LAST UPDATED: SEPTEMBER 30, 2026
Privacy policy
This policy covers the game Margin Legends and the website marginlegends.com. Both are run by Margin Legends (“we”). You can reach us at support@marginlegends.com.
The short version
You can play without an account. If you make one, we keep your email, your username and a scrambled version of your password, and nothing else about you. There are no ads and no advertising trackers, and we do not sell data.
This website
The website counts visits with Cloudflare Web Analytics: which pages are viewed, the site a visitor came from, the country, and the type of browser and device. It sets no cookies and does not identify you or follow you to other sites. There are no advertising trackers.
The site is hosted on Cloudflare, which processes technical request data (such as IP address) to deliver and protect it.
Release news by email
If you leave your email address in the sign-up box on this website, we store it and use it only to send you news about Margin Legends, such as the release. We do not share it. To stop, follow the instruction in any of those emails or write to us, and we delete the address.
Playing without an account
When you start a battle, the game sends your formation for that round to our server: which units you placed, their levels and their positions, plus a random id for that run. Other players may then face that formation as an opponent. These records are not linked to your name, email or device. We also count how often a formation wins, and weak formations are removed. Only a limited number of formations are kept per round; the oldest are deleted.
The game also keeps some files on your device: formations you have faced, your sticker album, whether you finished the tutorial, and your sign-in if you have one.
If you create an account
An account is optional. We store:
- your email address, used to verify the account and to reset your password;
- your username, which is public: other players see it when they face one of your formations;
- your password only as a salted hash, never the password itself;
- sign-in sessions (kept for up to 90 days) and one-time codes (valid for 15 minutes), both stored as hashes.
Formations you upload while signed in are linked to your account so your username can be shown with them.
Emails the game sends
The game only emails you a verification code or a password reset code that you asked for. These emails are delivered through Resend, an email delivery service, which receives your email address and the message for that purpose.
Where data is stored
The game server and its database run on Cloudflare. Your IP address is used briefly to limit abuse (too many requests); we do not store it in our database.
Deleting your account
In the game, open your account card and choose Delete account, then confirm with your password. This removes your email, username, password hash and all sign-in sessions. Formations you uploaded stay in the game but are no longer linked to you, and your name is no longer shown. You can also ask us to delete your account by email. The steps are on the account deletion page.
Children
Margin Legends is not directed at children under 13, and accounts are for players aged 13 and over. The game does not ask for a name, age, location or contacts. We do not knowingly collect personal data from children under 13; if you believe a child has given us an email address, write to us and we will delete it.
Your choices
You can ask what we hold about you, or ask us to correct or delete it, by writing to the address below.
Changes
If this policy changes, the date at the top of the page changes with it.
Contact
Questions or requests: support@marginlegends.com. If you email us, your address and message are shared with us and our email provider.