Playtest program
Data Policy
Version: 2026-06-23-data-policy-v1 — Effective 2026-06-23
This policy covers the CyberDeck invite-only playtest program. It explains exactly what we collect, why we collect it, and what happens to your data. If you have questions or want your data deleted, reach out on our Discord.
What we collect
- Account credentials: your email address and a hashed (bcrypt) password. We never store your password in plain text.
- Invite cohort: which invite key you used to join, so we know which wave of testers you're part of.
- Gameplay telemetry: session length, run outcomes, card plays, operator choices, map routes, and similar in-game event data. This is the primary signal we use to improve balance and identify bugs.
- In-game feedback reports: when you hit the feedback button in-game, we collect the text you type, a snapshot of the current game state (deck, board, run progress), and a short screen clip or screenshot of the moment.
- IP address: recorded on account creation and login for abuse prevention. Not linked to gameplay events.
- Optional Twitch information: if you choose to register a Twitch handle and channel URL, we store those and display them on the public leaderboard.
Why we collect it
- Run the playtest program: account credentials let you log in; invite cohort data lets us manage wave access.
- Improve the game: gameplay telemetry and feedback reports are the entire point. We read every report and ship balance changes directly from them.
- Operate the public leaderboard: playtime and bug counts are aggregated and displayed publicly so testers can see each other's contributions. Twitch handles (if provided) are linked to the channel URL you supplied.
- Detect and prevent abuse: IP address and session data let us identify account sharing, key reselling, and other violations of the playtest terms.
What is and is not public
| Data | Public? |
|---|---|
| Display name or Twitch handle | Yes — shown on leaderboard |
| Playtime (total seconds) | Yes — shown on leaderboard |
| Bugs filed and bugs approved (counts) | Yes — shown on leaderboard |
| Twitch channel URL (if provided) | Yes — linked from your handle on leaderboard |
| Email address | Never public |
| Password (hashed) | Never public |
| IP address | Never public |
| Gameplay telemetry (individual runs) | Internal studio only — aggregated for balance, never shared individually |
| Feedback report text | Internal studio only |
Who has access
Your data is accessible to the CyberSprawl internal studio team and our infrastructure providers:
- Cloudflare: hosts the playtest worker, D1 database, and KV store that store your account and session data.
- CyberSprawl studio team: developers and designers who read feedback reports and telemetry to improve the game.
We do not sell your data to third parties. We do not share your data with advertisers.
Retention and deletion
Your data is retained for the duration of the playtest program. When the playtest concludes, playtest account data will be deleted within 90 days of program end.
You can request deletion of your account and all associated data at any time by messaging us on Discord with the subject "data deletion request" and the email address on your account. We will action deletion requests within 30 days.
Screenshots and screen content
CyberDeck is an early development build. It does not reflect the final quality of the release. If you choose to share screenshots or recordings publicly, please include context that this is a pre-release playtest build.
Account sharing
Playtest accounts are single-user. Sharing your login credentials with another person is a violation of the playtest terms and will result in your access being revoked. Invite keys may not be resold or gifted — they are tied to the email address used to redeem them.
Changes to this policy
If this policy changes materially, we will update the version identifier above and prompt you to re-accept the next time you log in. The version identifier is machine-readable and is what the playtest backend uses to track acceptance.