Privacy & cookies
Updated September 11, 2026
This page explains how GemWar uses information when you visit gemwar.com, create an account and play.
Your advertising choices
Advertising tracking is optional. You can reject it and still register, sign in and play. You can change your Google and Meta choices independently at any time.
For visitors identified as being in the UK, Canada and other countries outside the United States and Australia, advertising tracking stays off until you accept it. If we cannot identify your country, we also wait for consent. US and Australian visitors receive a notice and can opt out. A Global Privacy Control signal switches advertising tracking off.
We remember choices for up to six months in an essential preference cookie. Rejecting or withdrawing permission stops future advertising tracking and removes advertising cookies that our site can access. Withdrawal does not undo information already sent while tracking was permitted. Changing an active preference may reload the page to stop an advertising service that was already running.
Account and gameplay information
We collect your email address, password hash, chosen character name and portrait, and game progress to provide and secure your account. If you use Sign in with Google, we receive the identity information needed to authenticate you, including your Google account identifier and email address. We do not receive your Google password.
We record account, gameplay and operational events to run the game, investigate errors and abuse, and understand game performance. Our servers also process connection information such as IP addresses. These first-party records are separate from the optional Google and Meta advertising services.
Payments and service providers
Stripe processes card payments. GemWar does not store your full card number. Stripe receives information needed to process purchases under its privacy policy. We retain purchase and account records needed to provide the service, resolve disputes, prevent fraud and meet applicable obligations.
Advertising services
When permitted by your choices, we use Google Ads to measure visits and successful signups and Meta Pixel to measure visits to the character-creation step following signup. These services may receive cookie identifiers, your IP address, browser/device information, page URLs, ad-click information and the reported activity. Google receives a signup transaction identifier for duplicate prevention. We do not intentionally send passwords, character names or email form values to these advertising tags.
Information is shared with Google and Meta for advertising measurement. They may associate activity with other information they hold. Their privacy policies explain their processing, international transfers and available rights. Optional advertising tracking is not required for Google sign-in.
| Cookie or group | Purpose | Duration |
|---|---|---|
| GEMWAR_3D_SESSION | Essential sign-in and account security | Up to 30 days |
| gw_ad_consent | Essential record of advertising choices and their date | Up to six months |
| gw_ad_notice | Remembers dismissal of the US/Australia notice; this is not acceptance of tracking | Up to six months |
| gw3d_gclid, gw3d_utm_*, gw3d_device, gw3d_lp | Optional campaign attribution when Google or Meta measurement is allowed. Google click identifiers require Google consent. | Up to 30 days |
| _fbp, _fbc, _gcl_* | Optional Meta/Google advertising identifiers, when set | Provider-defined; commonly up to 90 days |
Country detection
We estimate your country from your connection's IP address using a database on our server. This does not send your IP address to the database provider. Estimates can be inaccurate, including when a VPN is used.
IP Geolocation by DB-IP, licensed under CC BY 4.0. We convert the monthly IP to Country Lite data into local lookup tables.
Your information and requests
Depending on where you live, you may have rights to access, correct or delete information, object to certain uses, withdraw consent, or opt out of advertising-related sharing. Use Cookie settings for advertising preferences or email playgemwar@gmail.com for account/privacy requests. We retain information only for as long as needed for the purposes described above and applicable obligations.
GemWar is not intended for children under 13. Contact support if you believe a child under 13 has supplied personal information. We may update this notice as the service changes; the date above identifies this version.