Privacy Policy

In short

FragFiesta (formerly FPStrike) is a free browser game at fragfiesta.com, made by multiplayerfun.com. Every mode is playable as a guest without signing up. We only store what the game needs; we show no ads, and we never sell or share your data with third parties.

As a guest

Your browser (localStorage) keeps your settings and a random ID so your level, stats and guest coins belong to this browser. The server stores your player name and match results (matches, wins, kills, XP) for the leaderboard.

With an account (name and password)

We store the username you choose, a salted scrypt hash of your password (never the password itself), your coins, the cosmetics you bought and wear, and your sign-in session tokens.

Sign in with Google

If you use “Sign in with Google”, Google sends a signed credential that our server verifies. From it we store only a one-way hash of your Google account’s internal ID so we can recognise you next time. We do not store your e-mail address, name or profile picture, and we request no other access to your Google account. The suggested player name is based on your Google first name, but you choose it.

Visitor statistics

We measure traffic with our own cookie-free counter: page, play time, device type (desktop/mobile), language and referring site. Unique visitors are counted with a daily-rotating, irreversible hash; IP addresses are not stored. When you connect, our server derives your country from the IP address locally (DB-IP database). We use it only for aggregate statistics without names (e.g. how many players came from a given country) and as a suggestion in the flag picker; IP addresses are not stored, and the derived country is neither stored together with your player name nor published.

Analyzza

We also use Analyzza, a cookie-free, Umami-based analytics service: page views, country, device, browser, referring site and anonymous game events (e.g. match start / end, mode, map, placement, sign-up). We never send player names, e-mail addresses or other identifiers, and it sets no cookies. We do not use Google Analytics.

Flag next to your name (optional)

If you like, you can choose a country flag to be shown next to your player name (scoreboard, kill feed, chat, name tags, “Live now”, end-of-match screen; with an account also on the leaderboard, your profile and in Recent matches). This is entirely voluntary: we ask you once (“Yes, show it” / “No”) and show a flag only if you say yes; there is no flag by default, and you can pick any country or “None”. What we store: only the two-letter country code you chose — with an account in your account; as a guest only in your browser (localStorage), which sends it to the server when you join a match, where it is kept in memory for that match only. Purpose: showing the flag next to your name. Legal basis: your consent (GDPR Art. 6(1)(a)). Retention: until you remove it, or until your account is deleted. Withdrawal: any time by choosing “None” under Settings → My profile: it is deleted from your account immediately, disappears from the running match, and is no longer shown on public pages. Withdrawal does not affect the lawfulness of the display before it. The country derived from your IP address is only offered as a suggestion in the picker, visible only to you; it is never placed next to your name automatically.

Best moments

Replays are made of outstanding kill streaks and are publicly viewable, with player names, in the “Best moments” list.

Voice chat

Voice chat is off by default. It only works if you turn it on in Settings, allow microphone access in your browser and explicitly join a voice channel (party or team); you only connect to players who joined the same channel. Audio goes directly and encrypted (WebRTC, peer-to-peer) to the other participants: it does not pass through our server and is never recorded or stored. The server only relays the technical signalling needed to set up the connection and does not log it. We use Google’s public STUN server (stun.l.google.com), which sees your public IP address. Because the connection is direct, other members of the channel can technically see your IP address — only join with people you trust. You can mute, block or report anyone; these settings are stored in your own browser.

Social features

For registered players we store the friend list, pending friend requests (up to 60 days), blocked players and privacy settings (who can contact you, “appear offline”). Of private messages between friends we keep at most the last 100 per pair, for 30 days, then delete them automatically. Online status (menu / which mode and map) is not saved, only shown live to friends, and can be turned off. For a report we store the reporter’s and the reported player’s names, the reason, the note (max. 300 characters), the match details (mode, map), the last 10 chat lines of the match and the last 10 private messages between the two, for 90 days, for moderation only. Automatic and moderator chat mutes are kept until they expire and the mute log for 90 days; for guests we use a salted one-way hash instead of the IP address. Blocks and mutes set as a guest are stored only in your browser. Messages containing an e-mail address, phone number or link are neither delivered nor stored.

Feedback, forum, newsletter, rewards

When you send feedback we store the rating, the things you marked as missing, your text, language, mode/map, device type, your account name (if signed in) and a non-reversible hash of your IP address (for abuse filtering). We only store an e-mail address if you explicitly tick that we may contact you. Feedback is kept for at most 2 years. Your forum posts (title, text, time, account name, votes) are public until you or a moderator ask for deletion; for reports we store the reporter’s account name and the reason, for moderation only. You only subscribe to the newsletter with explicit consent (unticked by default): we then save your e-mail address and the time of consent to your account; you can unsubscribe any time in the account box, which deletes the e-mail address. For coin rewards as a guest we store a pending balance tied to your browser’s random ID for up to 90 days; it moves to your account when you register.

Retention and deletion

Data is kept while the game runs or until you ask for deletion. To delete your account and stats, use the contact form on multiplayerfun.com (include your player name); we handle requests within 30 days. You can remove data stored in your browser at any time by clearing your browser data.

Third-party assets

Country flags are drawn with the “Twemoji Country Flags” font (from the country-flag-emoji-polyfill package, MIT licence, © 2022 TalkJS), served from our own server — your browser does not contact any third party for it. The flag artwork comes from the Twemoji project (© Twitter, Inc. and other contributors), licensed under CC BY 4.0; changes: subset to the flag glyphs only.

Contact

Questions and requests: the multiplayerfun.com contact form.