BoredByte

Privacy policy

Last updated 17 October 2026.

This policy describes how personal information is handled for Titan Duel Seekers and the supporting website operated under the BoredByte name. The game client and the website are separate systems. The public website address in use while this site is hosted on Cloudflare Pages is https://titan-duel-seekers-website.pages.dev/. The intended long-term site address is boredbytegames.com when that domain is connected.

Who operates this

BoredByte develops Titan Duel Seekers and operates this website. BoredByte is the developer brand for the project. This policy does not claim that BoredByte is a particular form of registered company.

Information the website collects

If you send a support report through the website form, the site stores: your name, email address if you provided one, platform, game version, short summary, detailed description, a server-generated report id, creation time, and a status such as new, reviewed, or closed.

If you send an account deletion request through the delete account page, the site stores: the account email, optional display name, platform, optional contact email, optional notes, a server-generated request id, creation time, and a status such as new, reviewed, or closed. The form never asks for a password. Submitting that form stores a request for manual review; it does not delete a game account by itself.

When you use website forms, the site may set a short-lived CSRF cookie used only to protect form submissions. The website operator may receive an admin session cookie after signing in to the private admin area. Visitors do not receive a player account cookie from this website. The website does not create Titan Duel Seekers game accounts.

Published news and patch notes are stored as website content and shown publicly. The site may also keep short-lived rate-limit counters (for example after many support or admin sign-in attempts) so abuse is harder.

Do not put a game password, payment number, or another person’s private information in a support report.

Why the website uses that information

Support reports are stored so the operator can read, triage, and close bug reports. Deletion requests are stored so the operator can verify ownership and process account removal manually. CSRF and admin cookies exist to protect forms and the admin area. News is stored to publish updates to players. Rate-limit data exists to reduce spam and brute-force attempts.

Information the game collects

Accounts are created and signed in inside the game client, not on this website. The game server stores the email address you register and a password verifier created with a salted PBKDF2-SHA256 derivation (the password itself is not stored in plain text). After sign-in, the server stores the player profile saved from the client. That profile includes information such as display name, decks, card collection, rank-related progress, and in-game resources (for example golden seeds).

If you send a report from inside the game, the game server stores that report text with the account email used for the request. This website cannot view, edit, or delete game-server account or report data.

Why the game uses that information

Account and profile data are used to let you sign in, keep progress, play ranked and other modes that need a saved profile, and operate the game service. In-game reports are used to investigate problems.

Where information is stored

On the public Cloudflare Pages deployment, website news, support reports, deletion requests, and related website state are stored in Cloudflare KV. The dynamic website runs as Cloudflare Pages Functions. Static pages and assets are hosted on Cloudflare Pages. Local development may instead store website news, reports, and deletion requests in files on the operator’s machine.

Game account and profile data are stored on the separate game server infrastructure used by Titan Duel Seekers (including the public game API path associated with play.boredbytegames.com). That infrastructure is not the same store as the website KV namespace.

Sharing

BoredByte does not sell website support reports. Hosting and delivery of the website use Cloudflare. Windows downloads are offered through a link to itch.io; if you open that link, itch.io’s own terms and privacy policy apply. The game server is operated separately from these web pages. This website does not share your game password with third parties, and it does not receive your game password at all.

Advertising and analytics

This website does not run advertising or analytics scripts. A review of the game client scripts used for Titan Duel Seekers did not find an integrated live advertising SDK (such as AdMob or Unity Ads). In-game “reward” UI refers to game rewards such as golden seeds, not a third-party ad network. If an advertising SDK is added later, this policy should be updated before that build is published.

Security

The website uses HTTPS on Cloudflare Pages, HttpOnly cookies for admin and CSRF protection, and server-side validation for support reports. The game server stores passwords as salted PBKDF2-SHA256 verifiers. No system is perfectly secure, and this policy does not promise that data can never be lost or accessed without authorization.

Retention

Website support reports and deletion requests remain until the operator removes them. Marking an item closed in the admin area keeps the text and changes its status; it does not by itself erase the record. The support inbox is capped (currently 500 reports) and the deletion-request inbox is capped (currently 200 requests); when full, new submissions are rejected until space exists. There is no automatic timed erasure of these website records in the current implementation.

Game-server reports are kept by the game service; the current server implementation keeps a limited recent list and drops older entries when that list grows past its cap. Exact calendar retention for accounts and profiles depends on how long the service is operated and any deletion you perform in the game.

Your choices and rights

You can choose not to send a website support report, and you can omit the optional email field. For privacy questions about this website, use the support form.

Game accounts are created, signed out, and deleted from screens inside the game client. Account deletion in the game removes that saved profile from the game server according to the game’s authenticated delete flow. If you cannot use the in-game delete screen, use the delete account page to request manual deletion after ownership is verified. This website cannot delete a game account automatically from an unverified form. If you need help with a website support report you submitted, describe the request in a new support message.

Children

This website is not directed at young children. Do not include a child’s personal details in a support report. This policy does not set or replace any store age rating for the game build.

Contact

Privacy questions about this website: support form.

Stable policy URL on the current Pages host: https://titan-duel-seekers-website.pages.dev/privacy/