid link may enter its lobby. Completed eligible matches store mode, arena number, placement, score, eliminations, shots, hits, chosen mutations and cosmetic-season XP so the player can view accuracy, win rate, mutation usage and season progress. Solo Lab is excluded. There is no player chat.

5. Payments

When the Prism shop is enabled, checkout is hosted by Stripe. Stripe processes payment details under its own privacy terms; Swarmcore does not receive complete card numbers. We retain checkout identifiers, price, currency, entitlement and refund or dispute status for fulfilment, support, fraud prevention and legal accounting obligations. The shop can be disabled independently through a server-side safety switch.

6. Voluntary feedback

If you choose Send feedback, we securely store the message, language, callsign, random player identifier, delivery status and time, and deliver a copy by email to info@desigame.eu so DESIGAME can review suggestions, investigate bugs and prevent duplicate or abusive submissions. Do not include passwords, payment details or other sensitive information. Feedback is retained while it remains useful for product review or until a valid deletion request is fulfilled. You can also contact DESIGAME directly at info@desigame.eu.

7. Hosting, flag images and security data

Hosting infrastructure necessarily receives IP address, time, requested path, browser information and security signals. Country-flag images are fetched from FlagCDN only when a flag collection or equipped flag skin is displayed; that image provider receives the ordinary technical request data needed to deliver the file. This data is used to deliver the service, rate-limit abuse and diagnose failures. Raw operational logs are retained according to hosting and legitimate security requirements.

8. Product analytics and play statistics

Swarmcore records aggregate first-party events such as a page view, selected game mode, successful account creation and the start of checkout. A social link may add source, medium and campaign labels; these labels are kept only for the current browser tab session so later steps can be attributed to that visit. These campaign-event records do not contain an IP address, full browser identifier, e-mail address, username or stable analytics user identifier.

Separately, operational play statistics store a random run identifier, the existing random game-profile identifier, mode, start and reported finish times, local play date and end reason. These pseudonymous records help measure second matches, next-day returns and incomplete runs. They do not create another cookie or identity and exclude the tutorial, Solo Lab and showcase recordings. Only aggregate reports are shown in the private owner dashboard; these records are not used for advertising profiles. A browser profile is not necessarily a distinct person.

9. Advertising and consent

Advertising appears only on the introductory screen. If AdSense is activated, Google and its advertising partners may process device identifiers, approximate location derived from an IP address, ad impressions, interactions and fraud-prevention signals. For visitors in the EEA, United Kingdom and Switzerland the advertising code remains gated until a Google-certified consent platform is configured. The consent message explains purposes and partners and records the available choices. If either advertising or the consent platform is disabled, only a non-tracking placeholder is rendered.

10. Legal basis and retention

Session, account, inventory and multiplayer processing is necessary to provide the features requested. Anonymous product analytics, voluntary feedback, security and service-integrity processing are based on the legitimate interest of improving, measuring and securing the game. Purchase records are retained for fulfilment and mandatory legal periods. Analytics events are kept only while useful for aggregate product decisions. Inactive guest room state may be deleted or anonymised; an account is retained until deletion is requested or the service's disclosed inactivity policy applies.

11. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing, and may complain to the Czech Office for Personal Data Protection. Contact info@desigame.eu. Include the Swarm ID username or support reference, never a password or payment card number.

12. What we do not access

• No ChatGPT or social-network login.
• No precise GPS location, contacts, camera or microphone access.
• No player chat or file uploads.
• No sale of personal information.

13. Children and changes

The game is intended for players aged 13 and over. Real-money purchasing is restricted to adults or a transaction completed with the account holder's permission. Material changes to accounts, payments, advertising or data use will be reflected here before activation.