This policy describes how Fieldcraft Games, the developer and publisher of Field of Command, handles personal data on fieldofcommand.com and its subdomains. It is written to meet UK GDPR and PECR.
Match records: outcomes, duration, faction, timestamps.
Creating an account
Your email address and a hashed password, handled by our authentication provider Clerk.
A Clerk user ID, stored on your player row to link the account to your progression.
A marketing consent flag, set only if you tick the opt-in box. Timestamped; defaults to off.
Site & infrastructure
IP addresses, held briefly for rate limiting (up to one hour).
Analytics cookies from Google Analytics 4, only if you accept the cookie banner. IP anonymisation is enabled.
Microsoft Clarity session replays and heatmaps on the marketing site, only if you accept the cookie banner: clicks, scrolls, and page interactions, with typed text masked by Clarity.
Aggregate, cookie-free traffic and performance measurements provided by Cloudflare (Cloudflare Web Analytics / Insights). These set no cookies and do not track you across sites.
If you decline the cookie banner, we record a single rejection event so we can measure how many visitors decline: a hashed (pseudonymous) form of your IP address, your browser's user agent, and the time. Declining sets no cookies.
Bug reports
The category, title and description you enter.
Game version, build target, browser or desktop platform, GPU, viewport, language, timezone and the game screen or battle context.
Recent technical errors and a short, redacted log. Tokens, secret query values and email-like text are removed before upload.
Client-reported player, account, career, posting and session identifiers when available. These are diagnostic hints and are not used to access your account automatically.
An optional screenshot and an optional current campaign save or single-player battle snapshot, only when you leave those boxes selected and confirm the report.
Technical logs and saves are stored privately. Screenshot links use a long random address, but anyone who receives that address can view the screenshot until it is deleted.
We do not collect real names, addresses, phone numbers, or payment information.
4. How we use it
Authenticate your account, save progression, and run matchmaking.
Reconnect you to matches, detect forfeits, and prevent cheating.
Send marketing email only if you have opted in. Every such email carries a one-click unsubscribe link.
Aggregate analytics to improve the game and site.
Investigate, reproduce and fix problems that players choose to report.
We do not sell, rent, or trade personal data. Signing up for an account is not consent to marketing; the two are separate choices.
5. Retention
Account email and profile: kept while your account is active. On deletion, removed within 30 days.
Anonymous progression (no account): retained while the UUID is active. Purged after 12 months of inactivity.
Match records: retained for 12 months, then purged or anonymised.
Marketing consent changes: timestamps retained for the life of the account to evidence compliance.
IP addresses: up to one hour.
Analytics data: 14 months in Google Analytics.
Microsoft Clarity: session recordings up to 30 days; aggregated heatmap data up to 13 months.
Cookie rejection events: 90 days.
Bug-report screenshots, logs and saves: 90 days.
6. Processors
Cloudflare — hosts the site and game backend (Pages, Workers, D1) and provides cookie-free aggregate web analytics. Policy
Google — Google Analytics 4, with IP anonymisation. Policy
Microsoft: Microsoft Clarity session replay and heatmaps on the marketing site, loaded only after cookie consent. Policy
GitHub — stores the readable bug-report summary in our private project repository. Full logs and saves are not copied there. Policy
These processors may transfer data to the US under UK ICO-approved Standard Contractual Clauses.
7. Cookies
We set analytics cookies only with your consent. You can accept or reject them via the cookie banner. Cloudflare's aggregate web analytics sets no cookies.
Name
Purpose
Duration
Type
cookiesAccepted
Records your cookie choice
Persistent
Essential
_ga
Google Analytics — distinguishes users
2 years
Analytics
_ga_*
Google Analytics — session
2 years
Analytics
_clck
Microsoft Clarity: distinguishes users
1 year
Analytics
_clsk
Microsoft Clarity: links actions within one session
1 day
Analytics
8. Your rights
Under UK GDPR you can request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You can also withdraw any consent you have given.
For a bug report: include the report number shown after submission so we can locate its summary and diagnostic attachments.
To unsubscribe from marketing: click the unsubscribe link in any email, or toggle the switch on the Commander Profile panel in-game.
To delete your account: open the profile panel in-game and use the "Manage account" link. Your Clerk account is removed and unlinked from your player row within 30 days.
9. Security
Traffic is encrypted with TLS. Passwords are hashed by Clerk; we never see plain text. Rate limiting, Cloudflare DDoS protection, and a web application firewall guard public endpoints. We do not store payment data.
10. Automated decisions
We do not carry out automated decision-making with legal or similarly significant effects. Rate limiting is the only automated control and does not fall within that definition.
11. Children
The game and site are not directed at children under 13. If you believe data from a child has been collected, contact us for deletion.
12. Changes
When this policy changes we update the date above. Continued use after a change indicates acceptance.
13. Complaints
You can lodge a complaint with the UK Information Commissioner's Office: