Privacy policy

This page explains what Ninja Cursed Fight (NCF RPG) stores about you and why. Last updated 2026-10-16.

What stays on your device

The game itself (your village, ninjas and progress) is saved in your browser's local storage, together with your duel session code. We use no tracking cookies and no ads.

What we store on the server

• Account: an identifier, the name you show in the arena, and the creation and last-seen dates.
• Sign in with Discord or Google: your account identifier on that service, name, e-mail (if verified) and profile picture. We never receive your password or access to messages, contacts or files.
• Username and password (older accounts): the password is stored only as a cryptographic hash (argon2id).
• Duels: the champion snapshot you publish (your ninja's stats, jutsu and gear), results, rating and fight history.
• Security: your IP address is used on the spot to rate-limit attempts and is not stored with your account.

How we use it

Only to run the game: sign in on another device, match opponents, build the leaderboard and prevent cheating. We do not sell or share your data.

Who can see it

Other players see your arena name, your champion snapshot and your rating. The game staff can see account data for moderation, and every staff action is logged.

Deleting your data

Ask for account deletion at naruto-cursed-fight@googlegroups.com. You can also unlink Discord or Google in the game's Account tab, or revoke access directly in your Discord or Google settings.