Privacy Policy

Last updated: March 4, 2026

1. Introduction

Welcome to Barstow. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web-based multiplayer game.

2. Information We Collect

Account Data

When you create an account via OAuth (powered by WorkOS), we receive your email address and display name from your identity provider. We store this information to maintain your account.

Guest Accounts

You can play without creating an account. Guest accounts are assigned a random username and identified by a secure token stored in an HTTP-only cookie.

Usernames

You may set or change your display username. Usernames are visible to other players in game lobbies and matches.

3. Cookies and Tokens

We use the following HTTP-only cookies:

guest_token — Identifies guest accounts across sessions.
access_token — Short-lived JWT for authenticated requests.
refresh_token — Used to obtain new access tokens.

4. How We Use Your Information

We use the information we collect to:

Provide and maintain the game service
Authenticate your identity and manage sessions
Display your username to other players
Improve game performance and fix bugs
Prevent abuse and enforce our terms

5. Game Telemetry

We collect anonymous game telemetry data including match events and player statistics. This data is used to balance gameplay, detect issues, and improve the experience. Telemetry data is associated with your account ID but does not include personal information beyond your username.

6. Third-Party Services

We use WorkOS for authentication. When you sign up or log in via OAuth, your authentication flow is handled by WorkOS. See the WorkOS Privacy Policy to learn how they handle your data.

7. Data Retention

We retain your account data while your account is active. Guest data may be periodically purged after extended inactivity. Game telemetry is retained indefinitely.

8. Your Rights

You have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent at any time

9. Children's Privacy

Barstow is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Contact Us

Questions about this policy? Email contact@navoke.com.