Privacy

What we ask for

• Email address and password, to sign in. Passwords are stored only as a secure hash.
• A handle and callsign, a portrait choice and your units. Your time zone is read once from your browser, so emails arrive at sensible hours; you can change it in game settings. Home country is optional.
• Your date of birth, to check you're 18 or over and to work out your age on the day of each result.
• Whether to compare you with men's or women's published tables. Armed forces publish fitness standards only in these two versions.
• The results you log. Your age on the day and your chosen tables are stored with each result, only to compare it with military standards that depend on them.
• We record which screens and game actions you use, including who you salute or challenge, to improve the game. Never your exercise numbers.

Who sees what

• Your results are private unless you choose a squad when saving them.
• Squad members see your callsign, handle and portrait. They never see your email, time zone, date of birth, age, chosen tables, private notes or unshared results.
• A squad captain can tap a couple of options to tell MCC what gets you moving and roughly how active you are, including on a call-up link before you join. Only that captain sees it. MCC uses it only to pick the tone of a few messages to you. It's in your data download. It stops being used if the squad is stood down, and it's deleted if you leave or are removed from the squad, or the captain hands over. You can turn captains' notes off in game settings, which deletes any about you.
• A "Beat my score" link shows your callsign and that one score to anyone who has the link, and only after you confirm that.
• Anyone with a squad link sees the squad's name and the callsign and portrait of the member who made it. A captain's call-up also shows the first name the captain typed, which we delete 30 days after the call-up expires.
• The "Beat my score" link preview image shows your callsign and that score, with no portrait.
• A challenge link you send shows your callsign and that score in the link preview, with no portrait.
• A squad-mate's duel card can show your callsign, never your handle, portrait or score. You can take your callsign off it in game settings.
• If you turn down a squad-mate's challenge with an excuse, only that squad-mate sees it, in the app. If you let it expire quietly, nobody is told.
• Leaving a squad stops it seeing anything you shared with it.
• We don't show whether you're online, track your location, or read your contacts.

Your controls

• Download: Settings, then "Download my data", gives you everything you've put in, and the screens and game actions we recorded, as a file.
• Delete: account security, then "Delete account". Your results, notes and awards are removed. Other players keep their own history, with you shown as "A former recruit".
• Game emails: choose which you get in game settings, or use the unsubscribe link in any game email. A call-up email a captain asks us to send is separate: it's one email, with its own "Don't email me again" link.

Game emails

• Duels & challenges, Squad competition and Weekly squad dispatch emails are on when you join, unless you untick the box when you sign up. Military victories & PBs emails are off unless you turn them on.
• Every game email links to notification settings and has an unsubscribe link. Account emails, like password resets, can't be turned off.
• Game emails contain no tracking image, so we don't know whether you open them.
• Links in game emails say which email they came from. When you follow one, we record the click and whether you reached the page signed in. After a game email, we also record whether within a day you came back, logged a result, answered or sent a duel, saluted a squad-mate or joined a mission. It shows us which emails are worth sending. We delete these records after 180 days.
• We also record when you turn an email type on or off, and where you did it, and delete that after 180 days too. Your choices themselves stay until you change them. Your download includes all of this, and deleting your account deletes it.

Call-up emails

• If a captain asks us to email you a call-up, we send that one email, with no reminders. Your address isn't saved: it waits, encrypted, only until the email is sent. If sending crashes, the encrypted copy is deleted within two days.
• We keep a scrambled fingerprint of your address for 180 days to limit repeat emails, or for good if you choose "Don't email me again". Our email provider keeps its own delivery record for a limited time.

Who runs the service

Operator

To be confirmed before launch

Contact

To be confirmed before launch

Postal address

To be confirmed before launch

Hosting

To be confirmed before launch

Email sent by

To be confirmed before launch

Backups

How long deleted data may stay in backups: to be confirmed before launch

Still to do before launch

• Legal review of this page.