Privacy Policy
MapMelee is a free browser game for playing hex-and-counter battles, run by MapMelee, LLC (“MapMelee”, “we”). This policy says what we collect, why, who else handles it, and how to get it deleted. It is written to be read in five minutes.
What we collect
- Account. Your email address, and if you sign in with Google, Discord, Apple or Facebook, the name and profile picture that provider shares with us. We do not receive your password from any provider, and MapMelee has no passwords of its own.
- Profile. The display name and handle you choose.
- Play. The games you create, the boards, pieces and rules in them, the images you upload for them, the games you host or join, every move in those games, and your results and rankings.
- Invitations. If you invite someone by email, we store their address and the code we sent them so that the invitation can be redeemed.
- Assistant chats. Messages you send to the in-app assistant, so it can answer in context.
- Technical and usage. Standard server logs (IP address, browser, pages requested, timestamps), and product analytics: the pages you visit, the buttons you press and the actions you take, tied to your account once you sign in. Where you allow it, we also record your session so we can see where the game is confusing, with anything you type masked. Analytics and session recordings are processed by PostHog.
Why
To sign you in and keep you signed in, to run the games you play with other people, to show your name and record to your opponents, to send you the emails you asked for (magic links, invitations) and product emails you can switch off (see below), to understand how MapMelee is used so we can make it better, to answer questions in the assistant, and to keep the service working and secure. We do not sell personal information, show ads, or use your data for third-party advertising. Our only marketing is our own product emails, which you can switch off.
Cookies
We set cookies that hold your sign-in session and, briefly, the page to return you to after a magic link. PostHog analytics keep an identifier in a cookie and in local storage so that visits can be connected. Visitors from the EU, the EEA, the UK and Switzerland see a banner first: until they accept, analytics use no cookies or local storage and no session is recorded. There are no advertising or cross-site tracking cookies.
Who else handles your data
These providers process data on our behalf, under their own terms, and only as needed to run MapMelee:
- Supabase — sign-in and the account directory.
- Amazon Web Services — databases, file storage, game servers and outgoing email.
- Vercel — web hosting and aggregate analytics.
- PostHog — product analytics, session recordings, and sending our product emails.
- Mapbox — the map tiles under real-world battlefields; your browser fetches them directly from Mapbox.
- Anthropic — the model behind the in-app assistant receives the messages you send it.
- Google, Discord, Apple, Facebook — only if you choose one of them to sign in.
Sign-in providers give us only your email, name and picture. We never post to your accounts there.
Emails from us
We email the magic links and invitations you ask for. We also send account holders two kinds of product email: product news (new battles and features) and tips and milestones (getting started, rank-ups, friend invites). Every one of those has a one-click unsubscribe link, and you can switch each kind off in My Settings on the web or in the app.
What other players see
Your display name, handle, profile picture, record and rankings are visible to other players. Your email address is not, except to someone you invite by email, who sees that the invitation came from you.
Keeping and deleting
We keep your account and play data while your account exists. Email support@mapmelee.com from your account address to have your account deleted, or to get a copy of your data; we will do it within 30 days. When your account is deleted, we also delete your analytics profile and email preferences at PostHog. Moves in games you played against other people may stay in their game records without your name attached. Server logs are kept for a limited time and then discarded.
Children
MapMelee is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will remove it.
Where the data lives
Our servers are in the United States. If you use MapMelee from elsewhere, your data is transferred there.
Changes
When this policy changes, the effective date at the top changes and, for anything that matters, we tell you by email or in the app before it takes effect.
Contact
MapMelee, LLC · support@mapmelee.com