Privacy policy

Last updated 28 October 2026

This policy covers this website and our games, starting with Salpakan Tactics! on the web, Android and Steam. They are run by Dragon Scale (“we”). It explains what we collect, why, who else sees it, and how you can delete it.

What we collect

Your account: your username and an account id; your email address, if you sign up with a password or with Google (Steam gives us none); your password, stored hashed and never in plain text; your Steam id, if you use Steam.
Your profile, if you add them: a hometown you type or pick (country, region, city) for local leaderboards; a profile photo, a guild logo or custom flag pictures. Other players can see these. We never read your device’s location, contacts, camera or microphone.
Your games: matches, moves and results, your rank, XP, credits, missions and achievements, and a daily summary of when you play (sessions, matches and minutes per platform).
Messages: global and match chat, private messages and shoutouts. Text is filtered for profanity, and you can report and block other players.
Purchases: what you bought, the price, how you paid and the payment’s reference number.
Voice chat (browser only, when you press Join voice) goes directly between the players’ browsers. We only help connect them and never record it.
This website: our host keeps ordinary server logs (your IP address, the page and the time) to keep the site running and safe.

Why we use it

to run your account and keep you signed in on your devices;
to run online matches, leaderboards, friends, guilds and chat;
to take payments, give you what you buy, and restore it;
to keep the games fair and safe, by checking that players are people, handling reports and bans;
to understand how our games are used, so we can improve them;
to send you news about our games by email, which you can opt out of at any time.

Payments on this website

When you buy an item in a web game, you pay on this website. For a GCash payment you send money to our GCash account and upload a screenshot of your receipt. We keep that screenshot with your order. An AI service reads it to check the amount, the receiving account, the reference number and the date, and a member of our team may look at it too. We use what it shows only to confirm your payment and to answer questions about it; we never see your GCash PIN or login. PayPal, when it opens, will handle its payments under its own policy.

Purchases in the Android and Steam apps are paid through Google Play and Steam, which handle the payment themselves: we never see your card details.

Other players see your username, profile photo, hometown, rank, match results, and what you write in chat.
Our own admin system keeps a copy of player, usage, order and payment records for support and reporting, and adds players to our email list unless they opt out.
Service providers: our hosting providers run the servers; an AI provider reads payment receipts (as above); Cloudflare runs the “are you a person?” check before the web game; Google Play and Steam handle app purchases and sign-in; Google handles “Continue with Google”; GIPHY serves the GIFs you pick, so it sees your IP address when a GIF loads.
Analytics and advertising measurement, if we switch them on: the browser game may load Google Analytics, Google Ads, Google Tag Manager, the Meta Pixel and the TikTok Pixel, which set their own cookies; the Android and Steam games send events (app opened, sign-up, match ended, purchase) to our server with a random install id, which passes them to Google Analytics and Meta for measurement.
Ads: the Android game may show an ad from Google AdMob after a finished game, unless you bought No Ads. AdMob uses your device’s advertising id under Google’s own policies. There are no ads on Steam or the web.

We don’t sell your personal data.

How long we keep it

We keep your data while your account exists. Payment records, including receipt screenshots, are kept as long as the law requires us to keep records of sales. When you delete your account it is erased with everything in it; we keep only the old account id and the date it was deleted, so our other systems can erase their copies too. Stores and payment providers keep their own records under their own policies.

Deleting your account

You can delete your account at any time: in the game under Settings → Delete account, or on this website at https://dragonscalegames.digital/delete-account. This erases your profile, items, purchase history, friends, messages and matches, and it can’t be undone.

Cookies

This website sets a session cookie (it keeps forms working and remembers the quick check) and the web game remembers that you passed the check for 30 days. Cloudflare’s check may set its own cookie. The game keeps you signed in on your device. Analytics cookies are set only by the tools listed above, when switched on.

Children

Our games are meant for players aged 13 and over. If you believe a younger child has given us personal data, write to us through the support page and we will delete it.

Security

Everything travels over encrypted connections (HTTPS and WSS), passwords are stored hashed, and payment receipts are kept where only our team can see them.

Your choices and rights

You can see and change your profile in the game, opt out of our emails, and delete your account. Depending on where you live (in the Philippines, under the Data Privacy Act of 2012), you may have further rights, such as getting a copy of your data, having it corrected, or objecting to how it is used. To use them, write to us through the support page.

Changes

If this policy changes, we will update the date at the top. Big changes will be announced in our games.

Contact

Questions about privacy? write to us through the support page.