Privacy policy

Effective 28 September 2026

Synergy Cascade is a multiplayer browser game for teams, run by Surnin Synergy Ltd, a company registered in England and Wales (company number 16770926, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom). We are the controller of the personal data described here. Questions and requests: [contact email].

We keep as little as we can: guests play without an account, and we sell no data and show no ads.

What we keep

Everyone who plays

• The nickname you type and your match score. The room keeps them while you play and for 10 minutes after you leave, so you can reconnect without losing your score. Chat messages are passed to the other players in the room and not stored.
• Your settings (nickname, controls, graphics, the last room) stay in your own browser's storage. They are not sent to us.
• The team leaderboard. In a host's room, your browser also keeps a random player key and sends it when you join; we store only a scrambled (hashed) copy, so the leaderboard knows you even if you change your nickname. For that leaderboard we keep the nickname you last played under and your numbers per day (kills and deaths in games with other people, time in the room). Anyone with the team's link sees its leaderboard; the host can take you off it. Solo games with bots aren't counted. During a paid Event, the same numbers also go to that event's results page.
• Connection data. Our hosting provider, Cloudflare, handles your IP address to deliver the game. Our server logs (connections, nicknames, errors) are kept by Cloudflare for a few days to fix problems.
• Page visits. We count visits with Cloudflare Web Analytics: pages, referring sites, countries and device types, in aggregate. It sets no cookies and does not identify you.

Hosts (people who sign in)

• From your Google account: your name, email address, profile picture link and Google account ID. Google's sign-in tokens are stored encrypted; we don't use them to access anything else in your Google account.
• Your sign-in session: a session cookie, and the IP address and browser the session started from. A session lasts 30 days.
• Your room and its plan.

Payments

• Payments are handled by Stripe. Your card details go to Stripe, never to us. We keep your Stripe customer ID and your subscriptions' status and plan. Stripe keeps the billing details (name, email, country, invoices) under its own privacy policy.

Why, and on what legal basis

• To run the game, your room and your plan — to perform our contract with you.
• To show a team its leaderboard — our and the host's legitimate interest in running the team's games; the data is a nickname and game numbers, kept for a short time.
• To keep the service secure and working (logs, abuse prevention) and to understand how many people visit and play (aggregate analytics) — our legitimate interests, which don't override your rights because the data is minimal and not used to profile you.
• To keep payment and tax records — our legal obligations.

Who else handles it

• Cloudflare, Inc. — hosting, database and web analytics.
• Google LLC — sign-in, only if you sign in.
• Stripe Payments Europe, Ltd. and Stripe, Inc. — payments, only if you buy a plan.

They process data on our behalf or as independent controllers for their own services. Some of it is processed in the United States; those transfers rely on the UK and EU adequacy arrangements for certified companies (the EU–US Data Privacy Framework and its UK extension) or on standard contractual clauses.

How long we keep it

• Nicknames and scores in a match: while you play and 10 minutes after.
• Leaderboard numbers: 90 days; a player not seen for 90 days is deleted with their key and numbers.
• An Event's results (nicknames and their numbers in that event): for as long as the host's team exists, so the team can look back at it; the host can take a player off them, and we delete a player's results on request.
• Server logs: a few days.
• Sign-in sessions: 30 days, or until you sign out.
• Your host account and room: until you ask us to delete them.
• Payment records: 6 years, as UK tax law requires.

Cookies and browser storage

We set cookies only for signed-in hosts: the session cookie that keeps you signed in, and a short-lived cookie during Google sign-in. Both are strictly necessary, so we don't ask for consent. The game keeps your settings, and the player key for team leaderboards, in your browser's local storage. There are no advertising or tracking cookies.

Your rights

You can ask us to see, correct, export or delete your data, to restrict how we use it, or object to how we use it. Email [contact email] from the address you sign in with; we answer within one month. To delete your host account, email us: we delete your account, your room and your sessions within 30 days, and cancel any subscription (payment records stay for as long as the law requires).

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.

Children

Synergy Cascade is a shooter made for teams at work and is not meant for children under 16.

Changes

We'll post any change here with a new date, and email hosts about significant ones.