Privacy

This page explains what Oxyda Games stores about you and why. It covers this website, the Oxyda Games Launcher and our games, which all use the same Oxyda account.

What we store

• Your account: email address, password (stored hashed, never readable by us), and whether you turned on two-step verification. Your email is never shown to other players.
• Your Steam account, if you sign in with Steam or link it: your Steam ID and public Steam name. Steam tells us only that you signed in, never your Steam password or email. You can unlink it from your account page.
• Your Discord, Google or Microsoft account, if you sign in with it or link it: its account ID, your name there and the email address it gives us, with whether it confirmed that address. If you create your Oxyda account this way and nobody else uses that email, it becomes your account's email. We never see your password there, and we don't keep any access to that account after you sign in. You can unlink it from your account page.
• Steam copies of our games: when you sign in from a game bought on Steam, we record which Steam account the game's licence belongs to (its owner's Steam ID, which is someone else's when the game is shared through Steam Family Sharing), which Oxyda accounts played on that licence, and when. We use this to stop cheating and abuse on shared copies: staff can block online play on a licence. We don't get anything else from that owner's Steam account.
• Your public profile: username, display name, profile picture and "about you" text. Anyone can see these.
• Forum posts and threads you write, with their dates. They are public until you or a moderator remove them. Removed posts are kept for moderation and are not shown to anyone else.
• Chat messages in the launcher, readable by you and the player you talk to. Messages are not end-to-end encrypted: moderators can read a conversation when one of you reports it.
• Reports and moderation decisions (mutes, hidden posts), so moderators can keep the community safe.
• Sign-in sessions: the device, browser and IP address of each session, and for games the device name the game sends and when it was last used, so you can see and end them from your account page.
• Games you host: when you create a lobby in one of our games, it is listed under your username with the name and settings you chose, for the people you picked (everyone, your friends, or only those with its join code). Your IP address is used to check that players can reach your game and is given to each player who joins (that is how their game connects to yours). It is never shown on the lobby list and is not kept in the lobby's history once the lobby ends. Lobbies hosted through Epic Online Services' relay connect players through Epic instead, so joining players don't get your IP address.
• Games you own and the access codes you redeemed.

Why

To run your account and the services you use, to keep the community safe (moderation, abuse limits), and to deliver the games you have access to. We don't sell your data and we don't use advertising trackers on this site.

Where

Everything is stored on servers we operate ourselves. The website keeps no data of its own: it reads public information and sends your changes to our account service.

The website's pages are delivered by Cloudflare, which hosts the site on its network. Cloudflare sees your IP address and the pages you open, as any web host does, and keeps short-lived technical logs to deliver the site and protect it from attacks. Your password and account changes never pass through it: your browser sends them straight to our own servers.

Your choices

You can change your profile, email and password, link or unlink Steam, Discord, Google or Microsoft, and end sessions (including games you're signed in to) from your account. To get a copy of your data or to delete your account, write to the contact address on this site.

Cookies and local storage

We only use what sign-in needs: a session cookie (or the equivalent in your browser's local storage) for your Oxyda account. No analytics or advertising cookies.