Privacy Policy

Last updated: July 14, 2026

1. Introduction

Welcome to Barstow. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web-based multiplayer game.

2. Information We Collect

Account Data

When you create an account via OAuth (powered by WorkOS), we receive your email address from your identity provider and store it to maintain your account. Your in-game username is generated for you — we do not import a name from your provider.

Guest Accounts

You can play without creating an account. Guest accounts are assigned a random username and identified by a secure session cookie. Guests have no email address on file.

Usernames

You may change your display username. Usernames are visible to other players in game lobbies and matches.

3. Cookies

We use the following HTTP-only cookies:

session — A signed token that identifies your account (guest or registered) for about 30 days. It carries only your account identifier, not your email or name.
return_to — A short-lived cookie that remembers which page to send you back to after signing in.

4. How We Use Your Information

We use the information we collect to:

Provide and maintain the game service
Authenticate your identity and manage sessions
Display your username to other players
Improve game performance and fix bugs
Prevent abuse and enforce our terms

5. Game Telemetry

We collect anonymous game telemetry data including match events and player statistics. This data is used to balance gameplay, detect issues, and improve the experience. Telemetry data is associated with your account ID but does not include personal information beyond your username.

6. Third-Party Services

We use WorkOS for authentication. When you sign up or log in, your authentication flow is handled by WorkOS at the login and callback steps only; afterward your session runs on our own token. See the WorkOS Privacy Policy to learn how they handle your data.

7. Data Retention

We retain your account data while your account is active. Guest data may be periodically purged after extended inactivity. Game telemetry is retained indefinitely.

8. Your Rights

You have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent at any time

9. Children's Privacy

Barstow is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Contact Us

Questions about this policy? Email contact@navoke.com.