Privacy Policy

Who we are

CSBrowser (playcsbrowser.com) is a free, browser-based multiplayer shooter. Playing needs no account and there are no payments; signing in with Google is optional. Questions about this policy go to support@playcsbrowser.com.

What we collect

When you visit the site. We use Google Analytics to count visits and see how people find and use the game: pages viewed, the referring site, approximate location, device and browser type, and clicks on the main play buttons. When you open a shared room link, that first visit is labeled as coming from a room link so we can tell shared visits from direct ones; the room code itself is not part of that label.

When you play online. To put you in a room, our room server receives:

• the nickname you play under (up to 16 characters, generated for you until you change it);
• your country, worked out by Cloudflare from your connection and shown to other players as a flag. Your IP address itself is not stored with it;
• a random player ID kept in your browser so the server can recognize the same browser across rooms. It is never shown to other players;
• your team, seat and ready status, and your in-game actions while a match runs;
• if the host sets one, the room password, stored only as a salted hash, and invite links, stored only as a hash.

Other players in your room see your nickname, flag, team and score. There is no text or voice chat.

IP addresses. To stop abuse, the room server limits how often one connection can create rooms, join rooms and get new player IDs. It does this with a one-way hash of your IP address, not the address itself.

If you sign in with Google (optional). We receive your Google name, email address and avatar, and create an account for you. When you create the account we also store the IP address, locale and referral source (utm_source) from that request, and while you are signed in we store a session record with your IP address and browser user-agent. Signing in is never required to play.

When you contact us. The contact form sends us your email address, your name if you give it, your message, the site language, the page you wrote from and your browser's user-agent. Your IP address is used to rate-limit the form.

Cookies and analytics

Google Analytics sets cookies (such as _ga) that tell repeat visits apart. Choosing a language also stores a PARAGLIDE_LOCALE preference cookie in your browser to remember it. If you choose to sign in, our server also sets a first-party session cookie that keeps you signed in; it is not set if you never sign in. You can block or delete cookies in your browser settings, use a content blocker, or install Google's Analytics opt-out add-on. The game works the same either way.

What stays on your device

These live in your browser and are not sent to us:

• Settings: nickname, graphics quality, mouse sensitivity, field of view, volume and similar preferences.
• Replays: your last 20 recorded matches, kept in browser storage (IndexedDB). They are never uploaded. A replay video you export is made in your browser and saved as a download.
• Tab state: short-lived room session details, kept only for the current tab.

The random player ID above is stored here too, and is sent to our room server only when you use multiplayer. Clearing your site data removes all of this.

How we use information

We use this information to run matches and the lobby, keep rooms fair and free of spam, understand which features people use, fix problems, and answer your messages. We do not sell personal information, and we do not use it for advertising.

Who processes it

• Cloudflare hosts the site and room server (Workers, Durable Objects, D1) and delivers contact-form email. As our infrastructure provider it processes IP addresses and request data to deliver and protect the service.
• Google provides Google Analytics.

We may also disclose information if the law requires it or to protect players and the service.

How long we keep it

• Room data is deleted when the room closes. A room closes once everyone has left; a room nobody joins closes after about 10 minutes. An idle seat is released after about 5 minutes.
• Rate-limit records (hashed IPs) expire after 10 minutes to 24 hours, depending on the limit.
• Analytics data is kept by Google for a limited period, at most 14 months.
• Contact messages stay in our support inbox for as long as we need them to handle your request.
• Data on your device stays until you delete it.

Children

CSBrowser is a shooter that depicts combat violence. It is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has sent us personal information, email us and we will delete it.

Your rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to ask what we hold about you, to have it corrected or deleted, or to object to its use. Email support@playcsbrowser.com. If you signed in, you can email us to access, correct or delete your account and the data tied to it. If you never signed in, we usually hold very little that can be linked to you, and you can delete everything on your device yourself. You may also complain to your local data-protection authority.

Changes

If this policy changes, we will update it here and change the date at the top.

Contact

support@playcsbrowser.com