7 Seconds is a multiplayer strategy game available on the web and on Android via Google Play. The game can be played locally (on a single device) or online against another player. This policy explains what data is involved in each mode.
When playing locally (Battle, vs AI, or Horde modes), the game runs entirely on your device. No data is collected, transmitted, or shared. No server communication occurs.
When you choose to play online, the game establishes a direct peer-to-peer (P2P) connection with the other player using WebRTC. This involves the following data processing:
| Data | Purpose | Storage |
|---|---|---|
| IP address | Required by WebRTC to establish a direct connection between players | Not stored by us. Your IP address is typically visible to the other player as an inherent part of P2P networking. When a relay (TURN) server is used, your IP is visible to the relay provider instead. Supabase, Cloudflare, and TURN relay providers (Metered.ca, freestun.net) may log your IP address as part of standard infrastructure operations (see Third-Party Services below). |
| Signaling messages (SDP offers, ICE candidates) | Connection setup — exchanged via Supabase Realtime to establish the P2P link | Message content is ephemeral and not persisted. Connection metadata (including IP address) may be retained in Supabase infrastructure logs for up to 7 days depending on plan tier. |
| Game state (unit positions, events, results) | Gameplay synchronization between players | Transmitted between players via encrypted connection (DTLS), either directly (P2P) or through an encrypted relay (TURN) when direct connection is not possible. Game data is not stored on any server. |
| Player ID (random UUID) | Identifies you to your opponent for rematch requests and score tracking | Stored locally on your device (localStorage). Not linked to your identity. |
| Win/loss record | Tracks your results against each opponent | Stored locally on your device only (localStorage). Never transmitted to a server. |
Important: Online play uses peer-to-peer connections. Your public IP address may be visible to the other player during connection negotiation, and their IP address may be visible to you. This is an inherent property of WebRTC P2P connections. When a direct connection is not possible (e.g., on mobile networks), game traffic is routed through a TURN relay server, in which case the relay provider also processes your IP address. If you do not want your IP address exposed, do not use online play.
The following third-party services are used only during online play:
No analytics, advertising, tracking, or telemetry services are used.
The game does not use cookies. It uses browser localStorage to store:
All localStorage data stays on your device and is never transmitted to any server. You can clear it at any time through your browser settings.
This app does not intentionally collect personal data. No accounts, logins, or registrations are required. The only personal data processed is your IP address during online play, as described above.
For users in the European Economic Area: the processing of IP addresses during online play is based on Legitimate Interest (GDPR Art. 6(1)(f)). The IP address exchange is technically necessary for establishing a peer-to-peer connection and is initiated by the user choosing to play online. No IP addresses are logged or stored by this app. However, third-party infrastructure providers (Supabase, Cloudflare, Metered.ca, freestun.net) may retain connection metadata including IP addresses in their standard operational logs, as described in the Third-Party Services section above.
If you are in the EEA, you have the right to:
Since no personal data is stored on any server, there is nothing to access or delete server-side. You can clear locally stored data (player ID, scores) through your browser or app settings at any time.
The Android app does not request any special permissions beyond what is required to run.
This app is not directed at children under 13. Online features require users to be 13 or older. The app does not knowingly collect personal information from children under 13.
If this policy is updated, the changes will be posted on this page with a revised date.
If you have questions about this privacy policy, you can reach the developer at github.com/johannesjo/7-seconds.
Last updated: March 10, 2026