Privacy

Last updated:

Nine Lives Market is a browser game made by the Nine Lives Market team. This page explains what we store when you visit ninelivesmarket.fun or play the game at play.ninelivesmarket.fun, and what you can ask us to do with it. Short version: we ask only for a nickname, we do not sell or share anything, and there are no ads or third-party trackers.

The website (ninelivesmarket.fun)

  • The site sets no cookies and has no forms.
  • We count visits with Cloudflare Web Analytics. According to Cloudflare, it uses no cookies or local storage and does not track you across sites. It records the page, the referring site, your browser type and your country.
  • Fonts and images are served from our own site.

The game (play.ninelivesmarket.fun)

There are no accounts. You pick a nickname, and the game remembers you with a guest key.

What we store on our server:

  • Your nickname (3–16 characters), shown to the other players in your room. After you change it, the old name is held for 24 hours.
  • A record of your guest identity: a random id, a hash of your guest key (never the key itself), when it was created, when you last connected, when you first started a match, when you last changed your nickname, and whether you finished the first guided match.
  • Purchases (such as a Founder Pack), once they exist, so you keep them.

These records live on our own server in Ukraine. We do not use a hosting provider. The server keeps one backup copy of this file on the same disk. The copy is rewritten every time a record is deleted or removed, so a deleted record normally does not stay in it; if a rewrite ever fails, the copy is replaced at the next change. If the file is ever damaged, the server sets the damaged copy aside and deletes it after 7 days. There are no off-site backups.

What your browser stores:

  • One cookie, __Host-nlm_gt: your guest key. It is required for the game to recognise you, page scripts cannot read it, and it lasts 400 days from your last visit. Clearing site data deletes it, and the game will then treat you as a new guest.
  • Room resume data: the current room and seat ids, in session storage until the tab closes and in local storage for 12 hours, so a game can continue after a reload. It holds no personal data.
  • Your settings, such as graphics and sound volume, in local storage.

What we use only while it is needed:

  • Matches (rooms, builds, Combat, results) live in server memory and are not written to disk.
  • Your IP address is used in memory for rate limits and temporary bans against abuse. Our game server does not write it to its logs. It is kept only until the rate-limit window or a temporary ban expires (at most 30 days), or until the server restarts.

There is no chat. Bots are not people and hold no personal data.

Server logs

To fix crashes and handle abuse, our server logs record nicknames, room and match ids, game events, and error reports from your browser (the browser version string and the error message). Our game server's logs never contain your guest key, its hash, or your IP address. Logs are deleted after 48 hours.

Who else processes data

  • Cloudflare runs the network in front of our site and game. It handles all traffic, including your IP address, under Cloudflare's privacy policy. Cloudflare also hosts this website.
  • itch.io: if you play the game on itch.io, itch.io serves that page and sees your visit under its own privacy policy.

We do not sell, rent or share your data with anyone else. We show no ads.

How long we keep it

  • Guest identities that never started a match are deleted after 7 days (sooner if the server runs out of room, oldest first). Others are deleted after 180 days without connecting to the game, unless they hold a purchase.
  • Server logs: 48 hours.
  • Matches live in server memory until they end. The game events in our logs are kept for 48 hours.
  • Browser data: as listed above, or until you clear site data.

Why we use it

We use this data to run the game you asked to play (your nickname, guest key and matches) and, as our legitimate interest, to keep the game working and fair (logs, rate limits, bans). We do not use it for advertising or profiling.

Your choices and rights

You can:

  • change your nickname in the game;
  • delete your local data at any time by clearing site data for ninelivesmarket.fun in your browser;
  • ask us to send you, correct or delete what we hold about your guest identity, or object to how we use it.

There is no delete button in the game yet. Write to privacy@ninelivesmarket.fun and include your nickname. Since there are no accounts, before we send, change or delete anything we will ask you to confirm the guest identity is yours from the browser you play in (the one that holds your guest key). This stops anyone from deleting or reading another player's data by naming their nickname. We reply within 30 days. If you think we handle your data wrongly, you can also complain to your local data protection authority.

If you are a parent and want your child's nickname removed, write to the same address. We will check the request the same way, or review it by hand.

Changes

If this page changes, we update the date at the top. If a change adds a new kind of data (such as sign-in, payments or game analytics), we will say so here before it goes live.