Iceband Privacy

Last updated October 17, 2026

Iceband is a free, non-commercial browser game, an unofficial fan project. This page explains what information the game stores, what it sends, who handles it, and what other players can see. “We” means the person who runs Iceband.

Playing without an account

Your character, your current run and your settings are saved in your browser’s local storage on your device. They are not sent anywhere. When the game updates, it upgrades your save in place and keeps a backup copy in the same storage. Clearing this site’s data in your browser deletes them.

Error reports

When the game hits an error, the page sends a report to Sentry, an error-tracking service, so we can find and fix the bug. A report contains:

• the error message and where in the game’s code it happened;
• the game version;
• your browser and operating system, as your browser reports them;
• the page address;
• where you were in the game: floor, class, race and which screen was open;
• the last few buttons clicked and messages the game logged just before the error.

A report never contains your name, your account or your IP address: Sentry receives the report like any website receives a request, but it is set not to record your IP address. There is no session or usage tracking, and each page load sends at most 10 reports. Sentry keeps reports for 30 days, on servers in the United States.

Accounts

An account is optional. It lets you keep your runs in the cloud, continue on another device, and appear on the leaderboards. You can make one in two ways.

With a username and password. You choose a username (to log in, never shown to other players), a password and a player name. As you type a player name, the page asks our server whether it’s free. Your password goes to our sign-in service, Supabase, which stores only a scrambled form of it that can’t be turned back into the password. We never see it. A username account has no email address: we give it a placeholder address (your username at players.iceband.net) that is never used to send email.

With Discord or Google.

• Discord or Google handles the sign-in. You enter your password on their page, and we never see, receive or store it.
• With your permission, they send us your account ID with them, your display name, a link to your profile picture and your email address. That is all we ask for.
• We get no access to anything else in your account: not your Discord servers, messages or friends, and not your Gmail, Drive, contacts or other Google data.
• We use this information only to recognize you when you come back and to keep your saves and scores with your account.
• Your email address is kept with your account by our sign-in service. We don’t send you email, never show your address to anyone, and never share it.

Iceband’s use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

What we keep with an account

• Your account: your player name and when you last changed it (names can change once a week); your username, if you made a username account; the account ID, display name, profile picture link and email address from Discord or Google, if you signed in with them; and when you signed up and last signed in.
• Your saves: your characters (up to three, plus the weekly run), saved to the cloud as you play, and the character one replaced if you chose between two. When a character dies or is replaced, its cloud save is cleared and a note that its run ended is kept, so an old copy can’t bring it back.
• Your records: your Hall of Honor and Hall of the Dead entries and what you’ve unlocked.
• Your scores: your leaderboard entries (each run you finish while signed in: your character’s name, race, class and level, the score, how far you got, what ended the run and when, and the game version) and, for each run you start while signed in, a record of the moves you make in it (each key, button and tap that plays the game, in order, with how far the run had got), so its score can be checked by replaying it. The record goes to your account with your cloud save as you play.
• Reports you send: which entry you reported, the reason you chose and any note you added, so moderators can review it.
• Moderation records: if a moderator hides one of your entries, clears your player name or bars you from the leaderboards, a record of it with the reason. You see the reason in the game where it applies.
• Security records: our sign-in service records the IP address and browser of each sign-in and active session, to protect accounts from misuse. Session records are removed when you sign out or delete your account; the service’s own sign-in logs expire after a short time.

We keep these until you delete your account.

What other players can see

The leaderboards (the Hall of Honor and the weekly run) show the player name you choose in the game, your character’s name, race, class and level, your score, how far you got, what ended the run and the date. They show your player name as it is now, so changing it changes it on all your entries. Your username, your email address and your Discord or Google account details are never shown. Names have to follow the game’s naming rules; entries that break them can be hidden from the boards.

If you report an entry, the player you report never sees who sent the report. Our moderators see reports, including the player name of whoever sent them, and use them only to review the entry.

Security check on sign-in

The log-in and register screens use Cloudflare Turnstile to check that a real person, not a bot, is signing in. It loads from Cloudflare only on those screens. To do the check, Cloudflare processes signals such as your IP address and browser details, only to tell people from bots, under Cloudflare’s Turnstile privacy policy.

Players online

The title screen shows how many people are playing. To count them, each open game sends a random number to Supabase once a minute. It isn’t linked to you, your account or your browser, and it is deleted after 10 minutes.

Services we use

• Cloudflare hosts the site. Like any web host, it handles your IP address to deliver the pages and to block attacks. We haven’t turned on any visitor analytics or logging.
• Supabase runs accounts, cloud saves, records, leaderboards, reports and the players-online count.
• Cloudflare Turnstile runs the security check on the log-in and register screens.
• Sentry receives error reports, as described above.
• Discord and Google handle sign-in, under their own privacy policies: Discord, Google.

These services may process information in the United States and other countries. Apart from them, no one else receives your information. The game’s fonts, art and code are built into the page; the only other things it loads are the security check, on the log-in and register screens, and its requests to Supabase.

What we don’t do

No ads, no analytics or tracking scripts, no cookies set by Iceband, no selling, renting or sharing your information, and no paid tiers or donations.

Storage in your browser

The game uses your browser’s local storage for your saves, their backups, your records and your settings; if you sign in, for your sign-in session, so you stay signed in, and a note of which save was last sent to the cloud. Each tab also keeps two things in its session storage, which the browser clears when the tab closes: the random number used for the players-online count, and whether you chose to play as a guest. It uses nothing else. Signing out removes your account’s save, records and sign-in session from the browser.

Your choices

• Play without an account; nothing about you leaves your device except error reports and the anonymous players-online count.
• Delete your account at any time from the game’s account menu. This deletes your account, your cloud save, your records, your leaderboard entries and the records of your runs’ moves, the reports you sent and the moderation records about you.
• Disconnect Iceband from your Discord account (User Settings → Authorized Apps) or your Google account at any time.
• Ask us for a copy of the information we hold about you, or to correct or delete it, using the contact below.

Children

Iceband accounts are not meant for children under 13. If we learn that a child under 13 has signed in, we delete the account.

Changes to this page

If what Iceband collects or how it uses it changes, we will update this page and the date at the top before the change goes live.

Contact

For privacy questions, or to ask for a copy of the information we hold about you or to have it corrected or deleted, email privacy@iceband.net.